Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/bvw0TDf5mcGhIV_ULfKkOwgE2HA.roa
File: bvw0TDf5mcGhIV_ULfKkOwgE2HA.roa (raw, json)
Hash identifier: Ho3r1RLuy207NesfFzl3wXm/90lVXmP8lffMTq9FSIk=
Subject key identifier: 6E:FC:34:4C:37:F9:99:C1:A1:21:5F:D4:2D:F2:A4:3B:08:04:D8:70
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 07A2
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/bvw0TDf5mcGhIV_ULfKkOwgE2HA.roa
Signing time: Fri 13 Sep 2024 07:55:03 +0000
ROA not before: Fri 13 Sep 2024 07:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 13 Sep 2024 11:55:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1954 (0x7a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Sep 13 07:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6EFC344C37F999C1A1215FD42DF2A43B0804D870
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:88:10:c1:8a:43:3e:68:0e:b0:4b:2c:63:77:
b0:2d:4d:66:39:2b:6f:01:9f:91:10:58:a7:a1:0e:
be:ad:00:4f:be:fe:36:0a:0f:bb:7e:8e:e1:8e:4b:
b5:dd:68:c6:a0:4e:22:66:bd:20:7c:73:71:a9:17:
1a:14:b1:09:f6:70:7e:ca:1f:05:55:76:be:8a:ee:
ca:50:98:83:7d:9c:b9:eb:f3:f0:bb:95:e2:cc:69:
94:49:f8:2a:28:0b:cc:8c:ed:4c:40:58:ca:e0:ab:
64:e4:a3:c4:2b:ed:41:e5:4c:e8:50:96:2e:50:22:
95:81:33:3e:83:5f:8b:c3:9f:5c:c7:32:1a:36:b3:
f2:f8:5a:12:c6:e5:60:f2:31:78:eb:5c:1f:db:8f:
74:83:46:d2:ad:f5:a7:91:88:b0:a0:1b:16:21:8c:
67:4e:cb:fa:3a:45:96:14:29:3f:62:a6:c7:7c:a6:
0b:4d:01:c0:1e:5e:e8:7e:2a:ca:3e:10:90:6a:fc:
33:81:99:27:5c:46:80:ab:e7:d2:d1:aa:97:02:6c:
71:fd:55:42:b3:78:b4:9a:ed:42:42:cc:4d:31:69:
71:2a:5f:7e:55:e4:38:cd:e9:95:bb:06:1e:56:77:
8b:86:65:75:b5:7e:27:0a:66:44:79:d8:84:44:5b:
d8:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:FC:34:4C:37:F9:99:C1:A1:21:5F:D4:2D:F2:A4:3B:08:04:D8:70
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/bvw0TDf5mcGhIV_ULfKkOwgE2HA.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:06:40:87:59:46:88:0a:26:56:b4:f5:18:29:ba:34:f8:ef:
fb:07:f0:3e:cf:5b:59:98:b1:21:d1:65:b4:d3:cb:c6:d9:a6:
f1:51:7b:48:b3:73:48:1f:fd:6e:9f:5d:d3:50:c7:df:2a:5f:
8e:b7:6e:db:ff:f6:13:84:71:3c:a5:91:7e:2f:3f:74:19:02:
c2:4f:5c:8b:2c:b4:7e:95:c4:1c:c2:ef:31:0e:aa:1e:f3:aa:
d5:39:59:20:fd:8c:fd:6d:3b:a0:d7:a2:1c:6a:f1:55:99:73:
63:86:db:bf:ef:42:46:18:de:60:5f:9a:7e:ad:87:e9:0b:7d:
03:00:e8:88:e0:70:f3:ac:56:e9:e7:34:d9:d2:bd:15:da:f7:
36:db:91:a5:f0:dc:00:3d:c9:78:15:2f:e2:41:00:f7:95:24:
71:e9:b3:e6:76:a5:10:a0:bd:ea:81:8a:e1:ee:df:85:6e:35:
06:16:d4:95:85:4c:44:b8:f4:b1:f0:50:a7:17:a2:54:73:2a:
f7:45:aa:5e:02:95:53:16:84:e3:b3:84:a7:89:43:01:e6:24:
4f:24:bc:c9:fd:46:81:87:15:0a:d7:9d:33:51:1d:66:86:59:
fc:f6:b7:f2:52:a1:3b:8f:c6:fb:60:05:bb:ca:9f:6d:61:35:
01:62:33:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 13 16:31:13 2024 by rpki-client on console-fra.rpki-client.org