Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/c8xpV43a6Uu56fHKPq-xv_vSw40.roa
File: c8xpV43a6Uu56fHKPq-xv_vSw40.roa (raw, json)
Hash identifier: WFkl8L4RSjBTkYsDDKGhmoSVgAwIwopGDlnmvF2oTwo=
Subject key identifier: 73:CC:69:57:8D:DA:E9:4B:B9:E9:F1:CA:3E:AF:B1:BF:FB:D2:C3:8D
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 05B6
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/c8xpV43a6Uu56fHKPq-xv_vSw40.roa
Signing time: Sat 20 Jul 2024 15:55:04 +0000
ROA not before: Sat 20 Jul 2024 15:55:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 20 Jul 2024 19:55:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1462 (0x5b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Jul 20 15:55:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=73CC69578DDAE94BB9E9F1CA3EAFB1BFFBD2C38D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:07:8b:82:fe:a6:af:c4:59:08:d2:2e:72:cc:
e0:fc:33:51:0a:ab:44:17:0e:4d:67:90:3c:72:c9:
20:94:df:f7:03:d5:ab:4a:b3:40:87:75:80:03:20:
96:1e:a1:ea:8d:55:75:12:89:36:2c:af:a5:f8:0f:
0b:c1:ec:7c:76:c6:ce:ff:73:3b:af:70:7b:04:e6:
0b:cd:f4:80:b0:52:3a:56:17:e4:3c:80:37:82:11:
84:03:4c:08:71:07:73:d0:9e:37:c9:a7:96:f8:49:
97:74:27:20:e4:f6:3f:fd:26:3e:17:bd:bf:7b:c7:
50:43:6b:44:9e:81:7c:c2:3a:2c:c9:31:1c:fa:15:
1b:d1:29:6f:28:50:dd:31:d0:d8:d0:74:dd:ac:cb:
6b:16:73:7a:da:5c:cd:f3:28:4b:e4:bd:11:70:97:
c6:2c:10:71:e2:ec:50:cb:f1:6c:e4:0c:b2:fb:69:
c6:a8:ab:9b:0c:f1:8b:24:35:dc:43:63:04:2b:f7:
a0:3c:74:16:89:84:0d:8b:a9:65:1b:be:54:ae:2a:
74:a2:e4:a3:51:2c:ea:9e:a6:64:a2:8a:27:e4:61:
cc:03:4c:cc:b9:e6:97:da:35:6b:2a:67:bf:fd:25:
4e:99:2d:cc:18:77:7a:ae:82:87:ae:9a:1f:ea:21:
c3:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:CC:69:57:8D:DA:E9:4B:B9:E9:F1:CA:3E:AF:B1:BF:FB:D2:C3:8D
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/c8xpV43a6Uu56fHKPq-xv_vSw40.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
53:62:4e:ff:89:fc:df:40:af:98:ea:b5:fb:cf:f4:af:a1:a8:
86:85:72:9d:91:61:49:bd:51:77:12:01:70:5d:b6:d8:51:13:
37:d1:18:1b:5d:27:a8:b9:f2:f0:cd:ca:8d:ad:5d:2f:ca:8a:
13:e1:86:ff:64:b4:ab:2b:40:33:cd:52:04:00:a9:08:a9:7d:
22:ec:ea:c6:ef:57:95:8f:3f:ac:91:eb:65:44:45:05:69:69:
15:f5:92:35:fa:5b:fd:45:61:e9:51:f7:1a:b9:5f:ff:c1:82:
97:7a:ad:50:00:5c:42:79:00:73:cf:81:18:c3:ee:79:f6:fa:
1b:1f:ae:7b:66:06:9c:52:59:fd:7e:6b:a9:d6:3b:01:d7:a9:
59:3d:a4:4c:cc:72:53:07:c7:ac:a2:b9:3a:1b:7a:d7:7e:2e:
62:df:50:5b:94:26:3a:06:cf:87:16:63:ac:d2:68:99:b1:1b:
90:8b:1a:cf:f3:00:2d:c9:45:e3:bd:bd:7a:6d:84:05:2c:7c:
94:dd:db:21:40:ec:e4:ad:e0:0b:b3:3c:21:c3:e3:c9:e4:ec:
e4:af:6c:8a:8d:20:c4:9f:9e:bd:f3:95:38:cb:71:89:51:0f:
c7:40:4b:c1:62:6d:f9:64:e0:9a:93:17:03:99:08:e8:01:a0:
7f:b9:e3:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 20 21:33:57 2024 by rpki-client on console-fra.rpki-client.org