Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/RxgCQ7qBndmw4UM7--41cdxoa0A.roa
File: RxgCQ7qBndmw4UM7--41cdxoa0A.roa (raw, json)
Hash identifier: UHyRkoGOle9Dx9RX/PExoZyOCAKZ3wNbA2DVbBTSQKA=
Subject key identifier: 47:18:02:43:BA:81:9D:D9:B0:E1:43:3B:FB:EE:35:71:DC:68:6B:40
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0898
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/RxgCQ7qBndmw4UM7--41cdxoa0A.roa
Signing time: Thu 10 Oct 2024 15:55:03 +0000
ROA not before: Thu 10 Oct 2024 15:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 10 Oct 2024 19:55:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2200 (0x898)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Oct 10 15:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=47180243BA819DD9B0E1433BFBEE3571DC686B40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:75:73:a4:ea:dd:ff:a8:c3:72:02:62:49:c7:
d5:31:42:9c:2f:94:15:9c:c2:11:19:bd:07:6f:da:
c3:0f:d7:a3:d4:a0:7f:99:59:49:19:19:50:a8:f7:
a1:f1:64:8f:34:31:6e:2e:c6:1b:f0:a0:aa:80:22:
95:78:11:18:f8:96:d3:60:0c:1c:ff:b4:8a:e9:fe:
3f:96:95:22:30:05:5e:82:31:2a:4e:58:38:70:cd:
39:15:45:11:e5:bd:1b:dc:99:f8:2f:5d:66:1c:4b:
ec:2e:af:cc:bd:77:e3:11:78:40:cf:d6:6f:0c:0f:
ab:54:90:e1:f5:f7:a6:3e:eb:5c:ea:c3:89:33:84:
b0:bf:9b:68:41:6e:81:50:4b:a3:21:e3:d0:96:2d:
98:59:dc:b7:59:ec:64:41:87:24:44:de:a2:40:07:
69:25:c8:1c:39:67:d9:d9:ff:7d:70:2e:0f:e6:a3:
73:9d:ae:d9:ea:09:35:08:ea:47:49:91:a5:25:45:
90:c6:1a:c2:78:24:77:25:89:94:8d:31:a7:41:4d:
8d:a0:f6:c6:5b:3a:00:d9:d4:85:72:d2:66:27:ee:
08:be:87:04:95:65:03:75:12:22:0d:9e:33:4f:42:
a2:c9:89:4d:0e:6f:1b:c6:40:2e:81:88:48:25:60:
a4:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:18:02:43:BA:81:9D:D9:B0:E1:43:3B:FB:EE:35:71:DC:68:6B:40
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/RxgCQ7qBndmw4UM7--41cdxoa0A.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
cf:61:09:fa:a0:6d:c5:a9:39:45:3b:94:42:d8:f5:19:56:7b:
90:24:ca:b3:8d:2c:9b:21:1b:06:6d:e2:5f:0a:38:27:bf:a3:
e1:87:4f:7b:78:46:df:cf:8b:c3:20:15:75:6a:86:6b:2b:22:
52:fe:f1:33:d9:f7:4f:46:96:50:35:dd:ed:3a:7f:6c:3b:71:
3f:cc:7a:25:f1:5c:3e:04:2e:4f:26:d9:37:ef:24:e4:71:16:
92:7b:8e:ba:6d:49:4d:80:e3:e4:c7:c2:26:6f:7e:46:13:d1:
a2:02:0c:41:e9:68:bc:48:47:cc:df:81:61:09:95:eb:b3:a9:
d8:c2:be:96:60:79:83:e6:36:cd:30:a6:a7:e3:d3:c7:40:b8:
95:d9:c7:35:cf:a3:db:57:23:71:62:51:a3:86:44:9e:b4:7d:
ec:3b:2e:46:24:f1:a3:05:8b:0f:9c:a1:1e:c6:15:82:0f:7b:
95:50:b5:e8:4b:81:86:6e:c9:5a:d3:14:64:df:0e:66:f2:58:
ba:64:01:da:70:6e:8c:62:ca:a1:6a:8c:ea:24:f0:ed:a1:0e:
b2:fb:bb:86:df:12:39:46:46:eb:1b:f0:e0:1f:94:f0:81:e5:
67:7e:d2:d9:fa:8c:86:69:45:53:7b:c3:8c:e3:89:aa:1f:42:
24:84:c6:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 10 21:18:40 2024 by rpki-client on console-fra.rpki-client.org