Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/GCxPAim3sxoR5pZq4jnG1vfmF7s.roa
File: GCxPAim3sxoR5pZq4jnG1vfmF7s.roa (raw, json)
Hash identifier: /s/aHCp/8HrbjZHrJSh7VpQ34UJtaPfrq52kgKQbxl0=
Subject key identifier: 18:2C:4F:02:29:B7:B3:1A:11:E6:96:6A:E2:39:C6:D6:F7:E6:17:BB
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 07D2
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/GCxPAim3sxoR5pZq4jnG1vfmF7s.roa
Signing time: Wed 18 Sep 2024 15:55:02 +0000
ROA not before: Wed 18 Sep 2024 15:55:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 18 Sep 2024 19:55:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2002 (0x7d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Sep 18 15:55:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=182C4F0229B7B31A11E6966AE239C6D6F7E617BB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:83:13:5b:1d:07:5e:55:b7:84:4b:e2:3e:a5:
36:69:81:d9:ca:53:fc:98:52:c1:91:e9:f3:ab:02:
62:55:ee:fc:c0:bd:92:03:b5:ed:6b:1a:2c:6f:e4:
d6:93:aa:94:33:3b:6d:a7:b9:cb:d0:2c:f1:80:9e:
f7:5f:32:2a:26:5a:d2:79:ee:30:c0:b7:45:e7:95:
ef:c5:ab:1a:1a:22:43:3d:81:df:60:83:88:4c:28:
24:c4:f4:73:cc:4e:06:94:b6:4b:93:92:9d:07:42:
c8:08:fe:d1:d9:8e:33:b0:f7:a1:13:6c:4e:09:a8:
dd:52:ae:63:ab:63:1a:67:4f:f5:8b:f1:40:4b:3d:
65:af:30:98:1e:9c:d8:79:f5:36:5d:64:85:7b:6f:
f7:5a:92:88:cc:6c:ee:d3:6b:08:42:35:cf:cd:0f:
98:5f:24:d6:8b:7f:3a:29:63:cd:40:11:cb:b3:5b:
1b:98:e2:e6:49:ad:bd:dc:c9:7d:1c:ec:85:13:ce:
eb:87:eb:a7:67:6b:5f:ee:31:29:c2:63:af:04:4d:
48:61:0d:b0:0b:97:90:74:98:2d:ce:1a:0f:d7:9a:
c1:16:70:68:b7:23:53:bd:ed:b4:5d:bd:cb:52:93:
40:bc:62:a5:e1:e0:1d:c0:3e:db:13:b4:b4:d8:97:
c3:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:2C:4F:02:29:B7:B3:1A:11:E6:96:6A:E2:39:C6:D6:F7:E6:17:BB
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/GCxPAim3sxoR5pZq4jnG1vfmF7s.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
18:1b:c3:8d:b3:3f:a1:ce:6b:94:c4:e3:a3:df:af:cf:1a:e9:
e4:4a:1e:1f:3f:8c:2c:f0:45:ae:9a:5e:2a:78:f3:62:30:0f:
dd:f6:59:c8:7f:da:4d:76:7b:fd:6f:af:60:ca:74:6f:48:00:
39:3e:60:07:9d:75:97:37:f3:32:be:2c:06:ef:0c:05:6e:0e:
12:66:6b:d7:67:e9:2f:0b:ea:d8:e7:38:2c:f2:30:45:fa:46:
f2:37:5e:fd:db:f9:bb:99:dc:2d:c0:56:c9:f1:72:af:48:bf:
16:50:8b:33:75:55:83:00:9c:60:e7:85:74:d1:1b:a0:b9:f3:
9d:46:28:0c:07:bb:48:ae:b6:f7:a9:cd:1d:16:a6:89:4c:6b:
75:01:63:c5:37:07:97:3e:5e:0d:d9:fc:c6:d0:a1:ac:c1:eb:
69:76:86:67:65:e1:62:48:95:16:14:b7:c9:1e:40:99:06:57:
a8:73:de:04:74:e7:e6:fa:87:d9:42:7a:89:a8:7b:6e:1c:f7:
95:19:f8:72:d8:85:78:68:2f:c5:d9:cc:a0:4f:c2:4f:d5:32:
ad:54:af:e7:81:db:1b:0e:26:e5:0b:f1:e3:45:7e:b0:18:c6:
f3:f8:87:2f:9e:39:b9:94:18:bc:ea:a9:f2:34:72:65:19:20:
f2:3f:0d:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 18 22:27:24 2024 by rpki-client on console-fra.rpki-client.org