Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/JwZNOz3nwVysT8yMMwJuMT24Mvs.roa
File: JwZNOz3nwVysT8yMMwJuMT24Mvs.roa (raw, json)
Hash identifier: UvaeTwxF61+EcbQSqjvpNTRZPO9AUABRCKIM/1bNQ9Y=
Subject key identifier: 27:06:4D:3B:3D:E7:C1:5C:AC:4F:CC:8C:33:02:6E:31:3D:B8:32:FB
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 063D
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/JwZNOz3nwVysT8yMMwJuMT24Mvs.roa
Signing time: Sun 04 Aug 2024 15:55:04 +0000
ROA not before: Sun 04 Aug 2024 15:55:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 04 Aug 2024 19:55:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1597 (0x63d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Aug 4 15:55:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=27064D3B3DE7C15CAC4FCC8C33026E313DB832FB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:1f:a4:b0:7e:d0:99:73:33:09:2e:f3:73:b4:
05:0c:7e:c5:3f:e7:0e:ae:10:52:7f:29:83:2a:7f:
5a:e7:e5:de:2b:91:99:db:72:3a:e7:56:48:26:65:
0a:f4:73:60:ed:fa:d1:98:3c:6f:f9:ab:88:c7:15:
d7:a1:5f:0d:71:18:0e:18:78:6c:13:e5:8b:bf:b2:
1e:4c:d5:e8:e1:93:e2:f8:6c:df:cc:8e:96:08:75:
6a:d5:f9:4c:03:af:6e:bc:e5:fa:e4:39:97:f1:2f:
94:72:a9:c3:ed:da:f5:06:04:ff:46:17:6c:a9:37:
bd:33:9e:ed:02:42:3f:d1:40:dc:32:1d:53:a4:0e:
57:0a:a8:03:95:5e:aa:b2:9f:11:e0:7c:dd:22:05:
28:c4:2e:a5:05:c0:40:8a:e4:56:cf:c0:c5:bd:46:
15:e0:24:46:97:18:f1:8f:20:8a:aa:28:2d:9c:e7:
1a:70:6f:15:d2:d2:92:24:34:59:8c:50:c2:a0:41:
e0:88:d8:29:65:46:b3:8e:d8:22:13:a4:f6:a4:f3:
17:51:2a:f7:47:3d:ad:f6:ac:c0:22:7e:7a:11:7c:
93:9c:af:27:e8:b3:5d:1d:46:4e:97:fa:e3:49:4a:
5c:d1:d8:55:78:c9:3b:b9:50:be:66:43:8b:a1:3f:
69:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:06:4D:3B:3D:E7:C1:5C:AC:4F:CC:8C:33:02:6E:31:3D:B8:32:FB
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/JwZNOz3nwVysT8yMMwJuMT24Mvs.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
72:d7:23:67:45:2b:c2:6b:a1:93:8c:69:34:23:b0:3d:16:ff:
35:58:0c:2e:f9:03:5e:4c:bf:02:af:9e:80:51:d1:be:aa:2f:
72:e8:1c:4e:3f:f6:84:d6:04:70:4c:eb:2f:4f:b8:33:a0:2c:
cc:4d:e9:38:7a:bf:16:de:9b:71:ba:96:2f:d3:94:7b:71:0f:
72:f1:b6:c8:fe:b2:9c:ee:b1:a7:c4:80:e3:1d:4c:94:de:d7:
b6:5e:35:7a:68:25:f5:35:23:4f:ad:bb:42:74:13:ea:4a:ea:
9e:0c:1f:15:92:23:d9:5e:f8:bc:b9:f0:94:d1:6f:e9:c9:39:
09:2c:fc:27:f4:23:52:a2:28:5a:b2:f5:04:51:40:51:d9:68:
c9:9b:52:5a:f4:4d:20:8f:33:65:f4:96:ef:9b:b1:ea:8a:0f:
9b:18:69:6f:a6:52:13:83:fa:26:59:5a:f6:70:05:4f:81:43:
15:c1:84:8b:d1:9c:b0:12:c7:fe:82:de:56:54:c1:e7:ba:8f:
7f:11:46:f7:9a:1c:0d:71:38:65:ac:7a:2d:c0:aa:fb:99:36:
00:f4:3b:38:8c:ef:f8:09:03:75:51:50:1d:41:c4:f8:7c:9c:
38:13:d0:16:b4:e2:80:6a:af:f5:73:9d:18:4b:a9:64:73:23:
04:ee:a0:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 4 21:43:49 2024 by rpki-client on console-fra.rpki-client.org