Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/JoV-WU_8LpJJbcsguAXfoNLlxj0.roa
File: JoV-WU_8LpJJbcsguAXfoNLlxj0.roa (raw, json)
Hash identifier: XqJ7/uFhMBU1dNUEIpneWojRC6DJQcfxB/BKc/44yN4=
Subject key identifier: 26:85:7E:59:4F:FC:2E:92:49:6D:CB:20:B8:05:DF:A0:D2:E5:C6:3D
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 09BC
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/JoV-WU_8LpJJbcsguAXfoNLlxj0.roa
Signing time: Mon 11 Nov 2024 23:55:02 +0000
ROA not before: Mon 11 Nov 2024 23:55:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 12 Nov 2024 03:55:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2492 (0x9bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Nov 11 23:55:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=26857E594FFC2E92496DCB20B805DFA0D2E5C63D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:dd:c3:95:38:bc:f1:e3:3e:b9:f0:1e:5e:94:
10:53:2a:49:66:80:ef:c0:aa:70:71:28:c3:39:87:
40:f2:d8:61:d0:d0:fa:9a:51:1d:bb:23:99:a7:d6:
97:43:a4:b8:e8:80:4d:6f:b7:07:5e:b7:bc:b2:95:
df:20:0a:57:d9:47:62:7d:47:3c:fe:dd:f3:69:9e:
4b:11:63:30:42:89:47:de:37:a2:4b:e7:87:11:3f:
6f:ef:1c:09:7a:15:30:9f:23:b6:3d:bc:74:54:96:
46:6c:bb:2d:28:90:78:9e:40:64:4c:62:e4:e7:e5:
0c:b8:a5:85:cd:28:33:9f:86:63:d7:a2:f2:4f:e6:
0b:12:04:ee:61:f6:be:99:01:f2:70:e7:ab:4c:4c:
4e:e9:dd:7b:9f:8b:fe:db:6b:7e:67:0f:ff:dc:bd:
a9:2e:42:49:b7:b1:58:cc:15:5d:57:3e:3f:0c:79:
29:3b:80:19:16:4b:ff:4d:10:95:20:27:dc:72:83:
37:94:04:cd:f1:f3:8f:b5:b2:cc:21:6b:5f:02:00:
e5:57:ed:78:48:c7:03:bc:2f:da:c7:f2:d0:8e:a1:
e1:cb:d6:4b:d1:d7:ad:06:89:22:09:c4:fa:85:37:
08:34:ca:4a:ea:05:eb:39:8e:97:ae:ee:7a:02:5e:
7a:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:85:7E:59:4F:FC:2E:92:49:6D:CB:20:B8:05:DF:A0:D2:E5:C6:3D
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/JoV-WU_8LpJJbcsguAXfoNLlxj0.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:de:25:ee:3a:70:c7:a5:2b:5d:90:2c:64:ce:4c:6c:45:5f:
4a:b6:7e:e1:75:39:cc:af:06:54:db:c9:cc:05:59:73:20:18:
e8:17:d9:89:f1:37:dc:6a:e5:7a:60:92:0d:dc:75:38:4b:bb:
dc:00:75:1c:ea:42:93:d8:4d:1b:37:8d:9d:dd:a8:d9:be:ff:
50:ee:b4:5f:22:2d:6e:46:08:7f:d9:a2:a4:4c:bb:e7:4b:99:
0d:4c:f2:fe:38:e8:14:4a:1c:31:23:cf:48:f5:69:c2:12:c1:
f6:b6:c9:b6:55:9e:d4:f7:38:42:e6:f0:c3:81:f5:13:66:6e:
2e:8e:8a:ae:76:cc:a2:75:46:12:eb:00:b6:fd:19:64:68:e3:
7c:3d:7e:81:4e:2b:21:ce:9e:cd:92:21:26:46:05:24:6b:1e:
56:f5:d0:1e:2c:ca:dd:04:ca:a2:c1:88:a6:82:8b:74:ce:14:
e6:ad:07:4e:72:90:71:f9:8c:07:0c:76:e5:13:97:57:2a:1b:
95:21:a9:1d:58:fa:db:26:31:42:36:c5:2f:ec:82:2a:79:16:
30:56:39:2e:14:97:2a:38:bb:6a:44:bd:5c:8b:7f:f6:4c:a6:
b5:af:16:da:52:89:88:49:bd:1a:27:5e:19:c5:65:21:d1:8c:
dc:1f:2e:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 12 07:15:30 2024 by rpki-client on console-fra.rpki-client.org