Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/G_JmIpmXU_tlU4yKAdSLO_DN0Ws.roa
File: G_JmIpmXU_tlU4yKAdSLO_DN0Ws.roa (raw, json)
Hash identifier: 9nbbygqgIF0RrCwtW1dBb55U/FE3aeFyhNpbeHAwSTU=
Subject key identifier: 1B:F2:66:22:99:97:53:FB:65:53:8C:8A:01:D4:8B:3B:F0:CD:D1:6B
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 61
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/G_JmIpmXU_tlU4yKAdSLO_DN0Ws.roa
Signing time: Mon 19 Feb 2024 23:55:04 +0000
ROA not before: Mon 19 Feb 2024 23:55:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 20 Feb 2024 03:55:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97 (0x61)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Feb 19 23:55:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1BF26622999753FB65538C8A01D48B3BF0CDD16B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:4e:df:4b:3d:5c:e0:72:ab:e8:14:2e:06:62:
c1:d7:c8:b4:45:9e:19:8a:0f:3d:d4:a1:dc:42:46:
b1:05:a2:83:93:6f:e2:39:88:29:72:f2:54:b5:59:
d3:3b:c0:5b:ab:4b:24:b1:4c:b3:3b:31:23:64:ab:
4b:46:d8:19:c0:b5:9a:b6:de:03:45:ec:ca:13:64:
29:17:16:c5:84:42:20:d8:2e:16:2a:84:56:d1:c6:
05:7f:5f:c3:8c:e8:c1:84:dc:53:99:4a:9f:6f:ce:
b6:9f:36:73:a0:ae:09:fc:d4:a1:29:e7:b3:b3:15:
85:77:a7:10:93:9b:f5:9b:b7:cb:c6:61:fa:2b:e2:
60:b1:f0:43:e8:5c:05:11:e5:ba:8c:41:3f:f1:00:
7b:a8:42:26:c2:a7:54:1a:04:a6:c4:ec:4c:9c:3d:
07:94:11:80:c4:47:b6:02:14:2f:e7:5c:a1:4c:6d:
b8:ca:29:7f:e9:85:7b:f2:fa:f8:b2:e6:de:72:cb:
f5:7f:9e:a6:01:c2:0d:bd:d6:c1:a1:8e:66:f9:cc:
94:67:6d:71:5a:7f:25:44:95:91:66:f3:ed:95:5f:
3f:c0:f8:60:87:84:ea:48:26:36:41:76:e1:cd:01:
0e:98:e5:e1:61:1e:f3:40:d3:2d:a9:8b:dd:78:0c:
6a:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:F2:66:22:99:97:53:FB:65:53:8C:8A:01:D4:8B:3B:F0:CD:D1:6B
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/G_JmIpmXU_tlU4yKAdSLO_DN0Ws.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
79:7e:72:c6:7f:f3:df:51:16:2f:0a:34:d1:3a:bf:90:c1:2e:
2f:53:ec:9d:ad:ee:27:f8:2a:b5:54:3b:3a:d2:2f:65:03:88:
d2:82:ea:8f:3a:50:0e:bb:c6:44:43:ec:fc:b1:bc:1c:4b:65:
09:3f:61:1d:70:f0:b2:66:3d:4f:c2:85:7d:1f:a4:52:d3:14:
7b:9c:6d:1a:1b:fc:21:88:c8:12:8c:58:a9:d5:15:7c:ed:52:
d1:9c:af:c0:43:37:e7:24:07:2e:94:7c:9a:67:7f:09:86:ad:
03:28:e0:b4:34:4f:3b:86:2a:9f:61:a0:18:54:20:f2:12:34:
e6:79:72:e9:01:1b:83:e8:36:f9:41:37:24:71:97:ad:25:c3:
c8:3a:e7:35:35:1b:74:1a:49:16:81:51:b5:c0:34:87:b5:fc:
73:3f:da:9d:a0:97:b6:65:57:06:d6:1b:be:46:08:c7:3f:37:
3c:cd:4d:32:14:9d:50:a9:60:e4:2e:1a:79:2d:3e:18:13:9d:
35:1d:06:f3:74:e7:cf:ce:dd:a5:0b:cf:86:f2:62:10:0f:83:
06:7d:dc:d1:a3:d1:f5:ef:b1:56:23:9a:0e:9c:de:07:14:1a:
c9:20:be:18:62:e9:ee:8c:82:d8:93:80:9e:e3:f5:c5:4a:b1:
22:c0:07:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:54 2024 by rpki-client on console-fra.rpki-client.org