Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/RSbbwJLyY0Qr4zFGN4yZSBlFy2Q.roa
File: RSbbwJLyY0Qr4zFGN4yZSBlFy2Q.roa (raw, json)
Hash identifier: vagKgtw/jnnJ9/93hu52c3T4h0qkibeDZrfBh0KvvIk=
Subject key identifier: 45:26:DB:C0:92:F2:63:44:2B:E3:31:46:37:8C:99:48:19:45:CB:64
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0505
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/RSbbwJLyY0Qr4zFGN4yZSBlFy2Q.roa
Signing time: Sun 30 Jun 2024 23:55:03 +0000
ROA not before: Sun 30 Jun 2024 23:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jul 2024 03:55:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1285 (0x505)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Jun 30 23:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4526DBC092F263442BE33146378C99481945CB64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:47:68:12:2d:fa:16:aa:c1:77:c3:46:ce:f6:
6c:47:3f:a6:56:b8:83:ea:e6:b6:45:a0:07:04:43:
56:90:93:55:ed:bd:b1:b3:56:e3:f3:5b:3c:c4:e6:
df:31:f1:a9:11:a5:9b:5a:f3:d4:8e:12:c6:db:46:
e8:8c:94:c9:1a:8d:bf:a8:62:66:f1:5f:2b:a2:6c:
5e:10:25:bc:c5:67:65:21:0f:a7:1e:88:54:81:22:
26:0a:37:92:e2:07:83:d5:cc:7d:c4:a5:b6:97:a4:
92:67:7f:a2:bb:f0:c6:86:da:33:fb:12:97:1d:be:
b1:0b:43:63:20:41:7b:67:47:fd:a1:66:d0:35:c8:
c6:42:a0:92:4a:4a:f5:f3:08:c2:b7:d9:53:dc:d0:
57:a3:05:a9:1b:8e:71:05:48:d9:6d:57:56:e3:db:
fc:42:6d:5e:ae:8a:85:b0:84:91:70:59:e0:78:29:
71:b7:da:83:09:3e:81:61:8c:e3:12:ca:99:22:1e:
b1:74:01:20:53:c8:9a:8b:df:9f:b7:fe:6f:b9:af:
96:14:00:21:88:7e:8e:61:29:43:f7:f7:b5:bb:23:
a2:8a:d1:8b:58:9a:f9:a7:19:88:64:2a:06:5a:fa:
8a:9c:a2:79:76:52:09:81:7e:0b:a9:2c:08:ca:f9:
c7:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:26:DB:C0:92:F2:63:44:2B:E3:31:46:37:8C:99:48:19:45:CB:64
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/RSbbwJLyY0Qr4zFGN4yZSBlFy2Q.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
de:b5:8d:ba:8b:f1:12:b7:fd:f5:03:ea:8c:af:ac:60:63:8d:
82:48:6b:29:41:97:ad:2a:fc:d4:f8:f4:9f:0b:fa:f7:79:9a:
9f:77:99:13:b0:60:09:d7:92:c2:74:03:bc:b4:cd:f4:3a:bb:
15:5b:8a:09:a0:56:d9:e9:5b:6f:a0:07:3b:70:e0:94:9c:3e:
14:c9:44:5a:e9:b3:0d:f3:ae:0c:7c:a1:c6:0c:f4:1a:cc:5c:
c1:8f:76:fe:c2:64:b0:3f:33:83:43:eb:df:de:a1:2c:b9:62:
23:96:c1:27:4a:45:86:59:78:fd:72:24:1e:82:21:48:78:46:
93:d0:c7:3b:01:00:23:1e:de:67:cf:fb:73:5f:51:70:85:fa:
37:01:ce:4c:eb:83:c3:bb:8f:b8:65:4c:42:7e:3a:ba:41:db:
dd:bd:5a:e6:ec:b7:b9:57:46:6f:e3:eb:2d:a1:8c:b9:43:6b:
d5:b9:fc:20:14:10:78:7f:40:d3:43:67:95:16:f6:30:9d:db:
11:26:03:5f:20:e3:51:c8:23:1c:14:4b:5a:d8:f5:c0:65:2f:
73:61:e3:d7:7a:23:e4:cd:c3:45:bd:21:f2:44:73:86:e7:ec:
0a:43:97:78:44:6d:ae:97:fc:9f:17:59:c7:31:34:e1:a0:61:
89:ea:98:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 1 05:28:47 2024 by rpki-client on console-fra.rpki-client.org