Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/Gwhw93MKUKWxFvSD7y_Ezdx8ACk.roa
File: Gwhw93MKUKWxFvSD7y_Ezdx8ACk.roa (raw, json)
Hash identifier: ridbOL5kgTNCzO4xz/pa79sKTRva9XbcNh47PVWScCA=
Subject key identifier: 1B:08:70:F7:73:0A:50:A5:B1:16:F4:83:EF:2F:C4:CD:DC:7C:00:29
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0721
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/Gwhw93MKUKWxFvSD7y_Ezdx8ACk.roa
Signing time: Thu 29 Aug 2024 23:55:02 +0000
ROA not before: Thu 29 Aug 2024 23:55:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 30 Aug 2024 03:55:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1825 (0x721)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Aug 29 23:55:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1B0870F7730A50A5B116F483EF2FC4CDDC7C0029
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:50:07:e0:3c:21:b8:76:a4:0a:c5:73:73:07:
12:eb:d7:a2:16:9b:81:2a:ce:7d:43:5c:7c:c7:3d:
da:c1:e0:c9:27:ab:5d:0c:f6:da:f2:b7:c9:6d:da:
8d:82:14:29:86:f2:74:23:e9:3b:92:6e:1c:5c:c7:
9d:f6:a7:f9:09:03:4b:4d:ae:90:07:ae:62:21:43:
61:3e:c9:49:1e:3b:a1:91:79:28:01:6a:43:3b:6b:
5d:6f:a8:66:27:ab:ba:33:31:d9:38:80:37:7e:d2:
00:a5:5c:bd:00:9b:5f:c1:96:04:46:82:7d:38:ec:
49:ee:35:81:5e:30:31:70:ee:ee:d9:b9:4e:d6:de:
f5:e6:10:f3:7f:2b:a9:e3:7d:17:2a:9a:73:3b:0b:
9a:65:3b:74:2b:2f:7f:03:5d:e5:55:c8:bc:dc:6e:
f5:da:20:33:29:b0:1e:a8:b8:60:93:c8:34:20:c0:
db:ea:f6:44:7e:e5:ca:a3:3b:4d:f2:c9:f1:ac:36:
6c:99:b9:87:8d:bb:cb:23:5b:5c:0e:3f:08:ef:5c:
a5:95:48:e7:ef:af:62:47:43:34:23:e6:15:7d:6d:
ca:c2:50:11:23:3f:c1:e0:cf:71:ba:85:6f:2f:4f:
87:67:ef:46:8d:96:ae:8c:3c:21:82:89:44:20:92:
2d:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:08:70:F7:73:0A:50:A5:B1:16:F4:83:EF:2F:C4:CD:DC:7C:00:29
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/Gwhw93MKUKWxFvSD7y_Ezdx8ACk.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
36:a3:dd:1f:8e:c3:25:3f:41:16:77:e1:f9:42:90:1b:7c:e7:
9a:1c:b9:9e:1d:02:d9:55:69:61:e5:42:14:ff:26:9a:30:17:
ed:98:52:ed:2d:38:0b:a2:51:d7:05:ca:6b:80:36:c9:d8:ed:
a2:73:3f:9a:68:77:67:24:a2:5c:1c:63:da:94:f0:f0:28:6e:
1b:8a:d4:cf:ef:9d:ae:ed:91:20:8d:54:09:62:68:2a:a7:8e:
9d:b6:05:d1:e8:b4:ae:04:69:0b:4d:d1:a6:07:16:48:04:4a:
a7:c5:f6:2a:fe:ac:98:42:df:ec:b9:30:2a:f1:3b:4f:e7:b1:
c7:0f:45:1b:e4:ab:a5:98:57:23:41:20:8e:21:47:cd:5a:3c:
94:22:26:42:e9:21:3a:e5:a5:a2:d7:29:55:1e:14:b8:c3:f2:
76:36:5a:77:c9:86:d7:62:85:91:dd:66:68:a9:b3:0e:4f:cc:
e1:ba:d7:2e:5f:9a:0b:3d:ca:87:24:55:b3:9a:6e:6b:cd:99:
65:aa:69:1a:44:cc:f0:b5:ba:54:38:f5:55:f6:c7:fe:b0:f6:
49:03:4c:43:37:f1:33:74:ab:bf:53:a3:9d:d7:55:af:e7:0f:
13:62:3d:9a:b4:48:45:12:bd:c6:e8:12:b4:71:74:1a:53:20:
a6:e2:42:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 30 05:02:38 2024 by rpki-client on console-ams.rpki-client.org