Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/_-O_RQCZMTNp10bwa7t-PBdvfKM.roa
File: _-O_RQCZMTNp10bwa7t-PBdvfKM.roa (raw, json)
Hash identifier: xJkTf8yffXulVKpAxm3mHrWVM652RdVFdJOF56y/myg=
Subject key identifier: FF:E3:BF:45:00:99:31:33:69:D7:46:F0:6B:BB:7E:3C:17:6F:7C:A3
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0926
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/_-O_RQCZMTNp10bwa7t-PBdvfKM.roa
Signing time: Sat 26 Oct 2024 07:55:02 +0000
ROA not before: Sat 26 Oct 2024 07:55:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 26 Oct 2024 11:55:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2342 (0x926)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Oct 26 07:55:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=FFE3BF450099313369D746F06BBB7E3C176F7CA3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:24:f4:6e:b3:c7:a8:1d:b3:d0:1b:a0:22:89:
18:5d:b5:92:40:66:b3:81:a3:1e:c5:3c:2d:62:7d:
94:d4:34:fa:56:7d:0e:fd:86:7c:ae:6d:c7:bc:fc:
5e:b7:a8:32:4b:38:62:95:29:32:57:69:d9:ed:3b:
f3:b8:fc:ba:93:b6:d1:06:36:f6:2d:e6:64:2a:fd:
19:66:07:10:d0:79:37:b5:e2:18:b4:c8:0b:34:0d:
ae:80:f6:35:ed:c9:f4:c0:3e:c6:c5:08:94:58:21:
14:18:78:06:5d:e7:b2:d0:60:0b:f6:40:4f:06:e1:
27:84:22:cf:f4:07:bb:cd:f0:d9:40:ae:cf:cd:42:
de:dc:25:5c:2f:f9:26:8e:6b:0f:2e:3e:5d:b3:94:
42:03:23:61:1d:db:97:c2:79:c0:d1:b9:44:0f:d5:
1c:8c:33:1f:87:eb:97:26:b9:59:8f:90:36:90:c8:
42:8d:60:29:b5:52:70:19:2c:d2:54:df:59:14:37:
00:22:bc:63:98:d9:74:a6:dc:ee:2d:b6:99:4a:16:
91:36:44:cf:92:12:ac:ae:32:6e:91:8a:0d:00:7c:
85:42:ce:52:13:da:f2:0e:a9:cb:b5:e5:b6:8e:4d:
43:f2:59:04:b4:51:09:46:fe:dd:d5:38:1e:f7:7a:
86:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:E3:BF:45:00:99:31:33:69:D7:46:F0:6B:BB:7E:3C:17:6F:7C:A3
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/_-O_RQCZMTNp10bwa7t-PBdvfKM.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
63:46:b3:04:75:c7:57:8c:68:a4:88:7f:34:69:dc:25:d1:19:
81:5c:67:8e:a5:fa:74:e8:89:7e:13:54:d9:69:65:67:32:16:
d4:72:49:3f:74:2d:76:68:6f:0f:b0:e0:8d:e2:91:80:08:bf:
94:a0:e5:0a:0f:ba:88:43:0c:2e:4f:4b:41:da:19:ad:6c:22:
a3:55:57:e2:9b:59:c9:47:85:96:71:34:f0:d8:e9:43:18:75:
f5:3f:33:8b:8f:19:42:11:79:e4:5a:b5:f3:df:82:d5:9b:b7:
b5:91:1c:45:f7:03:ce:87:93:c2:30:01:4d:bd:4f:82:01:ca:
1c:86:b2:82:87:ca:8a:e9:64:c6:a1:84:26:8f:14:da:06:1d:
a2:ba:12:c2:bf:96:b8:d3:72:b4:ec:75:f0:f5:a0:0b:3f:0f:
ad:71:ac:05:a8:49:f4:c1:44:fd:75:f4:3b:f9:1f:7c:49:57:
2b:eb:67:d2:a1:a3:85:28:f7:2a:a0:18:5d:98:71:41:db:2c:
2c:96:bb:ac:2d:37:4e:d7:bf:ca:26:be:14:4d:08:d4:97:f5:
5b:be:46:8a:6d:21:f3:82:12:5d:83:22:5b:af:33:eb:2c:6b:
09:e7:ac:41:89:c6:79:1b:fc:79:29:0b:3d:a1:b9:d9:7a:e8:
73:07:81:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 26 13:24:30 2024 by rpki-client on console-fra.rpki-client.org