Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/JByg1rYXngR7TGlW2jEaOq3_EBU.roa
File: JByg1rYXngR7TGlW2jEaOq3_EBU.roa (raw, json)
Hash identifier: s8QWYHHyFDbHefVb/kMQPBmnn3na5AxJ3U/sjfPdsqc=
Subject key identifier: 24:1C:A0:D6:B6:17:9E:04:7B:4C:69:56:DA:31:1A:3A:AD:FF:10:15
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0520
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/JByg1rYXngR7TGlW2jEaOq3_EBU.roa
Signing time: Wed 03 Jul 2024 23:55:03 +0000
ROA not before: Wed 03 Jul 2024 23:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 04 Jul 2024 03:55:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1312 (0x520)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Jul 3 23:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=241CA0D6B6179E047B4C6956DA311A3AADFF1015
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ef:7c:54:a0:71:73:33:c5:9c:bc:ca:c1:b0:
7c:26:92:da:30:09:87:05:69:94:df:cb:ee:54:28:
3b:a2:7a:bb:ee:cb:bc:cf:91:16:2e:0f:c1:0d:69:
01:b4:8b:15:c4:83:2d:64:59:c8:88:4b:36:62:20:
85:1f:90:7c:61:3a:69:e2:76:b8:46:a0:9e:2a:be:
34:6b:3e:51:e2:63:53:38:73:e9:dd:d5:53:bd:ab:
a8:dc:a1:8f:16:a8:4a:ed:f8:0b:06:d0:2b:e1:81:
f1:cf:1f:6a:29:16:87:e7:84:ac:5e:3b:27:4e:87:
be:b1:e2:ed:d8:28:f5:cd:b8:b8:da:54:7e:59:d7:
43:7f:61:4a:64:d6:c5:ea:40:fe:f3:fa:c6:98:37:
64:e5:ec:2a:30:83:44:d5:62:8c:71:f1:9f:63:5e:
6e:cf:66:7d:0b:a5:eb:de:c1:ff:1f:6c:d0:21:31:
f5:f5:b4:39:33:e2:47:36:7e:19:c9:f5:46:06:8b:
94:d0:c9:6e:6f:7b:50:a9:83:1d:22:62:55:89:d3:
05:01:58:44:80:a4:a4:c8:78:3c:e1:70:09:67:0a:
eb:65:f5:97:b1:20:22:2f:71:ea:bb:1e:5e:fb:d0:
b1:78:c1:c8:1e:66:fe:fd:97:5a:4c:d5:e7:1a:33:
2d:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:1C:A0:D6:B6:17:9E:04:7B:4C:69:56:DA:31:1A:3A:AD:FF:10:15
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/JByg1rYXngR7TGlW2jEaOq3_EBU.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
50:a8:de:ae:c4:dd:ed:e9:e6:04:ad:a3:2d:58:88:e1:9b:ea:
38:da:8a:c3:09:a7:24:b5:f0:8e:49:f0:f1:c3:98:2d:9d:3c:
00:0d:8c:d6:34:f1:30:57:19:53:60:fa:d2:85:90:c8:55:06:
47:88:00:c5:6c:89:d0:41:7d:e8:3f:58:a7:9a:bd:0e:29:79:
c2:82:c5:17:ae:9a:19:a6:0e:62:f0:bd:2b:36:47:3f:18:ee:
6f:84:6b:a6:c6:fe:51:fd:b8:a3:73:b2:1b:8f:cc:7c:01:d4:
fa:27:76:4c:7d:11:a2:25:12:e9:5f:4d:5c:e4:96:4b:fa:e1:
df:cc:be:32:a6:c7:aa:e0:83:eb:2d:dd:c6:11:41:63:ce:3d:
10:03:12:bb:c9:69:c0:9b:10:47:f1:b5:41:67:18:ae:a8:9b:
a7:d2:79:15:66:e2:a6:dd:d0:1a:49:4a:fd:5d:b9:c1:1a:13:
f0:32:34:25:77:32:1f:3a:1d:b6:66:5e:d4:f5:09:3d:ab:a4:
7d:99:10:ba:fa:9b:2d:94:00:19:ee:37:3e:2d:50:36:35:5e:
b9:24:77:53:c9:f3:07:78:27:bd:df:bb:81:07:eb:90:6e:85:
90:4a:a2:35:9f:99:44:79:8b:7e:ec:ec:85:2a:f0:b9:f8:f9:
4d:77:5f:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 4 05:04:50 2024 by rpki-client on console-ams.rpki-client.org