Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/EFch0vjThNgESw837laUnV2igzU.roa
File: EFch0vjThNgESw837laUnV2igzU.roa (raw, json)
Hash identifier: blcot3OyG2aMYlz5PL0nQFvJJv0kNRtiLdjHXtQUvN0=
Subject key identifier: 10:57:21:D2:F8:D3:84:D8:04:4B:0F:37:EE:56:94:9D:5D:A2:83:35
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0526
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/EFch0vjThNgESw837laUnV2igzU.roa
Signing time: Thu 04 Jul 2024 15:55:03 +0000
ROA not before: Thu 04 Jul 2024 15:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 04 Jul 2024 19:55:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1318 (0x526)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Jul 4 15:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=105721D2F8D384D8044B0F37EE56949D5DA28335
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:33:74:e4:8e:99:28:30:b3:ed:bb:06:b5:7f:
7e:07:48:05:7f:16:27:4b:e3:85:d1:fc:3b:47:d5:
87:bb:6d:e1:5a:1d:23:84:2e:c5:f4:43:2d:e0:9e:
ed:4b:4b:d7:1d:83:7e:45:f7:24:dc:80:06:cd:f8:
ae:5e:27:ad:96:c2:7e:f5:6d:98:21:b7:7c:53:f7:
74:51:0f:ee:1a:31:d8:4d:b5:3b:a2:77:c1:74:2f:
46:13:aa:df:63:e7:e6:29:f0:38:a0:77:08:a4:6c:
84:1a:14:5f:3f:cb:19:6c:2e:f4:ce:a7:e3:1d:bd:
96:2c:2b:10:8d:86:d9:d1:55:f3:fa:c6:e2:41:b9:
c3:50:03:83:f5:47:c6:d0:51:5a:fc:f0:62:93:0b:
4f:03:d2:e0:4a:ca:a7:47:41:19:d4:b7:9e:b6:13:
71:28:58:7a:58:07:2d:65:f8:46:4b:b9:1f:03:43:
05:53:d9:bb:dc:83:ca:6e:ca:41:05:ec:96:38:a1:
b6:97:f0:65:de:39:e6:04:85:1b:a6:44:3c:3b:7f:
1c:c6:4d:a3:2d:31:8a:28:65:30:a7:9f:de:a9:55:
38:46:56:86:67:1c:7c:c2:e0:eb:0e:6b:7b:a2:ff:
f1:3b:90:7a:39:bd:76:c2:e6:3c:80:6d:3b:8c:a4:
3d:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:57:21:D2:F8:D3:84:D8:04:4B:0F:37:EE:56:94:9D:5D:A2:83:35
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/EFch0vjThNgESw837laUnV2igzU.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
06:3d:5f:0a:8d:57:e8:8a:fe:2e:4f:7a:54:5e:c8:0b:e5:91:
37:f1:d9:61:90:f0:d0:85:22:8e:b2:d2:40:3a:c6:92:00:21:
05:3f:bd:64:a8:0c:7b:24:83:cf:98:e8:60:f7:e0:2c:01:de:
07:e2:19:46:d2:75:0c:b7:a2:5c:62:5e:17:b1:5c:48:6e:d9:
c9:07:9e:0a:d3:cb:6a:b1:a1:fd:61:f7:0c:c3:d9:2f:82:10:
19:7d:9a:f4:e1:2a:35:5f:f7:d1:6a:f4:b5:cc:17:e6:3b:ad:
40:ac:d4:89:82:6b:f1:7d:75:2d:14:4d:57:b8:20:b2:0d:ea:
ee:2c:f2:5a:79:d6:7e:c8:1a:d7:77:b3:89:95:41:25:84:46:
c3:06:dc:31:76:7d:7f:df:bc:61:a6:29:a8:df:68:46:a0:7f:
fc:eb:db:83:fc:b4:84:fd:47:60:e7:28:ba:88:dd:08:87:63:
27:74:49:ce:4b:fd:71:e4:81:85:90:7c:32:3f:8d:00:01:9e:
3c:2d:da:a5:8a:ee:a9:ad:df:93:50:1a:0d:6d:05:c1:b8:f0:
50:8a:32:e3:21:f8:23:9f:05:95:28:ff:19:11:57:24:d2:3f:
da:5f:e5:92:9a:06:ec:62:40:1c:78:e8:1e:1e:ee:1a:cb:2b:
72:98:9a:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 4 20:57:30 2024 by rpki-client on console-fra.rpki-client.org