Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/W_eFN5qpbme6q12vJn_ZfgpcqqY.roa
File: W_eFN5qpbme6q12vJn_ZfgpcqqY.roa (raw, json)
Hash identifier: P7Kg8aPTGS5SWnICDEDAbjhBXWPXqoQejdnL9+DyH5M=
Subject key identifier: 5B:F7:85:37:9A:A9:6E:67:BA:AB:5D:AF:26:7F:D9:7E:0A:5C:AA:A6
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 09E6
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/W_eFN5qpbme6q12vJn_ZfgpcqqY.roa
Signing time: Sat 16 Nov 2024 15:55:02 +0000
ROA not before: Sat 16 Nov 2024 15:55:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 16 Nov 2024 19:55:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2534 (0x9e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Nov 16 15:55:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5BF785379AA96E67BAAB5DAF267FD97E0A5CAAA6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:2d:71:42:2b:e9:02:85:46:91:51:d3:0f:01:
d2:34:ef:9d:38:e9:15:92:f6:5a:7b:49:a0:b8:40:
21:13:bd:30:62:fa:a9:77:89:37:c0:a3:52:1b:ef:
19:62:83:3a:f1:52:4a:21:25:be:eb:77:1c:17:92:
15:51:5c:12:8c:4d:9c:43:7f:50:a4:e5:ae:1e:99:
45:fc:e7:95:7f:06:7c:64:4d:0a:5c:e3:b7:60:67:
e0:87:fb:96:d6:c2:bb:24:0c:fd:71:08:d2:09:2c:
aa:96:cb:d2:48:a7:38:dc:7c:34:8a:14:7b:bb:86:
6f:98:67:69:55:e0:36:a1:2c:37:02:59:03:2e:31:
f0:9a:6d:29:0e:58:ec:95:09:dd:99:3e:57:cf:25:
af:18:17:b1:43:82:51:96:9a:4b:36:6e:9d:cc:ad:
8f:79:99:ae:02:26:fb:b0:1f:e3:83:8e:ba:8e:80:
15:0c:9d:fe:83:81:80:10:57:d0:d4:2d:d2:56:8e:
c3:03:97:b4:52:78:fb:db:c2:c5:bb:57:38:01:c2:
f0:88:5d:5e:b9:b4:7d:d5:27:42:f1:47:44:97:58:
53:6e:15:8d:77:f2:e5:fa:94:93:43:f0:9f:26:b1:
d8:3d:19:b5:d0:cf:93:e1:ad:d3:f2:85:ae:00:2a:
58:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:F7:85:37:9A:A9:6E:67:BA:AB:5D:AF:26:7F:D9:7E:0A:5C:AA:A6
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/W_eFN5qpbme6q12vJn_ZfgpcqqY.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:cf:6f:d9:2a:1c:33:ec:87:e0:43:3f:5c:7d:ba:d2:82:6a:
07:bd:aa:76:b9:41:bb:74:cd:35:19:ea:a9:34:da:2a:f3:ba:
44:e3:28:c1:3c:1e:c6:c3:c8:2b:8d:63:5b:86:94:9c:15:3b:
07:ec:ff:a7:46:b8:14:e0:a1:92:86:59:7e:6a:0d:a3:63:3c:
5f:dd:9c:1d:8f:d4:34:12:cd:43:c1:23:cb:52:6f:35:5a:9c:
15:3b:80:e6:e8:54:d8:44:6b:57:88:0a:3e:d2:af:84:e0:49:
46:89:b1:a1:c8:7f:5d:82:0b:6f:e2:a5:c5:85:21:76:3b:b0:
1d:ee:09:6c:db:f7:c9:7d:b0:67:ca:57:ba:c7:77:dd:a4:c9:
90:a4:27:a3:23:61:22:41:18:c5:07:44:e9:9e:97:8d:06:3f:
d2:ae:b0:00:ab:a7:b7:4e:34:77:18:2c:48:4c:72:fd:85:3f:
85:bc:74:26:35:27:23:ca:4a:f6:0d:3b:e3:74:fe:2a:80:4e:
70:e0:65:9c:9d:ae:e9:cc:4a:6c:42:e7:1a:2a:49:e0:99:de:
2b:8e:1a:35:50:76:cf:f4:ea:72:9f:32:27:fe:31:2d:a3:d4:
1b:8e:07:40:b0:bf:c4:76:ed:4c:2f:4e:f4:71:72:fb:3f:05:
48:23:45:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 16 22:16:42 2024 by rpki-client on console-fra.rpki-client.org