Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/Ees4A8-z6rUAFd00PsgHJKAo2Jc.roa
File: Ees4A8-z6rUAFd00PsgHJKAo2Jc.roa (raw, json)
Hash identifier: RbZsSX2jrfL1I4TCIw3T5V51zXBOxgxOoIAkpwaPx/s=
Subject key identifier: 11:EB:38:03:CF:B3:EA:B5:00:15:DD:34:3E:C8:07:24:A0:28:D8:97
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 04B1
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/Ees4A8-z6rUAFd00PsgHJKAo2Jc.roa
Signing time: Fri 21 Jun 2024 15:55:03 +0000
ROA not before: Fri 21 Jun 2024 15:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 21 Jun 2024 19:55:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1201 (0x4b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Jun 21 15:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=11EB3803CFB3EAB50015DD343EC80724A028D897
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:98:b2:1b:d4:f0:6c:f8:42:d3:28:01:20:ec:
0d:44:6a:9b:07:b5:89:5f:03:e5:4e:d4:91:6d:a3:
3f:a6:37:c2:c4:77:0f:05:5a:05:65:5c:4b:8a:bb:
f6:7b:cf:8d:a2:04:31:a3:a9:dc:0e:40:83:21:1f:
0b:ec:0e:9f:c5:2b:02:0b:b1:25:da:49:d5:8b:fb:
af:2e:bb:26:12:48:08:88:d6:ae:64:3c:5d:9c:f5:
a4:d8:4f:64:ad:03:42:69:e1:ff:c0:f4:67:fd:ba:
1c:4f:2a:00:c3:d4:63:11:20:7e:a2:fd:56:bd:65:
2e:93:d6:35:79:3a:67:a1:96:bb:bc:14:00:d7:a2:
36:8d:77:b8:be:16:80:8b:e6:21:2c:34:8e:86:e8:
ad:07:c5:a5:41:d7:73:81:cc:53:6b:9d:3a:6d:5d:
08:df:78:ee:3a:bf:4d:a4:ad:45:80:a3:f7:52:4f:
15:44:82:43:9b:5d:ce:fe:78:dd:63:f4:be:1d:b3:
da:5e:58:16:87:05:14:fe:da:db:d3:24:71:a1:36:
43:aa:dd:50:fc:5c:85:d9:c0:fa:55:10:1e:75:9d:
80:bf:79:bf:10:0e:b9:05:f1:df:ac:21:a9:47:fe:
ce:f7:31:b1:8f:2e:6f:11:58:66:87:72:3c:b9:15:
78:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:EB:38:03:CF:B3:EA:B5:00:15:DD:34:3E:C8:07:24:A0:28:D8:97
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/Ees4A8-z6rUAFd00PsgHJKAo2Jc.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
10:87:70:29:a4:65:9b:60:84:20:66:17:99:49:11:8d:e7:7b:
f5:6b:17:27:8b:f0:b1:80:ad:7f:c2:52:02:6e:51:b2:1f:ea:
d5:90:64:c4:13:fa:75:b3:c9:4a:31:67:e6:5e:88:f3:69:44:
b7:69:fa:0a:93:9c:76:f4:bd:7b:2e:60:e5:d2:19:60:d2:27:
ca:9e:5f:5e:62:ae:e2:f1:a8:81:b5:c9:f9:3b:10:18:82:5a:
e0:7f:6c:8a:87:71:75:8a:9d:2c:d2:47:32:b2:c2:ef:03:a0:
9e:32:ac:d8:a7:08:f4:eb:42:b9:ee:92:d2:d5:b8:2f:ec:eb:
d8:4a:37:91:65:af:ad:f1:48:6b:a1:78:da:e5:82:95:aa:fa:
af:a2:11:ef:3a:06:7e:cd:69:dc:5a:30:2d:7e:a4:9a:1a:8b:
db:14:aa:fc:62:8a:c3:10:b5:c9:ea:3e:98:6c:20:16:fd:4f:
86:af:2f:f4:79:f4:f8:1b:68:ac:57:d0:0d:6b:b7:8b:db:82:
40:28:3a:60:5e:61:e3:3f:ba:7a:c1:a3:e9:55:33:a3:82:f9:
6a:2c:3d:31:ef:bb:8f:0f:61:7a:4b:79:6c:8a:63:c2:73:3c:
ad:5d:fa:80:dd:bb:bf:c7:6e:87:5b:0e:6a:c4:5a:05:0c:0c:
19:7e:75:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 23:29:14 2024 by rpki-client on console-ams.rpki-client.org