Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/V_yQ3Nj3B4uiCvPoZGM_WmVHmWk.roa
File: V_yQ3Nj3B4uiCvPoZGM_WmVHmWk.roa (raw, json)
Hash identifier: qsofXw4/RVAnY5vektyaFFFdCvEywsG3OcIUEIwa05I=
Subject key identifier: 57:FC:90:DC:D8:F7:07:8B:A2:0A:F3:E8:64:63:3F:5A:65:47:99:69
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 094A
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/V_yQ3Nj3B4uiCvPoZGM_WmVHmWk.roa
Signing time: Wed 30 Oct 2024 07:55:02 +0000
ROA not before: Wed 30 Oct 2024 07:55:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 30 Oct 2024 11:55:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2378 (0x94a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Oct 30 07:55:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=57FC90DCD8F7078BA20AF3E864633F5A65479969
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:20:b7:8e:dc:d9:45:bf:f9:84:8e:c4:45:5d:
c2:d5:43:36:f7:df:4d:ae:4c:09:eb:8f:28:8f:65:
50:60:32:93:f5:47:e0:49:c0:e3:ac:39:0b:f8:95:
35:34:26:fc:e4:c7:d2:df:d4:ac:27:eb:07:60:b7:
12:5b:24:15:b0:e9:b1:44:a4:95:d6:ed:86:7b:21:
ae:84:43:73:f9:b4:a3:a3:6e:ac:96:f9:6c:2d:31:
87:7a:6d:76:e2:a6:af:d7:93:df:d4:4a:c6:f9:f6:
c6:e1:d1:cc:bd:3c:0e:4e:5b:d7:5b:c1:f6:95:c7:
ed:48:3e:45:a0:cb:29:e3:64:6f:3b:e7:b5:3e:a4:
c9:68:65:fd:94:cf:3a:b1:27:e9:66:d7:06:4e:1f:
df:08:e3:7e:d2:04:43:cb:c7:d3:06:18:b8:fe:7d:
e0:b7:43:38:c6:73:0c:3a:3b:d2:f2:5c:fd:6f:f3:
7e:be:2f:4b:10:e3:16:e5:a3:5d:45:ab:84:cd:de:
8a:8f:15:93:20:08:44:88:cb:ee:b6:5f:3b:9c:a8:
25:fc:f2:39:1c:03:28:0a:d1:fb:70:d6:f8:ba:cb:
96:ea:fe:55:dc:61:a0:f7:c6:fb:c8:c7:76:0a:18:
e5:c3:d7:bb:8d:32:38:30:26:77:f2:68:44:3d:5d:
4b:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:FC:90:DC:D8:F7:07:8B:A2:0A:F3:E8:64:63:3F:5A:65:47:99:69
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/V_yQ3Nj3B4uiCvPoZGM_WmVHmWk.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
04:54:39:07:6c:76:a3:c7:47:b3:e5:27:d5:f6:a4:fd:23:3f:
6c:b8:65:04:85:d1:97:40:99:42:85:84:c2:f0:7d:79:5b:14:
ec:2e:76:cf:24:24:ff:58:17:11:b1:b2:b5:ce:96:f3:db:cb:
e5:33:66:4a:63:71:7a:30:86:88:e3:ac:32:b4:d1:6d:2d:d1:
0f:0e:f5:bf:12:08:2d:72:ea:fb:5b:83:99:2e:d2:90:ad:27:
42:5d:56:4c:da:89:90:4b:25:80:4e:4e:35:a1:02:ca:be:e2:
b6:bd:d2:4a:c8:f4:df:c1:2a:26:cf:59:82:46:4a:2e:ac:df:
75:f9:c2:fc:29:aa:1f:03:29:ea:31:5f:bf:22:c0:6d:f4:ad:
02:9d:54:de:fa:ff:e7:e9:28:2b:b8:8d:7d:c8:35:b9:20:3a:
46:75:d7:f8:1e:fa:9b:55:81:df:2e:87:e7:7b:b5:84:56:ce:
81:6b:0e:05:22:38:34:7f:d5:5a:50:9e:6e:30:1c:35:26:35:
f0:62:13:5c:e7:0d:aa:18:77:d6:fd:bd:6b:63:63:87:c8:54:
f6:1b:01:79:5c:21:0f:32:12:f8:60:a7:bc:17:af:04:97:ed:
7f:c6:f1:c1:39:aa:56:bc:70:90:a4:ed:25:26:59:64:1b:0e:
db:13:8e:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 30 14:14:24 2024 by rpki-client on console-fra.rpki-client.org