Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/VyzD9cdA-Rk2lsxleA34xeEeJW4.roa
File: VyzD9cdA-Rk2lsxleA34xeEeJW4.roa (raw, json)
Hash identifier: C61cMmV1/FQT/ZhEvQ9R1cO0lZlOHkvwNz12Bd/it/4=
Subject key identifier: 57:2C:C3:F5:C7:40:F9:19:36:96:CC:65:78:0D:F8:C5:E1:1E:25:6E
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 49
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/VyzD9cdA-Rk2lsxleA34xeEeJW4.roa
Signing time: Sat 17 Feb 2024 07:55:03 +0000
ROA not before: Sat 17 Feb 2024 07:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 17 Feb 2024 11:55:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73 (0x49)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Feb 17 07:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=572CC3F5C740F9193696CC65780DF8C5E11E256E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:e2:37:d5:0f:09:4a:9b:4a:47:47:f3:c3:0c:
e7:82:81:de:92:10:9c:0f:f7:87:b0:b4:0c:87:6f:
99:97:ad:15:b2:6d:67:dc:9a:3c:c0:75:d8:ec:1d:
5f:31:80:5a:e0:5a:d3:b9:46:e6:1c:44:c2:3b:a3:
87:d4:cc:84:c7:0d:7c:72:9c:56:cd:69:f4:3a:28:
65:5b:15:00:e0:c5:7c:12:90:9b:ae:bc:6f:74:6f:
25:bf:97:e0:b8:fa:f9:4a:76:5e:76:ef:45:dc:e6:
c8:c0:54:6f:81:c6:27:be:05:71:52:a9:59:57:51:
30:bc:65:93:3e:23:23:55:cc:36:82:96:15:0f:75:
5d:1d:4d:15:35:b3:cc:af:ee:fe:27:85:6d:e7:a9:
e0:50:3f:20:0a:75:42:11:e1:f7:e7:13:68:48:19:
1e:85:bb:ca:38:d1:6b:3b:d1:7d:72:a5:6e:64:24:
79:ca:83:12:66:62:9d:fb:a3:3b:24:bc:99:92:2e:
3c:7e:86:cc:c4:4f:5b:46:5c:6a:10:ce:31:c6:a4:
53:d8:2b:6f:c4:fd:37:b5:26:8a:0e:97:e8:f3:6e:
12:86:60:7b:f0:cd:c1:4b:ad:c7:93:e5:10:ba:e7:
30:fe:85:3b:76:1e:38:85:db:a3:51:e9:c9:00:6c:
65:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:2C:C3:F5:C7:40:F9:19:36:96:CC:65:78:0D:F8:C5:E1:1E:25:6E
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/VyzD9cdA-Rk2lsxleA34xeEeJW4.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
23:a2:dc:e5:0c:e6:07:21:2e:c0:b1:7a:6c:62:5b:6e:0e:31:
21:12:be:1b:a2:00:08:97:c2:ca:6e:a9:7f:8e:14:46:16:88:
59:7b:f0:c2:32:8c:3a:61:69:0b:20:86:51:a4:7f:9d:9e:5c:
ad:63:7d:fe:0d:9c:ab:23:61:c6:e8:f6:86:6a:98:19:ab:21:
c3:9e:23:99:30:b5:b7:a4:c3:9c:3c:62:5d:77:17:29:5e:28:
ac:46:51:62:c8:3c:5b:6b:8b:b9:aa:92:75:da:fd:34:f9:86:
4c:34:ed:0a:5d:26:fa:38:5c:09:1a:3f:8b:04:2d:86:c7:19:
3f:7d:8e:60:95:ff:ba:d7:82:83:45:2c:ba:74:b6:18:7c:e9:
f3:c0:47:f3:b6:3e:5b:e8:ea:a8:ff:53:56:6f:cc:fc:6f:fe:
4e:40:c0:89:45:c8:2e:60:d3:89:27:84:01:a8:95:66:44:7e:
35:8e:e6:5d:c2:5d:f5:e4:54:25:71:6e:9f:d0:67:c9:c5:fb:
36:49:e2:46:55:9e:b7:4b:08:8d:ad:6d:73:38:1e:6e:ce:b0:
17:2b:44:44:09:6c:d2:2e:b5:68:5c:81:5c:a3:82:27:c8:e7:
77:a1:21:57:56:7b:d1:21:d3:99:ec:86:7d:3a:5f:f1:3b:a5:
97:a5:b5:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:55 2024 by rpki-client on console-fra.rpki-client.org