Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/XmvHaxPvfs1SWfBJQwzTM9NOrNk.roa
File: XmvHaxPvfs1SWfBJQwzTM9NOrNk.roa (raw, json)
Hash identifier: Um4zmTYX+RzBA3fwA2DcuT3YtLdgXiwgWK85BNM0nfA=
Subject key identifier: 5E:6B:C7:6B:13:EF:7E:CD:52:59:F0:49:43:0C:D3:33:D3:4E:AC:D9
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 07E1
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/XmvHaxPvfs1SWfBJQwzTM9NOrNk.roa
Signing time: Fri 20 Sep 2024 07:55:03 +0000
ROA not before: Fri 20 Sep 2024 07:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 20 Sep 2024 11:55:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2017 (0x7e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Sep 20 07:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5E6BC76B13EF7ECD5259F049430CD333D34EACD9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:18:9e:fd:6e:7f:3e:7a:b9:c4:de:81:87:1b:
f1:f8:1a:35:38:30:9d:ec:aa:30:74:45:6f:d6:93:
5f:ce:92:b1:13:ca:ec:5d:3c:ca:8a:45:61:f0:95:
00:a7:12:e7:99:22:7a:85:c2:9b:e4:07:a6:9d:98:
85:44:20:68:31:7a:d8:2a:5d:ff:cb:0b:11:a8:81:
05:6f:ac:e4:ad:4b:d6:d9:89:cf:50:77:81:b6:2f:
b4:26:10:11:c4:17:98:d7:4b:2d:dd:af:b1:dc:70:
b0:40:a0:96:a2:9f:07:fc:48:dd:26:c3:5d:4b:c9:
d7:88:a8:c9:5a:e9:34:8a:59:10:47:40:74:a6:4e:
c2:f3:6f:b3:64:88:48:6a:d8:97:2e:53:0b:8a:ae:
80:34:ed:3d:4e:0e:f6:85:dd:cf:ea:47:22:4f:52:
aa:c9:dc:6b:fb:7d:6d:53:7c:0c:6c:67:d0:3b:e2:
41:5e:bc:cb:a3:3d:4a:c0:6e:dc:85:95:69:b7:70:
b6:1f:c6:a4:56:db:a7:58:96:4d:e6:a6:8e:6c:c6:
db:94:80:e4:7c:4e:1d:10:08:24:35:54:17:67:83:
78:1a:b8:e0:b5:ce:f9:a7:44:f3:d7:3e:47:60:a1:
9c:c7:45:07:97:ca:81:02:86:84:6c:ba:aa:12:56:
7d:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:6B:C7:6B:13:EF:7E:CD:52:59:F0:49:43:0C:D3:33:D3:4E:AC:D9
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/XmvHaxPvfs1SWfBJQwzTM9NOrNk.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
15:b2:f8:61:86:ed:d6:73:74:c9:b2:84:22:1d:d0:78:60:d5:
1e:bd:60:7e:d5:ff:81:56:15:d0:d4:05:bc:06:8b:a6:71:62:
e3:9f:c0:f9:cc:98:be:9d:86:72:19:ba:e5:5e:7b:fa:73:e8:
33:0d:af:e3:91:a0:30:a2:d5:8b:a3:76:41:ce:b3:cb:1f:52:
54:58:7f:6f:1b:02:88:86:f6:ca:91:8e:e4:71:af:a4:90:d4:
23:e2:65:68:f5:c4:ed:b7:47:b7:07:19:3c:b9:e3:f6:8d:4c:
df:5b:fb:9d:01:ec:95:e3:05:c8:05:c8:ac:81:83:1a:c1:86:
46:c7:c3:81:85:0a:cb:be:d5:5b:3e:90:74:cb:16:d5:3a:34:
6c:f4:8d:43:36:f0:e1:d4:6e:c4:fa:e1:40:79:b5:12:51:02:
c9:87:ee:2f:36:11:0a:93:f1:64:5e:00:b4:20:f0:57:2d:5a:
8d:c2:0f:3c:9d:81:a9:e9:e9:55:85:09:83:da:46:79:8f:43:
74:c5:68:cc:ee:19:c0:77:03:5b:7a:ab:4e:c3:1e:b7:d0:be:
06:7b:30:f7:80:df:a7:71:ba:f5:95:0a:88:49:d1:17:59:11:
da:e6:a8:03:a5:6e:64:8e:8a:f1:ed:a6:86:30:43:dd:80:11:
42:97:a2:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 20 15:00:17 2024 by rpki-client on console-ams.rpki-client.org