Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/a5LJ1o_XQNIoAUY5PNvPQWNaY8w.roa
File: a5LJ1o_XQNIoAUY5PNvPQWNaY8w.roa (raw, json)
Hash identifier: NiqU0w+QsUThuXjNumQNHTLCXREgIgLmAMKM6zkUSD8=
Subject key identifier: 6B:92:C9:D6:8F:D7:40:D2:28:01:46:39:3C:DB:CF:41:63:5A:63:CC
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 05C2
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/a5LJ1o_XQNIoAUY5PNvPQWNaY8w.roa
Signing time: Sun 21 Jul 2024 23:55:03 +0000
ROA not before: Sun 21 Jul 2024 23:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 22 Jul 2024 03:55:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1474 (0x5c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Jul 21 23:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6B92C9D68FD740D2280146393CDBCF41635A63CC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:f9:32:de:fd:7a:83:86:e6:81:7b:84:01:73:
e2:6c:83:b5:08:7b:5d:de:c7:82:0a:97:ab:cd:04:
30:3f:72:0e:4d:69:0d:36:73:59:58:0c:a9:51:b0:
1b:44:cf:c2:e5:f3:7a:4c:f7:45:5a:39:98:fa:6b:
6a:be:5a:3f:0a:81:99:de:6d:07:6c:d9:06:f3:c1:
48:e0:d4:27:6b:b1:74:c3:f5:59:4e:20:bd:f6:c3:
c5:ff:91:a2:5e:2d:04:4b:e7:a6:d5:ec:46:57:75:
f3:5c:2a:ee:41:22:94:33:66:4d:da:f0:6c:a6:5a:
ae:e1:8b:e3:32:09:a1:e5:02:83:da:16:7e:5d:19:
25:08:89:27:a4:bf:c7:95:37:a6:b4:f5:49:ae:e5:
e0:37:f8:d0:58:0b:89:13:ad:39:76:2e:a0:7e:be:
48:42:6e:3c:6c:6e:34:f1:74:1d:e1:ab:eb:78:1a:
91:b7:7f:f5:75:e7:4a:da:dd:38:ac:2f:c0:ed:38:
b8:47:3a:72:23:e2:22:12:3c:44:af:c7:c6:5d:f3:
74:92:70:3e:93:b2:68:1a:b1:15:88:8c:60:7b:35:
05:47:7b:e6:c7:cd:e1:c1:21:fa:8d:8a:8b:75:51:
04:ef:54:f2:93:f6:46:e9:e4:a8:ed:8e:c9:91:95:
75:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:92:C9:D6:8F:D7:40:D2:28:01:46:39:3C:DB:CF:41:63:5A:63:CC
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/a5LJ1o_XQNIoAUY5PNvPQWNaY8w.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
54:81:33:df:3f:94:6b:64:88:22:f6:95:ce:c3:6c:02:67:93:
69:1a:17:bf:8b:3d:03:2c:bb:6a:5a:dd:54:e0:0b:20:a1:bf:
f0:17:50:0f:50:a4:18:3b:25:96:67:12:01:2d:85:38:9f:a9:
dd:61:68:a7:60:3d:a2:57:be:b9:cb:b5:d6:42:05:22:68:f8:
3c:28:00:5c:ec:eb:37:f5:0c:03:e9:c6:45:8d:43:45:2f:65:
20:3d:3c:00:99:7c:03:3e:b9:28:8e:d5:a5:d4:61:5c:89:b7:
d6:ea:9a:6a:a7:68:27:d7:2a:21:96:1e:b5:b6:73:bc:f2:42:
a4:a9:0d:bb:65:f3:f0:49:27:71:63:5c:06:d3:b0:c3:15:01:
3a:c2:3b:c3:c6:82:79:cf:7b:2d:d1:28:c8:27:b5:28:ff:da:
2d:89:b4:3a:94:52:ab:a0:f7:8c:e3:b9:24:c5:b7:d6:df:3f:
f1:41:68:58:dc:f3:b1:c8:a5:35:3f:6d:94:4d:63:42:82:d2:
83:04:2e:e6:81:79:3b:10:db:f8:d6:a6:f2:e3:f9:07:31:78:
63:19:7c:32:e9:6c:d2:78:0c:0e:ce:56:da:de:d4:89:45:11:
79:96:5c:35:82:75:87:53:ec:42:29:70:98:38:fa:84:93:38:
cd:ca:0c:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 22 07:23:44 2024 by rpki-client on console-fra.rpki-client.org