Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/I9qmyibRuh5ZbeDFcn9PqfnmUvE.roa
File: I9qmyibRuh5ZbeDFcn9PqfnmUvE.roa (raw, json)
Hash identifier: gbSjglxYZvxLhvnWeJH2hPcb2TG+u9pKcSMogWHMI5E=
Subject key identifier: 23:DA:A6:CA:26:D1:BA:1E:59:6D:E0:C5:72:7F:4F:A9:F9:E6:52:F1
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 044B
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/I9qmyibRuh5ZbeDFcn9PqfnmUvE.roa
Signing time: Mon 10 Jun 2024 07:55:04 +0000
ROA not before: Mon 10 Jun 2024 07:55:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Jun 2024 11:55:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1099 (0x44b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Jun 10 07:55:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=23DAA6CA26D1BA1E596DE0C5727F4FA9F9E652F1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:8a:d7:98:d7:13:96:59:af:78:6f:50:ce:11:
0f:3b:bd:6a:fc:e9:41:14:98:cf:61:38:c9:9e:6f:
fe:67:a5:4a:07:96:0c:80:ed:bf:3b:7c:78:ba:4a:
5f:37:2a:f7:dd:fc:c6:11:95:4e:96:a9:44:b9:8d:
99:29:c3:f7:2b:97:e0:24:c6:61:d4:fa:e4:12:28:
02:d5:01:47:8a:5c:63:67:e3:9a:6f:16:b6:14:ec:
21:fe:2a:40:96:f9:31:b2:9a:b9:72:50:fd:c3:74:
55:93:98:2a:3e:a8:5d:ba:a0:e8:40:b5:eb:b8:ab:
38:7e:88:21:e6:f0:93:69:b6:f2:88:35:13:6e:52:
80:af:3d:97:19:97:78:96:04:05:7c:77:e2:d5:07:
69:9c:fc:99:f6:86:e2:13:6b:2c:c2:80:e6:ba:6f:
99:66:13:50:b5:af:40:4b:39:c5:04:ee:4f:53:b4:
73:b9:cc:ce:c2:be:d0:63:22:43:7c:cd:5b:de:87:
f9:e3:f7:6c:20:de:5e:1d:30:f3:c7:82:58:82:11:
2c:28:20:29:ea:d1:06:28:47:8c:e5:02:b0:7d:0a:
b2:cd:fa:06:fc:f0:8e:b4:7b:96:6a:ef:61:65:c1:
f6:8c:e1:99:44:86:50:72:f3:a6:f9:21:d5:83:da:
4b:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:DA:A6:CA:26:D1:BA:1E:59:6D:E0:C5:72:7F:4F:A9:F9:E6:52:F1
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/I9qmyibRuh5ZbeDFcn9PqfnmUvE.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
af:68:16:a2:6e:8c:b9:f3:07:8f:85:c5:0a:35:09:17:98:7d:
92:9e:2a:13:ee:d8:57:15:ee:07:eb:83:89:a0:6d:1c:17:52:
a0:08:ef:7f:62:b1:38:93:c5:1a:78:29:30:cc:c0:69:e9:d5:
f3:00:cb:28:45:8e:7f:65:93:0b:27:cc:2c:42:a6:18:61:b4:
a7:71:d0:4b:de:4a:4b:74:67:d2:67:99:f5:c8:a3:81:56:93:
69:f6:4c:af:6b:1a:3e:2c:3f:de:b2:1f:2f:ab:3d:0f:9e:0d:
d9:96:91:8b:b7:a5:2a:1c:36:41:bb:8a:c3:2c:70:8d:92:ee:
5d:72:65:88:a6:db:30:b8:fc:f2:9d:f9:eb:5e:3a:82:b4:05:
f6:3e:75:2a:ff:f1:0e:13:bf:eb:72:98:b5:da:fd:12:8b:8d:
ab:f8:08:07:f9:a2:f6:22:f4:8f:91:ab:d4:bf:c0:ae:43:0a:
d8:32:88:1d:6a:56:e3:88:68:69:21:92:18:c6:e8:b5:5f:f3:
d9:31:6d:98:1d:25:90:a9:1c:8b:eb:2c:d2:0f:a9:f4:7c:e8:
91:70:64:b7:b6:ea:95:c0:43:b4:71:12:b1:9c:8d:6b:77:95:
7d:76:b2:b1:89:d2:58:8c:8e:2e:8c:4c:b8:ac:88:a0:e1:86:
0e:45:03:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 10 14:02:06 2024 by rpki-client on console-fra.rpki-client.org