Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/E2Mkk1kHV3BeY9Db374lCbpmKMk.roa
File: E2Mkk1kHV3BeY9Db374lCbpmKMk.roa (raw, json)
Hash identifier: tWxLsShNAINNaf/vqRQdJjbD3dnJA4q7heLcoeNWFPo=
Subject key identifier: 13:63:24:93:59:07:57:70:5E:63:D0:DB:DF:BE:25:09:BA:66:28:C9
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 09B3
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/E2Mkk1kHV3BeY9Db374lCbpmKMk.roa
Signing time: Sun 10 Nov 2024 23:55:02 +0000
ROA not before: Sun 10 Nov 2024 23:55:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 11 Nov 2024 03:55:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2483 (0x9b3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Nov 10 23:55:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=13632493590757705E63D0DBDFBE2509BA6628C9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:fc:31:6d:7a:00:a8:db:43:9f:75:97:bd:5e:
c3:1d:d7:dd:d5:cd:74:a6:8c:44:8b:f3:56:3c:5e:
71:12:50:3a:53:67:bd:eb:2b:f1:3c:a3:7e:75:90:
f7:c8:7e:6b:d1:0f:f1:41:ce:2b:1f:6f:b7:a1:ea:
c4:cb:39:07:56:fa:fa:3c:4e:9e:f8:69:fb:75:d6:
a8:09:ad:b9:16:b4:bd:0d:18:c0:95:49:ed:52:0c:
95:99:07:7b:bf:dd:40:ce:82:d3:68:a9:fc:69:47:
2b:04:3c:01:e2:fd:e0:ee:e6:2f:dd:47:78:fe:8c:
cd:4b:3e:29:46:cb:1b:58:1c:d6:8a:0c:64:89:9c:
27:5d:2d:e7:46:8f:e5:cc:f3:0d:f8:f0:38:3e:26:
33:b6:c3:45:fd:9a:32:e6:43:6e:ba:bf:3a:1a:27:
d5:16:d8:ad:c1:95:74:27:af:36:93:d5:35:70:23:
f9:d5:14:90:7d:92:cc:f2:f1:2d:19:bd:4a:0a:94:
4a:18:a6:de:7f:e7:c3:97:40:31:20:96:a5:77:8b:
ff:f8:f6:4e:8e:87:1f:58:e4:4e:d8:c8:16:a3:a8:
a5:b9:ca:eb:6f:c5:45:5b:27:16:a2:7b:5b:2b:2c:
46:cd:cb:ba:a9:ef:77:04:dd:c2:87:84:c8:ae:83:
09:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:63:24:93:59:07:57:70:5E:63:D0:DB:DF:BE:25:09:BA:66:28:C9
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/E2Mkk1kHV3BeY9Db374lCbpmKMk.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
44:43:b8:aa:da:ee:c1:76:b8:f5:b1:5f:21:7b:df:a2:2f:b3:
8e:c9:81:30:08:9e:64:ea:5a:4a:c7:38:6d:1b:84:fa:c4:bf:
ee:e3:41:d7:87:cd:37:d2:27:3e:c5:ca:92:95:3f:b0:a0:5a:
78:70:12:5f:ef:38:9d:9d:37:d9:73:b7:76:fc:d1:ad:ce:16:
6c:82:78:39:66:7f:b7:1e:7d:f4:21:e6:a2:58:b0:92:76:1b:
dc:db:0f:53:0e:d3:a4:75:1c:da:1f:6a:7a:ba:28:25:98:2c:
7c:3c:d0:64:ad:8a:65:0b:ca:8e:85:5c:b7:a5:50:15:56:ce:
72:dd:90:b4:ab:0c:79:50:7d:a3:dc:b9:70:d5:0b:75:02:02:
30:c2:3b:3b:9a:2f:f6:17:f9:57:02:12:f2:bb:c6:ea:5f:e7:
66:5e:c1:c0:63:c7:89:22:d9:34:13:de:1e:be:86:0c:32:16:
b7:ea:dc:07:37:5f:be:6f:90:a1:49:54:4f:21:35:7b:e6:92:
54:e9:d8:a4:3c:6f:ae:1c:f1:eb:11:d3:10:1d:85:25:ab:45:
d0:44:8c:e0:24:ab:9e:ad:a3:77:ac:41:01:67:57:f2:f5:17:
7e:42:08:8d:fb:fc:a2:d5:b2:91:8c:69:73:84:64:67:98:83:
c1:af:c8:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 11 06:55:07 2024 by rpki-client on console-fra.rpki-client.org