Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/Ne7CtxJHB7KVDuboOYK-6-8Pl2k.roa
File: Ne7CtxJHB7KVDuboOYK-6-8Pl2k.roa (raw, json)
Hash identifier: DKEUJht1CFWOw9cwYYbkLRudCw5Ig1WLZbPJsj+foco=
Subject key identifier: 35:EE:C2:B7:12:47:07:B2:95:0E:E6:E8:39:82:BE:EB:EF:0F:97:69
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0532
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/Ne7CtxJHB7KVDuboOYK-6-8Pl2k.roa
Signing time: Fri 05 Jul 2024 23:55:02 +0000
ROA not before: Fri 05 Jul 2024 23:55:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 06 Jul 2024 03:55:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1330 (0x532)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Jul 5 23:55:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=35EEC2B7124707B2950EE6E83982BEEBEF0F9769
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:75:a1:4b:4f:32:49:83:b4:54:5c:be:cb:83:
d9:8b:80:ea:ec:48:60:fb:8e:dc:07:a6:49:51:b6:
14:74:27:fa:7f:0a:64:18:03:da:3d:2d:6f:40:dc:
11:26:65:d7:ec:92:8a:25:8a:c5:9b:ae:29:ae:fe:
8f:1d:f3:6c:98:2b:29:d8:9d:a7:04:6c:b8:1e:7e:
55:31:73:f4:8e:eb:f8:eb:ee:f3:94:59:15:0d:26:
66:ad:36:c2:5f:dd:08:af:9f:fb:31:19:3d:dc:ef:
90:24:ab:9c:e3:e6:79:0d:ed:f7:14:63:59:a8:f4:
76:65:52:76:68:18:b2:97:8d:fd:81:e8:6a:a1:19:
22:13:4b:72:1e:0a:ef:c3:79:6f:13:e7:3d:ac:8f:
0c:c7:64:eb:7a:5b:8d:bd:b6:27:3b:b4:a9:c4:f8:
92:6e:fd:15:b8:3f:62:37:92:70:de:70:9a:89:fd:
9f:4c:92:56:f3:4f:69:48:7e:d1:76:c7:0b:e5:1e:
ea:dc:fc:22:db:80:c7:07:19:4d:b5:50:10:9f:ec:
90:bf:be:a2:1d:c7:1c:09:50:bb:d6:0f:ed:c9:6c:
d3:f5:64:7b:87:9d:34:02:ac:41:1e:2f:f8:7e:84:
48:4e:4d:3f:8c:ff:b0:a6:06:02:7f:27:79:16:23:
6b:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:EE:C2:B7:12:47:07:B2:95:0E:E6:E8:39:82:BE:EB:EF:0F:97:69
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/Ne7CtxJHB7KVDuboOYK-6-8Pl2k.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:25:e2:f3:b5:91:c2:c5:b9:54:13:b4:44:c4:d3:4d:d7:4a:
61:ff:96:74:10:d0:0c:3d:80:76:55:e9:6a:f6:a5:a0:48:fb:
0c:81:d7:b0:b2:39:7e:92:23:e4:8d:c6:be:e8:31:b9:28:a2:
23:20:8c:5b:51:55:1d:0f:da:37:82:99:74:b4:5a:23:86:94:
2e:79:a6:c7:4d:fc:cb:ba:30:7d:4d:ca:b1:a1:07:c9:8a:0c:
f0:06:e2:4e:11:dd:d8:a5:42:9c:65:19:9a:c5:69:cf:c1:74:
09:28:6b:c9:39:af:de:7b:3c:5e:37:68:49:c6:00:e7:78:08:
43:8d:1a:af:59:1e:71:a5:9f:15:7e:02:3a:6d:01:06:5c:18:
69:c3:87:20:21:dd:c2:75:0f:da:c3:d7:7e:c6:43:dd:85:33:
aa:5b:14:fc:f1:13:49:b0:dd:1c:84:2a:28:94:74:1e:08:34:
ef:7b:a2:6a:62:4a:45:19:bc:dc:14:9e:71:52:76:95:78:15:
7c:d2:a0:4d:11:55:d2:77:a8:de:e8:fa:a7:c1:b1:42:f8:12:
59:8b:2a:19:99:0f:40:37:16:8f:21:5f:8d:36:f8:32:2c:03:
43:42:e8:cc:38:39:c7:c9:3e:e1:bc:d4:03:12:c1:1d:2b:ee:
58:25:4c:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 6 05:50:04 2024 by rpki-client on console-ams.rpki-client.org