Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/LLT3Y5FriBd7YCDIqlG0gY_Xz1w.roa
File: LLT3Y5FriBd7YCDIqlG0gY_Xz1w.roa (raw, json)
Hash identifier: MeZK6t+Itx09Sb/oiHb6f9okmm5Vbifc1abAl39E/Qc=
Subject key identifier: 2C:B4:F7:63:91:6B:88:17:7B:60:20:C8:AA:51:B4:81:8F:D7:CF:5C
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 079C
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/LLT3Y5FriBd7YCDIqlG0gY_Xz1w.roa
Signing time: Thu 12 Sep 2024 15:55:04 +0000
ROA not before: Thu 12 Sep 2024 15:55:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 12 Sep 2024 19:55:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1948 (0x79c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Sep 12 15:55:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2CB4F763916B88177B6020C8AA51B4818FD7CF5C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:e7:60:af:ce:a6:8a:cd:84:ce:57:2d:c9:56:
b8:03:4a:99:ee:5e:53:c7:4c:0b:5a:51:12:9f:34:
e6:7a:4e:21:06:eb:f8:c5:5d:2d:22:7c:68:07:96:
dd:c2:19:16:00:81:cb:46:0b:b4:31:8e:b1:b9:b4:
17:6a:85:ef:51:b1:3f:91:bb:ad:f7:80:ca:d3:04:
62:d2:c7:42:c5:29:01:7b:c1:bf:d7:6f:4f:14:d5:
44:47:2c:28:f1:a2:90:9d:51:e8:f4:2c:92:c9:f3:
fb:5c:5d:4b:ed:84:c5:55:0c:da:27:5d:7e:93:70:
ee:86:42:47:bc:d5:75:59:cf:9f:b7:a4:c8:e4:ba:
a8:79:10:e3:d5:81:2e:3a:23:67:e3:16:e4:d3:af:
fa:49:e8:b8:df:ae:ce:fb:d9:8d:98:ac:4e:60:32:
8e:53:19:f6:a7:9b:30:b6:6a:c1:12:ba:e5:ef:26:
0c:d0:e8:a7:13:2b:14:57:ec:ea:61:60:7d:24:2c:
78:da:d6:2c:42:3f:e3:ad:24:9c:c7:c5:6b:78:25:
ca:62:7d:c6:71:ab:e4:21:dd:36:8e:ee:01:dd:ed:
13:4f:43:4e:a9:e2:d6:11:53:f6:6c:b6:fe:f0:c5:
0d:87:7d:53:4b:13:7e:21:b2:cb:09:79:a4:c2:4c:
1c:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:B4:F7:63:91:6B:88:17:7B:60:20:C8:AA:51:B4:81:8F:D7:CF:5C
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/LLT3Y5FriBd7YCDIqlG0gY_Xz1w.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
04:5a:52:d4:4a:d7:1b:95:8c:9e:d4:ca:8d:8b:11:71:1a:41:
ee:e0:73:7a:e3:10:f9:d6:ef:33:aa:87:38:5c:47:de:9f:97:
09:2a:6b:df:20:d6:13:ba:4d:1f:8b:56:68:54:fe:08:d9:4e:
05:b5:ab:b3:e1:86:cb:5f:96:62:a5:bc:0f:5b:de:41:fc:52:
d2:b0:42:8a:83:e0:89:58:1c:52:8b:b1:43:93:27:c3:88:f8:
76:b1:6d:c9:3f:02:de:06:22:6d:fe:43:9f:be:f2:4c:9a:bd:
73:97:21:e5:7b:f3:2b:06:0f:6f:39:75:27:bc:4e:9f:60:b3:
69:d3:9c:39:0d:6c:7d:3d:2c:2f:df:b1:85:3a:13:a3:1b:53:
e5:8a:c8:5c:bd:e1:12:8c:85:33:6d:b1:13:3b:f9:5a:94:ac:
84:c3:9c:55:17:04:02:2b:76:03:62:9e:72:79:87:f6:65:07:
b9:89:08:06:86:45:1d:4f:d9:90:f7:c0:5e:41:0a:aa:90:db:
ce:dd:7a:b2:63:f6:bd:ea:28:8e:ec:8a:85:85:9f:dc:54:75:
50:fd:c1:a8:e3:92:73:3c:51:22:d9:f6:24:78:cf:30:5e:27:
76:a8:94:4d:9b:7d:3f:f8:0e:79:02:fa:94:b9:dd:9a:1e:6f:
0e:46:47:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 12 22:20:44 2024 by rpki-client on console-ams.rpki-client.org