Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/QnccQPYq4Mjx7yw7iccUuJgRPJw.roa
File: QnccQPYq4Mjx7yw7iccUuJgRPJw.roa (raw, json)
Hash identifier: PutRLfitGqdh6q6Dd9CsNxtLhYkva9dBfUsYicCYe0U=
Subject key identifier: 42:77:1C:40:F6:2A:E0:C8:F1:EF:2C:3B:89:C7:14:B8:98:11:3C:9C
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0442
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/QnccQPYq4Mjx7yw7iccUuJgRPJw.roa
Signing time: Sun 09 Jun 2024 07:55:03 +0000
ROA not before: Sun 09 Jun 2024 07:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 09 Jun 2024 11:55:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1090 (0x442)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Jun 9 07:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=42771C40F62AE0C8F1EF2C3B89C714B898113C9C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:55:2f:48:0d:e4:71:6c:a4:1f:39:0c:45:b5:
73:07:1c:ce:27:33:de:8d:18:06:b2:6a:e6:6d:89:
a0:4e:97:14:49:8b:ee:c5:cc:4d:67:e3:46:7a:b2:
b1:a0:0b:28:c0:c8:65:bc:e9:2d:bd:c8:75:6b:a2:
6e:18:81:8a:55:ac:6e:e1:ee:b3:b8:99:6a:5c:8b:
b0:1f:50:8e:49:1c:66:5d:13:5a:54:d8:e5:83:9e:
45:eb:f3:78:b3:bf:ca:4c:0a:16:ea:90:e0:2f:e8:
d9:b7:53:d7:2a:ee:7e:fe:13:89:0e:f8:da:ef:22:
56:06:66:3b:cf:ef:13:50:e5:4b:bb:e4:db:c9:28:
1a:09:c9:2c:8a:f2:17:ea:c5:d5:c0:f3:85:c8:9b:
df:c3:d7:36:9c:69:c1:73:67:b6:eb:55:bf:05:f4:
83:56:30:a2:9f:41:30:17:9f:91:70:fc:de:3f:9f:
fb:37:b9:c5:4d:d7:09:6b:70:87:a1:ec:a4:63:18:
3b:da:f3:9d:f2:1e:94:45:2b:7c:51:c9:8f:18:0e:
6e:35:65:63:0a:dc:bb:ee:9f:8b:7f:6f:80:fe:19:
3a:39:8c:cd:59:e9:17:5a:9f:d5:e2:1a:cf:83:a2:
e3:c2:af:52:af:2a:3d:7e:5b:fe:9f:a2:71:42:d7:
a2:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:77:1C:40:F6:2A:E0:C8:F1:EF:2C:3B:89:C7:14:B8:98:11:3C:9C
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/QnccQPYq4Mjx7yw7iccUuJgRPJw.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
c0:52:2e:df:65:cc:2e:93:6f:69:5b:32:18:12:95:82:5c:e8:
97:04:b7:96:a7:36:04:de:ad:94:a1:8d:1b:83:89:4f:9a:83:
89:41:24:6e:2b:d5:01:eb:10:cc:6a:cf:8e:bb:a9:11:06:7f:
eb:4e:81:f0:6c:72:1b:1c:f9:87:39:4e:7d:b8:f0:42:d3:a7:
7c:a4:63:fc:75:d5:83:23:b9:09:8b:76:29:8b:d5:2b:af:42:
dc:0b:45:a0:27:00:0d:9e:a5:1e:b9:a9:a3:e2:38:98:cf:24:
8d:18:f4:c9:1f:37:47:e2:28:05:ee:2a:d2:6a:9e:a8:f3:20:
50:5c:85:19:6b:ea:dc:20:a2:03:15:86:e3:63:17:b3:47:8a:
b3:a8:1d:89:6a:fe:96:d3:9c:ba:b2:c3:ee:c5:16:fc:9a:8d:
b6:10:86:64:6d:22:67:d5:36:01:ed:5b:ed:a4:67:52:d1:91:
26:0a:54:15:b1:d6:94:be:4e:90:a6:9e:d7:61:17:83:e3:f9:
f8:8c:d3:2d:a7:47:60:13:01:f3:87:3b:9f:6b:f9:14:96:3d:
bf:2d:af:70:7e:0b:e2:8b:69:17:ad:b1:3d:3c:19:47:93:d5:
a2:73:f0:4c:d1:14:a8:de:89:49:a0:28:1d:15:38:16:dd:fa:
7e:66:74:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 9 14:08:36 2024 by rpki-client on console-fra.rpki-client.org