Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/VEgeXXGOQgymZ5H16kQ82IBtz-Y.roa
File: VEgeXXGOQgymZ5H16kQ82IBtz-Y.roa (raw, json)
Hash identifier: CtIpxYlxVHetBeZ2JBJ1Fh35KD5MUSphLxWUDuD6dZI=
Subject key identifier: 54:48:1E:5D:71:8E:42:0C:A6:67:91:F5:EA:44:3C:D8:80:6D:CF:E6
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 04CC
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/VEgeXXGOQgymZ5H16kQ82IBtz-Y.roa
Signing time: Mon 24 Jun 2024 15:55:04 +0000
ROA not before: Mon 24 Jun 2024 15:55:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 24 Jun 2024 19:55:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1228 (0x4cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Jun 24 15:55:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=54481E5D718E420CA66791F5EA443CD8806DCFE6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:1a:44:9d:ca:57:3b:48:43:f7:3c:8b:4a:83:
a3:da:6f:71:64:7a:d8:5e:d6:93:fa:09:9c:ed:3e:
49:b2:91:70:f5:bb:f4:2c:ef:26:08:74:ee:73:44:
e5:9b:4b:7a:05:62:b3:cf:59:58:8b:01:64:9e:35:
56:a8:7e:67:55:d2:ae:ae:01:2b:be:51:4e:3b:44:
ec:f0:b7:92:c3:cd:60:d1:d5:b8:e6:f6:df:73:cc:
a9:b9:23:a4:5f:77:72:da:80:dd:2b:ad:55:25:9c:
77:84:10:96:16:d9:99:8c:7e:a2:81:82:d2:32:77:
b2:57:43:49:ef:3b:3a:0b:10:b3:f9:6d:af:20:d5:
b6:b4:c0:d5:b8:bb:1f:3a:e1:96:01:4e:f1:88:fc:
47:96:eb:95:ec:cc:19:29:34:15:70:c3:43:fd:67:
30:ab:76:8d:43:db:6e:08:de:b8:4d:28:f4:57:b7:
b2:eb:4e:49:74:43:76:a9:b1:4f:09:73:34:e5:3b:
04:b0:87:19:99:96:57:51:3b:74:b9:6d:e0:ff:da:
83:38:40:30:5c:d7:62:64:2a:b0:43:c7:ef:9d:e9:
a9:b4:06:45:9d:69:31:bb:b8:b0:eb:d5:2c:55:8d:
a6:28:c3:d0:8c:b1:62:e1:d6:a9:04:26:ce:ea:47:
c8:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:48:1E:5D:71:8E:42:0C:A6:67:91:F5:EA:44:3C:D8:80:6D:CF:E6
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/VEgeXXGOQgymZ5H16kQ82IBtz-Y.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
88:c7:dc:bd:bd:8b:cc:1f:74:46:41:bb:1a:a3:ea:1f:23:b3:
01:5f:fd:a9:b5:c6:bc:27:18:0a:8d:5d:df:d0:04:2e:0e:21:
0d:8f:78:be:5d:14:6a:6c:4d:a1:ce:f3:9d:06:79:40:39:40:
45:c7:88:37:b4:5e:52:ce:7d:6b:c4:2a:ec:36:40:68:e1:0b:
3f:4e:fd:73:fe:38:86:78:92:be:07:8c:19:da:a7:57:0b:76:
0c:3b:0d:28:93:a5:88:b8:90:24:bb:81:06:04:31:d5:d9:4c:
d3:57:c0:13:93:81:9e:7c:8d:42:5e:35:12:f0:75:f5:32:88:
ea:95:19:1b:20:dd:0c:78:58:d2:7f:3a:81:9c:54:78:72:d8:
8d:c5:f5:22:b4:98:52:01:77:b6:5f:d2:01:1c:c2:6f:c7:95:
37:89:f5:ad:5b:ce:4e:57:15:de:a9:e9:8b:a2:b0:ae:d1:c7:
c6:7a:dc:23:fd:88:f3:66:38:0d:b8:c0:77:2c:c4:e4:ae:d5:
e2:61:ea:d8:57:c6:c5:a2:c9:ad:98:fd:3a:be:83:60:6d:59:
4b:f1:36:9e:c3:dc:f6:30:b7:bf:53:30:8f:2d:62:fe:45:de:
eb:d5:39:07:de:7b:24:23:89:93:98:b4:da:23:31:ee:b3:ad:
ae:47:46:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 23:03:53 2024 by rpki-client on console-fra.rpki-client.org