Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/X38p_7ausmjKWHSqVZ3aeHDsjqQ.roa
File: X38p_7ausmjKWHSqVZ3aeHDsjqQ.roa (raw, json)
Hash identifier: EZ15u0tKz9IGXyZMhXxi3ASCfWlfUY9noVp+lOam8n8=
Subject key identifier: 5F:7F:29:FF:B6:AE:B2:68:CA:58:74:AA:55:9D:DA:78:70:EC:8E:A4
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0217
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/X38p_7ausmjKWHSqVZ3aeHDsjqQ.roa
Signing time: Mon 08 Apr 2024 15:55:04 +0000
ROA not before: Mon 08 Apr 2024 15:55:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 08 Apr 2024 19:55:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 535 (0x217)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Apr 8 15:55:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5F7F29FFB6AEB268CA5874AA559DDA7870EC8EA4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:c6:e0:2f:25:5d:f6:07:d7:0a:0f:2a:13:2d:
48:33:62:9f:b5:b0:3b:4b:d5:04:7d:ea:c0:f4:e2:
23:63:8d:7b:29:79:d7:df:ae:c8:3d:84:43:77:9f:
24:83:c9:dd:4b:08:25:77:24:df:6e:13:70:c2:f3:
82:36:33:b8:5c:c6:22:9c:dd:e5:95:76:3c:d9:f0:
06:8f:a6:5e:c3:b5:6e:7f:ab:41:27:95:58:5f:73:
60:cf:0e:e4:28:59:bd:76:fc:f8:6e:5c:33:30:3e:
2d:7b:91:89:42:16:c3:94:04:61:b0:f0:8a:2f:af:
0f:e7:c0:1b:e6:7c:53:c6:8d:91:33:45:c0:9b:05:
a0:fd:3a:5e:1e:97:14:da:56:80:35:ac:00:4d:f5:
06:3a:3e:62:3b:b1:c1:dc:d5:6b:5b:94:44:1d:17:
4c:64:17:0f:61:82:da:7c:a5:46:84:c9:2f:09:11:
90:ad:f3:b0:f0:92:29:b4:bd:7f:4f:9c:b4:0d:60:
e8:74:81:d8:1a:40:59:ff:7f:d1:77:c5:2c:74:f4:
e5:16:bc:64:96:a1:85:fc:42:20:31:f2:c9:a2:38:
37:b3:f0:c9:3f:f7:a4:6b:79:ed:04:d4:4a:24:29:
3e:83:d1:82:96:2f:48:47:b2:02:9d:04:81:a9:fb:
80:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:7F:29:FF:B6:AE:B2:68:CA:58:74:AA:55:9D:DA:78:70:EC:8E:A4
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/X38p_7ausmjKWHSqVZ3aeHDsjqQ.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
af:22:6c:85:f5:8c:f7:df:66:ff:d1:e7:3f:62:73:a3:a6:37:
01:55:d3:f7:cc:8f:90:27:ae:30:7f:37:20:fd:3a:51:18:c1:
79:89:df:e1:88:c0:65:75:78:38:d6:8e:33:b7:40:59:c8:81:
46:78:01:49:c9:64:dd:c2:d0:b3:7c:ec:52:7a:f8:5f:b1:19:
cb:48:8b:33:e9:7b:2d:c3:5a:92:00:dc:b3:77:78:e2:5d:31:
35:d1:34:96:2e:d0:d8:e3:4a:f2:23:6b:39:72:5c:4c:87:38:
94:1b:39:a8:37:9c:bb:7b:7d:3d:10:3e:ce:5e:ec:ec:79:f1:
c2:2f:3f:72:3a:d7:c9:af:68:8e:dc:2f:89:2e:ab:06:96:30:
52:7d:7a:98:b9:85:3a:17:a1:ca:be:90:da:7e:2a:9c:97:e0:
fc:1b:29:a4:49:28:71:17:35:51:c3:15:61:62:49:57:58:3f:
e8:ed:59:cc:5a:28:7d:b8:f9:4c:69:2b:ba:62:a1:53:99:a1:
c4:7c:2f:b9:dd:36:ab:c0:c9:4a:55:3e:b6:b4:4d:62:55:7d:
45:3b:0a:b5:8e:e7:4a:1d:6d:8c:a4:39:a0:5b:b4:9d:e7:e8:
48:2a:db:91:f9:1c:e0:33:d1:9f:3a:0c:ec:35:5b:ed:8f:03:
b9:e4:f8:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:55 2024 by rpki-client on console-fra.rpki-client.org