Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/HXQoHwYVxLalog0plXSw4Hz-itQ.roa
File: HXQoHwYVxLalog0plXSw4Hz-itQ.roa (raw, json)
Hash identifier: WDb8gxx0ptoXXuRIRSpgCuaZ2MteyaE4yljLc2BfPW8=
Subject key identifier: 1D:74:28:1F:06:15:C4:B6:A5:A2:0D:29:95:74:B0:E0:7C:FE:8A:D4
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 07EA
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/HXQoHwYVxLalog0plXSw4Hz-itQ.roa
Signing time: Sat 21 Sep 2024 07:55:02 +0000
ROA not before: Sat 21 Sep 2024 07:55:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 21 Sep 2024 11:55:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2026 (0x7ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Sep 21 07:55:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1D74281F0615C4B6A5A20D299574B0E07CFE8AD4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:3e:fc:d3:ae:ab:c5:a0:c5:2c:90:1d:be:3b:
6d:69:01:3e:25:60:78:7f:52:1b:51:b7:4f:ee:ec:
36:7f:41:87:64:48:c7:c6:54:d5:87:79:15:bd:da:
d9:2c:9a:2d:80:00:fd:04:39:37:e5:47:25:3a:9c:
2e:1d:9f:d0:20:72:2c:09:03:e1:39:11:04:02:a3:
62:8a:ac:51:08:5d:69:23:e1:d6:27:ed:d5:2e:4d:
e7:25:7d:a5:65:8a:29:3f:af:ec:7f:0d:1c:c2:20:
58:0f:8c:97:57:f7:95:6b:f8:d9:e3:d3:c7:df:fc:
61:70:63:c5:fe:0d:9b:a7:b1:5a:18:cc:c3:ff:b3:
81:64:31:2f:a4:bb:57:4c:d8:d2:08:9b:c6:d5:8f:
f5:02:c5:e9:51:b3:cd:f2:74:86:6a:34:ee:ea:6d:
78:83:ae:0e:41:cd:a2:8b:8a:a4:6d:1a:73:26:2e:
7e:58:4e:2b:8a:56:55:5c:ed:48:2b:e0:4f:6c:f2:
79:27:ee:19:a1:cb:b9:ae:32:5d:33:17:80:2e:59:
73:69:c6:60:3a:a0:f9:ca:c3:32:78:e1:94:39:e3:
41:77:db:e7:4e:66:bf:f9:f2:d5:9c:d6:f6:20:ce:
f3:75:31:6b:df:56:75:8f:fe:f2:73:5d:2a:4a:09:
16:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:74:28:1F:06:15:C4:B6:A5:A2:0D:29:95:74:B0:E0:7C:FE:8A:D4
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/HXQoHwYVxLalog0plXSw4Hz-itQ.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:c6:25:94:3b:56:38:00:33:66:0b:9b:7b:66:fd:40:6d:b2:
c2:51:fe:4b:8b:cc:45:d3:76:73:a0:a1:9b:53:cd:83:52:1a:
d1:c3:ca:5d:b1:08:d6:62:c3:d2:c5:02:d8:c6:7d:7d:fc:d1:
db:be:0d:2d:6c:f6:e0:da:f4:a3:a9:a8:6e:9b:5b:e1:fd:60:
05:94:cb:21:80:88:ef:6d:ac:4d:1f:a9:7c:d7:92:95:b1:2e:
a8:af:b9:66:0e:a5:9e:d8:ff:5f:e3:6e:e2:09:8a:bb:14:94:
55:fd:d5:fe:a3:5b:58:3c:27:cf:fb:68:2a:cf:67:09:48:37:
93:1f:4e:77:6d:14:2b:20:0c:30:25:a4:d6:ab:93:b0:fd:da:
4d:b9:16:e5:d7:51:58:57:ca:36:b8:c8:6e:8c:a5:58:0d:6f:
79:90:a3:c2:c0:50:79:80:a6:10:8a:96:fb:30:84:b5:1b:57:
d5:9d:c4:16:26:85:ca:3d:5b:96:37:d8:7a:81:c3:4e:a8:a4:
a8:b0:bc:b5:79:b5:6f:14:e8:9a:16:62:1f:88:a6:e4:86:bd:
b3:fa:c8:92:df:e0:9f:55:43:4f:93:8f:6b:78:af:92:df:ae:
9f:ef:2b:cc:aa:b0:b5:66:5d:e2:74:ed:23:97:fd:2a:bd:04:
48:b9:8b:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 21 14:05:13 2024 by rpki-client on console-fra.rpki-client.org