Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/J41hxywY3n60pY4llSCaLqpib6U.roa
File: J41hxywY3n60pY4llSCaLqpib6U.roa (raw, json)
Hash identifier: CKLJakIq4yvmfHzSG6UgwYJIUfRNOcfJk+JCVRGJvSs=
Subject key identifier: 27:8D:61:C7:2C:18:DE:7E:B4:A5:8E:25:95:20:9A:2E:AA:62:6F:A5
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0319
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/J41hxywY3n60pY4llSCaLqpib6U.roa
Signing time: Tue 07 May 2024 07:55:03 +0000
ROA not before: Tue 07 May 2024 07:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 07 May 2024 11:55:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 793 (0x319)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: May 7 07:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=278D61C72C18DE7EB4A58E2595209A2EAA626FA5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:87:f8:40:50:21:04:18:96:09:de:b8:6b:48:
8e:45:f6:f5:03:7c:0e:fb:52:3e:38:0e:57:8d:f6:
f1:e7:ac:d0:2c:3f:70:16:65:ae:4f:66:c4:48:84:
d0:b8:a2:2e:3f:ea:34:33:96:d2:fe:c4:57:d6:a9:
d8:cd:2c:70:0b:f9:66:46:a9:63:87:39:f6:98:cf:
45:95:1e:65:01:87:b5:ae:d0:ce:80:00:dc:b6:f5:
5e:7a:64:10:7d:9e:fb:7f:bd:28:a0:ea:a1:92:68:
42:7d:6c:8a:13:fa:f9:f8:7e:0d:c3:1c:7e:6d:28:
61:0a:57:b5:8f:4a:1b:c0:ab:c2:ea:4b:38:7d:b2:
5d:ed:47:06:cd:a8:83:aa:cc:68:fb:92:60:4b:b6:
06:02:48:c7:1c:3b:fa:a8:1b:0e:49:de:0f:d3:88:
80:6e:78:97:fc:bc:a6:56:57:f1:cf:74:c1:4d:6a:
6c:87:ba:73:4b:1e:51:a6:d0:4c:e4:5c:a1:b0:4d:
f1:bb:64:40:23:a4:db:da:b7:82:59:55:dc:45:07:
98:0d:13:c9:21:b6:7d:58:79:0b:6e:a5:1e:f8:33:
fe:5d:0f:f4:ae:1a:c9:82:1a:8c:c5:73:f6:6b:95:
35:66:7b:2c:e8:86:ef:6d:02:7f:97:18:ae:82:28:
db:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:8D:61:C7:2C:18:DE:7E:B4:A5:8E:25:95:20:9A:2E:AA:62:6F:A5
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/J41hxywY3n60pY4llSCaLqpib6U.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:dd:a4:21:88:6e:e5:b1:c6:c2:9c:6c:e6:8f:88:ec:20:8f:
37:a7:8d:ae:45:99:1a:bb:17:f2:72:f9:4c:07:45:49:fa:88:
f7:2f:2c:8d:1a:9d:9c:cc:6c:3c:6a:1d:6c:b2:f3:c0:46:96:
a6:ec:54:3f:9a:02:96:4c:a7:20:21:9d:58:bc:24:43:c5:40:
0c:de:26:03:51:bb:44:b4:5d:c7:a7:0d:3f:ed:65:79:68:d3:
7c:0f:90:44:93:a5:89:52:58:47:3a:80:84:03:c1:5d:f7:18:
a7:7a:3b:8e:f3:71:c5:60:03:9b:ad:63:20:e5:95:73:23:ef:
8f:35:5b:c3:58:0e:1c:19:76:a2:a7:19:46:d9:c1:0d:33:a2:
7a:25:34:6d:4f:b7:5f:ea:b8:05:30:6f:33:49:d2:30:8e:96:
ac:f2:92:b1:11:1b:ac:32:f2:f3:a0:98:78:06:3c:ec:ba:d1:
ed:c0:a1:a8:9b:7f:2a:51:37:8c:15:e2:df:2c:0b:28:15:d9:
f5:40:15:64:14:54:b7:6f:d5:a5:1b:87:53:26:8c:09:be:ab:
23:b2:19:80:8e:c7:19:51:7f:3c:51:75:ff:4e:6e:b6:c9:9d:
21:70:c4:6e:3c:f0:2a:e3:b8:66:68:00:37:25:ad:60:ca:24:
fe:5a:bb:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:54 2024 by rpki-client on console-fra.rpki-client.org