Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/L3RACj1Q4hoKGNhJWNrDyb8HQ4g.roa
File: L3RACj1Q4hoKGNhJWNrDyb8HQ4g.roa (raw, json)
Hash identifier: 1uOCQrK9z8J1uvj43hHc4lLzfY5XNdURvRN+7Ou/9N8=
Subject key identifier: 2F:74:40:0A:3D:50:E2:1A:0A:18:D8:49:58:DA:C3:C9:BF:07:43:88
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 053B
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/L3RACj1Q4hoKGNhJWNrDyb8HQ4g.roa
Signing time: Sat 06 Jul 2024 23:55:02 +0000
ROA not before: Sat 06 Jul 2024 23:55:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 07 Jul 2024 03:55:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1339 (0x53b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Jul 6 23:55:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2F74400A3D50E21A0A18D84958DAC3C9BF074388
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:ec:7b:e7:7f:30:73:92:c3:83:6e:52:74:df:
69:45:80:f5:e6:10:1e:a7:78:e5:80:7a:ef:0f:09:
61:7b:3f:ac:aa:63:7b:42:e0:7a:f2:ad:1e:b8:10:
7d:0c:5c:2a:b4:84:ca:4a:ca:6f:08:31:93:d0:a4:
26:00:06:47:1c:81:37:49:9c:a3:1b:01:fe:0f:e6:
b0:07:f7:0f:69:0f:a5:44:92:7b:1d:8f:a8:24:c0:
56:2b:b5:66:f6:02:e2:0b:27:a4:65:9b:3c:35:ef:
fc:4e:2c:0a:70:ab:5b:85:cd:ed:3d:07:f7:6b:9c:
80:33:21:fe:f0:0e:39:3f:d3:60:88:9d:47:2b:85:
63:30:32:ea:2f:76:c7:0e:74:73:92:d2:0f:af:9b:
bc:a8:5b:85:19:f6:79:d4:b7:43:eb:9b:fd:64:7e:
18:4f:95:f5:ef:1f:cf:f5:3d:e9:ea:6a:ac:57:d6:
61:98:03:25:f9:8b:84:29:82:c2:70:1a:4f:6b:60:
a7:b4:b6:df:91:79:9e:3c:9e:8d:c9:d5:ae:37:6c:
83:5c:3f:73:f2:78:e6:54:d5:05:0c:95:90:92:d8:
44:a6:80:14:87:8e:20:ca:35:bc:98:3c:51:ee:92:
4e:f0:cc:ad:dc:5b:00:c8:3d:97:64:38:34:ae:6b:
c4:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:74:40:0A:3D:50:E2:1A:0A:18:D8:49:58:DA:C3:C9:BF:07:43:88
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/L3RACj1Q4hoKGNhJWNrDyb8HQ4g.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:ee:9b:38:11:fd:17:52:f8:49:c6:62:b0:58:70:25:fd:1e:
2d:47:01:e4:47:15:08:52:48:48:2c:d1:6d:22:a0:8e:8d:73:
35:5c:22:7a:c9:4f:30:24:71:b2:cd:b7:92:c2:ba:2b:7f:b7:
03:7d:10:4a:9e:84:59:d3:dd:e2:66:51:25:ac:e7:b8:8f:da:
ec:3b:20:49:27:8f:4c:0e:38:7b:80:df:c5:a5:aa:15:e6:aa:
a4:a1:04:fc:e2:3c:c6:24:5f:4a:b0:aa:99:c7:5d:15:bd:ae:
1a:48:58:4f:80:a5:fd:ab:b5:91:c2:2e:c0:55:c3:13:32:b0:
5a:d9:4f:9d:80:d7:da:b8:06:d6:3f:66:49:90:c8:07:cd:37:
7a:5d:2f:dc:b4:10:fa:87:d0:90:e5:21:2a:db:99:7c:5d:69:
f5:0b:b7:6d:9d:97:5b:5f:5a:49:6d:37:6e:b6:f0:52:98:97:
ab:58:99:7d:0c:6d:87:b4:2b:54:12:42:47:c9:0d:b1:50:ca:
25:8f:8a:f1:dc:0a:05:5f:e6:f5:74:fa:da:78:78:1a:68:26:
f8:02:22:5a:3d:5b:19:f5:1f:55:2f:cc:07:b2:2b:87:20:9e:
06:9f:d5:57:1c:c7:e8:37:6a:b2:23:b6:2b:ee:38:74:86:5f:
74:df:be:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 7 04:53:09 2024 by rpki-client on console-ams.rpki-client.org