Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/RbRMoGvR80hOXdI1YTsMTgrW048.roa
File: RbRMoGvR80hOXdI1YTsMTgrW048.roa (raw, json)
Hash identifier: tW2Lm73jp8ccIcuf8S50E5r4ejEjI++7/JjjK5Uxlg0=
Subject key identifier: 45:B4:4C:A0:6B:D1:F3:48:4E:5D:D2:35:61:3B:0C:4E:0A:D6:D3:8F
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 05FB
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/RbRMoGvR80hOXdI1YTsMTgrW048.roa
Signing time: Sun 28 Jul 2024 07:55:04 +0000
ROA not before: Sun 28 Jul 2024 07:55:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 28 Jul 2024 11:55:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1531 (0x5fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Jul 28 07:55:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=45B44CA06BD1F3484E5DD235613B0C4E0AD6D38F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:fa:2d:cd:87:5f:71:97:9b:46:b0:49:5f:72:
df:0d:a4:7d:6c:ce:3e:ee:f7:6b:cd:6a:ff:a5:09:
3b:f7:84:2d:c5:ec:82:33:3e:64:f4:f8:12:79:0c:
4e:53:23:12:b2:18:c6:c2:71:f6:d6:02:02:dd:f6:
de:5d:25:72:05:84:a5:dc:1e:c3:b3:d2:0d:b7:dd:
bf:a9:f7:bb:93:27:7c:a5:18:1f:54:21:96:e9:80:
ec:c7:d4:ce:97:92:e3:21:10:5d:6a:2e:d0:4e:36:
a0:31:43:31:51:59:9b:cc:16:8c:12:79:4a:8b:20:
d3:2f:5f:dd:b8:8e:ee:32:77:be:3d:64:fe:5f:35:
61:76:79:ea:3b:b4:58:23:1f:07:9f:71:40:a1:f4:
ef:13:6b:ca:94:aa:3c:ca:fc:44:93:32:06:8c:36:
7d:62:bb:61:0d:d7:83:41:b6:4c:d4:24:3e:12:60:
ce:55:5a:40:5f:3f:0f:c1:6c:ed:c3:df:04:e2:8c:
e4:1b:bb:fb:95:16:6b:19:26:cc:a8:6f:9e:6d:12:
0e:2c:97:8f:18:74:3b:e1:c6:b7:12:7a:5a:24:a3:
35:dc:90:fa:28:c3:a9:60:e6:04:c3:43:40:52:24:
47:9d:f9:fb:61:94:08:50:fb:57:ed:78:cb:ec:4e:
1b:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:B4:4C:A0:6B:D1:F3:48:4E:5D:D2:35:61:3B:0C:4E:0A:D6:D3:8F
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/RbRMoGvR80hOXdI1YTsMTgrW048.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
88:84:f2:32:55:fc:9c:5d:cd:c1:99:cd:84:5a:25:d0:85:a8:
ab:9a:ea:38:f1:56:15:9d:87:53:14:8b:8c:c0:a0:75:28:14:
67:09:f8:59:0b:f9:2e:59:cc:83:3e:9a:ce:bb:7e:1f:9d:05:
03:5a:73:6c:f5:7d:6d:d0:5c:bb:c5:82:fc:74:f4:47:e8:76:
29:e9:d7:35:32:58:5f:6d:d5:ed:e4:98:e6:36:d7:bb:16:25:
9a:ad:32:ed:0f:88:6c:51:34:64:a1:11:63:2a:02:bc:aa:bd:
c1:6a:66:58:33:47:e6:d9:e7:5c:e8:0d:6c:81:6d:24:cb:38:
40:db:c6:5b:f5:2e:a6:be:8c:c9:a6:05:88:cb:63:6c:69:94:
c2:28:74:cf:38:1b:d8:53:0f:ef:b2:7f:3b:7c:96:0d:28:55:
c4:0e:03:cb:f1:b3:82:68:48:ca:1a:4f:f9:75:c7:61:87:46:
df:b3:86:c1:5b:3a:bf:08:9d:20:36:c5:2e:b1:cc:87:45:0d:
34:d4:28:b6:3c:78:cb:48:a2:22:04:01:8b:a8:b7:6b:09:f5:
fb:97:05:b4:cb:1f:d3:83:76:f7:46:50:de:80:e6:93:e4:3e:
f0:22:c9:35:fe:27:d7:e4:02:95:9d:fc:51:b6:4e:49:b0:c4:
32:87:02:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 28 14:05:02 2024 by rpki-client on console-fra.rpki-client.org