Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/Xe1kkfnmSv6ZU0UFpYS8qGyLLm0.roa
File: Xe1kkfnmSv6ZU0UFpYS8qGyLLm0.roa (raw, json)
Hash identifier: cFQXp2e1oI+fbyDTs8lADuRtxiRy1t7HiWLEYgqRenk=
Subject key identifier: 5D:ED:64:91:F9:E6:4A:FE:99:53:45:05:A5:84:BC:A8:6C:8B:2E:6D
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0430
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/Xe1kkfnmSv6ZU0UFpYS8qGyLLm0.roa
Signing time: Fri 07 Jun 2024 07:55:03 +0000
ROA not before: Fri 07 Jun 2024 07:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 07 Jun 2024 11:55:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1072 (0x430)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Jun 7 07:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5DED6491F9E64AFE99534505A584BCA86C8B2E6D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a8:12:35:6c:87:d6:a3:99:b7:16:d2:92:9b:
fc:77:37:1a:b5:df:af:55:9a:0c:57:06:33:27:1c:
5c:94:88:09:63:bc:90:46:3e:6f:81:e7:18:1f:9f:
6f:2f:86:6b:09:f7:c2:ad:ab:64:54:58:d3:dc:d4:
6c:62:51:79:ca:1e:8f:41:80:54:a7:5f:93:60:11:
2c:9c:a2:00:51:ab:04:85:d8:3c:69:2d:8f:d1:e2:
d5:86:81:f1:d8:e9:3d:7b:bb:96:1c:f7:38:d3:f7:
85:30:fa:9a:d4:7c:ad:52:a3:95:93:06:ae:df:42:
28:3e:0f:9e:33:15:48:bd:15:90:f4:72:07:c0:26:
67:fe:b1:5d:2a:45:37:de:82:d6:6d:48:c2:53:50:
34:78:db:f2:73:0a:eb:12:36:11:f2:b4:e9:d1:cb:
9a:f8:ef:c9:63:f4:4c:3c:58:a4:3a:69:89:2e:06:
9c:85:07:67:4f:1f:52:bd:11:a7:b5:2d:d9:65:a8:
e0:75:45:32:fe:f9:e9:4d:e6:a2:3e:4f:0e:a0:92:
d6:42:09:7c:ac:c3:a6:ed:62:07:8b:43:5d:9a:09:
2a:0c:6e:9e:a2:e0:ba:5f:c5:d5:73:68:ed:c0:e3:
d8:18:b8:d4:a3:0a:10:ce:eb:5a:3b:fd:8f:5e:53:
ec:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:ED:64:91:F9:E6:4A:FE:99:53:45:05:A5:84:BC:A8:6C:8B:2E:6D
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/Xe1kkfnmSv6ZU0UFpYS8qGyLLm0.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:9f:9d:5f:e8:e8:bd:af:ea:80:58:70:85:a3:e9:cb:f3:9a:
ac:c2:07:34:6d:fb:41:04:a9:05:56:8b:f1:22:3b:d6:18:60:
5f:01:e0:3b:8d:3a:a4:95:a8:d9:b2:c7:d0:b3:9f:0e:61:b4:
c2:2f:63:83:32:1a:8a:f1:08:1d:81:b3:47:df:1e:59:ba:56:
64:21:d3:78:ea:a6:66:49:2f:6d:2f:20:90:c4:a7:8c:d4:46:
2b:da:a5:ed:1d:7b:d1:ed:f6:1a:63:61:53:69:1d:ce:fa:4a:
92:17:7a:32:4c:80:c2:6e:0e:17:c1:72:ed:1f:af:50:d9:76:
8c:e3:5f:10:93:a3:80:09:67:92:87:20:92:56:0b:4a:da:99:
6f:d8:0c:d1:c6:42:dc:7d:98:3a:05:cd:da:1b:b1:bf:5f:dc:
3c:66:df:73:f0:0a:eb:c2:06:1c:55:f1:17:5e:5b:35:52:91:
e9:5e:65:83:0b:30:c3:65:81:24:2f:b3:10:6b:57:47:bf:dc:
4e:84:e9:5d:6e:88:95:db:93:b6:c5:f6:9a:71:d3:2d:f7:65:
15:db:34:06:d7:14:0f:1b:bb:0d:d6:da:fe:ff:79:05:24:5f:
23:a7:90:70:df:26:14:7b:ea:fa:b5:af:f4:c6:fe:1d:6b:82:
30:ae:02:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 14:48:45 2024 by rpki-client on console-ams.rpki-client.org