Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/Dnn_5rhzr4dKHhk4VrITlqBvBt4.roa
File: Dnn_5rhzr4dKHhk4VrITlqBvBt4.roa (raw, json)
Hash identifier: NDGL0IOTVgFUbcYsHj9ntGYz3P56bUzunevg4PsCA28=
Subject key identifier: 0E:79:FF:E6:B8:73:AF:87:4A:1E:19:38:56:B2:13:96:A0:6F:06:DE
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0938
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/Dnn_5rhzr4dKHhk4VrITlqBvBt4.roa
Signing time: Mon 28 Oct 2024 07:55:02 +0000
ROA not before: Mon 28 Oct 2024 07:55:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 28 Oct 2024 11:55:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2360 (0x938)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Oct 28 07:55:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0E79FFE6B873AF874A1E193856B21396A06F06DE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:37:cd:a4:dc:17:a6:a4:cb:b9:01:6a:6f:62:
3d:11:01:8b:74:76:0c:a9:4e:a5:f0:7c:45:44:2b:
0d:fe:9d:89:80:b5:2d:8f:7a:52:56:33:b7:a4:53:
aa:fa:4d:e3:6b:7d:a8:cb:2c:26:7b:be:37:ae:01:
ca:5b:f0:60:73:10:52:4d:ad:62:68:51:e7:36:2d:
16:cc:b2:bd:a6:72:db:ec:08:55:f1:50:26:72:a9:
e1:90:ae:d4:46:ab:6a:06:09:7c:d2:70:d7:e3:9c:
b1:b7:71:cc:be:9f:82:69:c3:fb:50:f6:a5:29:d2:
cb:c5:9a:07:42:08:37:0e:9f:72:74:b1:95:12:b0:
f2:09:25:39:38:b4:a8:ab:7b:82:70:0c:39:9c:5d:
55:e3:41:24:f5:1f:4a:2e:bb:60:b3:5d:ed:07:fd:
bf:7a:73:df:f3:60:73:1b:0c:88:e2:ee:e2:af:cf:
fc:6f:b7:7d:e9:69:59:81:22:6d:ea:55:82:2e:bf:
a3:00:9b:9c:2e:f2:a8:ec:bd:02:da:79:93:4b:a0:
f8:5e:d3:dd:a6:6c:93:c4:e3:cd:41:4f:29:cf:5d:
8d:95:02:b1:d1:b6:97:66:ba:74:6d:f3:75:2e:16:
d1:98:0c:4d:eb:f6:f8:47:26:33:ad:62:41:19:80:
b0:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:79:FF:E6:B8:73:AF:87:4A:1E:19:38:56:B2:13:96:A0:6F:06:DE
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/Dnn_5rhzr4dKHhk4VrITlqBvBt4.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
04:3b:ec:0c:e0:5e:c4:cd:2b:fd:68:1f:3d:20:cb:65:72:cf:
fc:86:6d:15:cf:d6:cd:7c:c5:19:3f:90:42:bc:61:65:1e:c2:
82:8b:3b:fa:13:15:e7:71:52:46:50:18:4e:21:ae:6a:65:81:
ca:c8:dd:b4:d0:55:d2:6f:c4:b5:a1:9e:ea:eb:40:f0:e6:20:
5b:dd:23:7a:2f:35:50:13:e7:c3:95:1d:88:d6:48:11:42:b3:
26:de:be:77:8e:7a:6c:54:00:10:3a:99:8d:92:58:b8:e3:34:
f5:91:96:e3:c6:af:91:39:e9:45:7b:59:3e:8f:0d:69:b4:ce:
a2:4d:4a:9a:b1:25:d2:3e:e0:8e:31:16:67:90:1f:58:6d:57:
ed:b8:67:2f:c7:d0:0b:25:4b:49:e1:34:64:a6:08:14:22:20:
53:d2:f6:4a:61:84:23:4c:b8:61:a3:e6:d5:8d:21:6f:5a:89:
6e:01:57:33:1d:cf:03:b9:9c:47:c9:f2:4c:1c:25:7c:7d:64:
6a:0d:f7:6a:68:c6:30:84:9a:c0:6c:ef:84:a3:91:54:8f:d8:
06:fa:ae:69:2b:2e:f4:96:dd:3a:42:ec:62:0e:98:b1:fb:85:
ae:27:c2:e6:bb:50:1c:cd:a2:35:63:33:3f:8d:70:00:da:c0:
e6:c5:76:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 28 14:24:42 2024 by rpki-client on console-ams.rpki-client.org