Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/HRxBBIIyYdYKDQL3SzG5WDK56mM.roa
File: HRxBBIIyYdYKDQL3SzG5WDK56mM.roa (raw, json)
Hash identifier: /bCQcUbk2E5wzRqHh+x4So96vJO3qHQXHoBvUGm6eD0=
Subject key identifier: 1D:1C:41:04:82:32:61:D6:0A:0D:02:F7:4B:31:B9:58:32:B9:EA:63
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0601
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/HRxBBIIyYdYKDQL3SzG5WDK56mM.roa
Signing time: Sun 28 Jul 2024 23:55:03 +0000
ROA not before: Sun 28 Jul 2024 23:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 29 Jul 2024 03:55:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1537 (0x601)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Jul 28 23:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1D1C4104823261D60A0D02F74B31B95832B9EA63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:14:7f:67:5b:a0:01:ac:df:71:86:d4:d9:d1:
ab:fb:67:51:ab:58:56:37:27:f4:f3:fb:93:b6:ac:
24:15:96:e3:2d:bd:f5:87:98:5a:6a:2b:13:7b:f4:
67:e6:af:1e:bf:12:11:af:79:2f:29:2e:4c:98:c9:
39:38:24:53:e3:0b:b4:3f:4a:b2:fc:8d:30:3d:76:
75:de:f4:02:c1:b3:38:08:23:0e:32:68:c1:2e:15:
c5:85:c8:3a:30:f9:97:81:41:d1:ac:6d:2c:cb:b8:
f3:a1:20:09:0d:cf:45:b2:7e:6b:2a:5a:ae:11:02:
e9:33:a5:b2:18:f5:f8:7d:b6:98:bd:7e:34:05:59:
8e:f2:85:e7:c1:e5:8e:18:86:ad:46:cc:42:f7:15:
2e:74:8d:38:aa:72:67:bb:7f:68:5e:b5:df:78:21:
46:a7:5e:8e:f8:b3:b0:e4:50:1b:fa:b8:c8:5c:3f:
fb:8d:ab:c0:39:b9:db:9e:21:b3:25:e2:dd:71:a0:
98:59:a5:95:d7:2f:aa:94:c6:8b:09:66:9f:2a:35:
82:c3:45:07:cd:59:c6:70:13:8f:57:1d:0a:4f:47:
c5:32:13:bb:a6:14:41:4d:05:ce:c7:6a:02:ee:cb:
21:f8:b3:f1:e0:f7:23:6a:c0:c5:7d:fa:71:e1:4b:
9c:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:1C:41:04:82:32:61:D6:0A:0D:02:F7:4B:31:B9:58:32:B9:EA:63
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/HRxBBIIyYdYKDQL3SzG5WDK56mM.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
22:ef:e7:26:7f:7a:14:a0:bd:cd:68:61:13:0a:7b:e1:82:46:
f1:7d:a8:ea:0b:74:1f:e0:37:89:81:32:30:36:29:cf:9c:2d:
89:02:4a:6e:3d:8b:df:4b:b8:8c:1f:35:3f:d4:c5:a7:ad:07:
12:e9:2d:cf:cc:43:0f:3c:29:50:4b:bc:b0:a5:6d:7d:ac:bb:
1e:94:f6:c2:16:95:73:d0:e0:13:b9:e0:93:ca:24:41:25:cb:
62:68:6c:c0:26:d4:85:64:96:22:ce:38:e5:ca:aa:c7:0c:b7:
31:62:d8:2b:25:66:06:54:9d:d9:5a:22:11:55:6e:97:54:25:
93:42:1a:6a:bb:ac:e8:99:e9:44:83:97:85:99:ad:d2:c3:55:
fd:aa:41:c5:5a:9e:7b:35:19:c2:f8:a9:c0:41:53:d4:bf:21:
91:24:ff:e2:23:0f:6c:f0:3e:b7:de:ae:75:a6:a8:90:55:7a:
51:8e:2f:1e:0c:a4:14:3b:14:06:b0:77:b1:79:35:78:06:f9:
54:f7:8f:30:74:bd:8b:da:7b:ee:d8:96:a2:31:59:60:b5:73:
72:b0:40:08:b4:2a:c0:a0:1f:a2:2d:b6:db:90:c7:55:f6:db:
95:64:13:1e:2e:fc:7b:fa:c0:6c:3c:98:5b:47:51:eb:9a:22:
f1:eb:63:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 29 05:50:37 2024 by rpki-client on console-ams.rpki-client.org