Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/Xybdxmpa_1Gu30w_n1MOP9XXW1g.roa
File: Xybdxmpa_1Gu30w_n1MOP9XXW1g.roa (raw, json)
Hash identifier: AfWMe5x/baA7MhOO4yN1d0YhNLHDlA7H6qulmkWy0tk=
Subject key identifier: 5F:26:DD:C6:6A:5A:FF:51:AE:DF:4C:3F:9F:53:0E:3F:D5:D7:5B:58
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0655
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/Xybdxmpa_1Gu30w_n1MOP9XXW1g.roa
Signing time: Wed 07 Aug 2024 07:55:04 +0000
ROA not before: Wed 07 Aug 2024 07:55:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 07 Aug 2024 11:55:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1621 (0x655)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Aug 7 07:55:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5F26DDC66A5AFF51AEDF4C3F9F530E3FD5D75B58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a1:60:c1:97:05:bb:3c:63:84:cd:69:e2:ad:
e3:be:98:a8:26:1b:41:96:7a:73:7e:38:94:56:d5:
70:50:18:3b:29:e4:b8:51:ea:58:b1:1c:9c:f2:f9:
72:e4:68:35:27:92:67:be:18:78:56:f6:ce:ad:cd:
41:7f:9f:99:1b:8a:63:06:d3:f8:69:70:36:be:d5:
71:e3:3d:de:95:f7:c8:06:3e:88:58:03:88:79:9a:
30:78:ef:8b:35:95:5d:b6:5c:d6:96:de:5c:5d:33:
f1:bd:59:40:e9:e5:7f:a8:17:1e:1c:c9:5d:7a:5f:
0e:11:ea:2f:e8:b5:aa:02:20:41:fc:b6:26:e8:b5:
2b:ed:4d:b3:10:36:c0:ba:19:87:84:07:2d:ce:a0:
47:9e:73:a7:d2:d8:69:12:72:21:a8:35:8f:00:90:
66:85:3a:0f:ff:96:b9:5f:b7:f9:24:29:dc:e6:df:
64:3e:b9:ed:2d:cc:c2:07:3a:72:cd:8b:e0:3c:dc:
49:a1:43:b7:3a:d1:86:62:b3:be:dd:7f:9d:a7:08:
03:27:31:dc:4e:f3:d9:11:07:80:4f:5d:57:5f:5f:
48:e4:8b:a1:e7:7f:f8:56:dd:73:52:aa:e6:2d:ec:
56:73:2b:d7:47:08:b4:88:32:dc:3b:d1:21:e2:09:
f0:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:26:DD:C6:6A:5A:FF:51:AE:DF:4C:3F:9F:53:0E:3F:D5:D7:5B:58
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/Xybdxmpa_1Gu30w_n1MOP9XXW1g.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
d5:56:94:2a:2c:fa:f8:bd:dc:14:af:71:c4:7e:25:ed:dd:e2:
15:da:57:67:37:4b:e9:69:f7:42:2c:20:9d:ff:a0:22:97:4b:
07:22:ea:b4:1a:51:5f:1b:c2:0d:f5:ad:4d:6e:cd:45:85:ae:
7c:d7:33:90:0b:e0:58:a9:4e:e7:9a:62:2c:43:4b:c7:83:27:
2c:7c:e7:a1:a3:30:7b:e8:bc:93:ce:66:92:4c:ef:fe:c7:88:
15:b9:3b:88:8e:28:82:5b:ea:9f:de:e3:fd:5b:9d:4b:65:e7:
4d:cd:87:e1:26:10:7c:35:4e:dd:b0:c4:22:7b:47:96:bc:60:
5e:04:21:8c:91:97:4b:7e:e9:82:99:ed:41:b2:c5:f3:b7:22:
8f:ce:26:ea:8b:e8:38:ed:3c:24:5f:7d:94:8f:69:c5:7d:67:
29:98:e4:2b:95:19:5c:07:cc:ec:ea:b0:7e:94:b9:88:cf:ce:
d8:a6:17:ac:8e:70:90:6d:e7:17:99:bb:19:48:6a:2c:d1:4c:
6b:73:5d:45:3a:03:02:5a:e9:06:90:80:56:e9:c9:cf:10:d8:
5b:4e:5f:c0:65:b7:00:8f:60:58:6a:e7:9c:f5:61:1b:94:ef:
b7:4b:cd:97:cd:df:7b:52:23:14:72:10:ff:af:33:84:82:f7:
c7:50:f4:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 7 15:00:14 2024 by rpki-client on console-ams.rpki-client.org