Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/EFCUrk5mopvwaGdlf6CZpaTafZU.roa
File: EFCUrk5mopvwaGdlf6CZpaTafZU.roa (raw, json)
Hash identifier: 01Q2tpk8cE1sFPH/ONKA+laaJagSFDXa9dibs5lmiLE=
Subject key identifier: 10:50:94:AE:4E:66:A2:9B:F0:68:67:65:7F:A0:99:A5:A4:DA:7D:95
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0950
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/EFCUrk5mopvwaGdlf6CZpaTafZU.roa
Signing time: Wed 30 Oct 2024 23:55:02 +0000
ROA not before: Wed 30 Oct 2024 23:55:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 31 Oct 2024 03:55:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2384 (0x950)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Oct 30 23:55:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=105094AE4E66A29BF06867657FA099A5A4DA7D95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:c2:94:e1:d0:7d:03:61:c5:f0:eb:74:fd:a2:
5b:3e:99:12:96:46:e3:9b:5e:d4:63:e1:cb:9b:1d:
a5:a8:8a:79:8c:80:76:45:c5:55:c0:23:da:aa:30:
e6:aa:2e:91:bd:ba:18:96:9d:0c:0e:19:7b:dd:ab:
9c:ec:f6:dc:f6:fa:05:80:b7:a7:4d:43:8b:9a:b8:
03:79:62:80:f5:30:ea:0f:8f:63:62:74:91:5e:d9:
94:65:51:c3:12:d7:53:06:73:13:38:e2:84:09:75:
e1:7f:66:7b:ab:60:1f:34:0d:ad:1e:5f:99:cb:94:
e7:f2:e5:b0:8b:42:37:08:aa:ac:41:f9:94:f5:12:
85:8f:f6:d6:0a:28:89:08:b8:00:89:0b:ca:e1:59:
c5:03:c5:09:26:47:82:57:42:9b:4f:6a:a3:f1:92:
da:f5:8c:24:50:0f:b8:45:9f:fb:19:2c:cc:48:cc:
36:9c:c6:24:b6:d7:94:06:6f:86:70:6d:3d:86:b2:
1b:4f:b6:e1:e0:27:ee:31:b6:26:44:17:f4:a7:f2:
3a:99:59:b2:0d:bf:63:b5:0f:1a:2e:e3:ad:fe:4f:
c2:f0:94:14:8f:82:74:67:bc:20:7c:fc:3f:91:5e:
a9:da:a5:15:a5:4f:53:70:24:57:7a:65:c5:87:5e:
ae:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:50:94:AE:4E:66:A2:9B:F0:68:67:65:7F:A0:99:A5:A4:DA:7D:95
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/EFCUrk5mopvwaGdlf6CZpaTafZU.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:0b:6d:7c:49:fa:27:9c:0a:d0:9e:f8:21:ba:80:5d:d4:3e:
66:d3:e8:24:fb:f8:b2:13:ac:8e:c8:49:1f:90:c6:0f:fb:ad:
c4:32:ee:2e:c3:cb:b5:10:46:e9:fd:cd:7f:b3:03:6a:9c:f8:
8b:92:e1:88:a5:17:2d:e2:2d:91:12:97:df:01:e1:01:bb:59:
3b:84:58:5d:75:d8:fe:e9:ab:12:bd:3c:8d:60:33:f2:53:dd:
35:61:48:0e:97:53:57:61:79:10:70:ab:2f:35:69:d4:8b:f3:
46:72:66:c8:a8:5b:1b:f4:1c:17:18:bf:c6:b0:6a:58:38:5a:
76:9c:73:ca:a9:8c:da:b0:79:fe:f0:ed:48:8c:7c:d7:24:c6:
22:0c:96:19:0d:e0:1b:7c:fc:9f:67:3b:ec:84:5e:53:f9:a3:
bd:6d:45:b6:92:72:ec:37:74:85:10:2e:d2:c7:c1:a4:74:ab:
81:ca:1e:82:9b:a0:51:13:fd:bb:bb:71:cb:71:42:99:ae:6d:
95:46:2b:50:e6:57:c1:58:d0:df:61:18:f3:e8:6a:20:6a:94:
2e:d4:44:62:78:42:4d:77:2a:ac:e9:58:16:61:56:02:57:71:
7f:16:e0:89:ce:02:08:7c:63:eb:c3:51:39:96:9f:34:9d:3e:
ce:99:56:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 31 05:07:06 2024 by rpki-client on console-fra.rpki-client.org