Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/eJZLbxSLU0HjIJRMEoh38BcwKQY.roa
File: eJZLbxSLU0HjIJRMEoh38BcwKQY.roa (raw, json)
Hash identifier: gqQUQ5w1de8NDyjFzO/k/XnoqQcFXZFLiHWrWwagILA=
Subject key identifier: 78:96:4B:6F:14:8B:53:41:E3:20:94:4C:12:88:77:F0:17:30:29:06
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 05E0
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/eJZLbxSLU0HjIJRMEoh38BcwKQY.roa
Signing time: Thu 25 Jul 2024 07:55:03 +0000
ROA not before: Thu 25 Jul 2024 07:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 25 Jul 2024 11:55:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1504 (0x5e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Jul 25 07:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=78964B6F148B5341E320944C128877F017302906
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:cb:e3:57:66:a4:1a:5a:62:46:49:84:cb:93:
a1:eb:02:9b:e1:6e:9a:ae:eb:33:ab:47:13:8f:4d:
b2:07:9c:63:8c:12:87:e9:95:4e:a3:47:cb:ac:1f:
ca:8f:fd:38:16:fe:38:40:ba:0c:65:b0:6c:fa:bf:
1a:5c:e9:6c:5f:08:8c:77:81:7c:2f:cf:ac:83:bd:
05:36:32:a9:8e:fb:5e:42:d9:24:ca:80:91:56:4c:
0f:c7:cc:95:3f:a3:c3:db:af:25:de:e7:8b:c2:a3:
1f:b4:df:6a:62:74:cc:b8:05:e5:16:05:da:ff:a8:
b3:7a:ad:19:c4:52:f2:d9:3f:f6:d1:e6:5b:7c:7a:
c2:27:a7:44:1d:df:94:31:ff:77:3d:f4:bb:95:10:
39:89:1d:00:a5:80:8b:ed:6b:dc:37:a4:14:96:8e:
5a:4e:fe:84:d2:25:29:b0:83:24:e3:a9:71:4e:24:
cb:f2:6a:1a:07:74:0f:35:4f:29:36:c8:4b:a1:b4:
25:98:ac:23:f8:d0:e0:cb:8c:be:f0:3e:83:02:6f:
e4:61:6f:27:fd:dd:78:66:c5:36:95:2f:1b:af:d9:
85:47:db:c5:d7:f9:ed:1c:dd:5e:a9:56:f0:08:9e:
05:8c:d3:8e:5e:9f:76:68:fe:7a:77:7d:fa:53:0d:
17:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:96:4B:6F:14:8B:53:41:E3:20:94:4C:12:88:77:F0:17:30:29:06
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/eJZLbxSLU0HjIJRMEoh38BcwKQY.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
56:fe:89:ae:df:e4:17:99:d1:e4:63:c5:4e:28:e2:44:60:2d:
5a:fd:cd:69:27:63:65:c2:c2:a9:c3:3b:b1:cf:7e:4b:9a:04:
d7:fe:df:85:a2:20:5e:8a:29:0c:33:23:5b:a4:55:d0:16:fe:
f4:4f:b1:d5:a6:03:09:cf:4f:fc:b4:36:2e:af:53:b9:9a:95:
71:1c:92:6d:49:83:9d:b8:d8:24:7b:53:5e:a3:2c:8a:1e:64:
57:1c:15:4d:a4:76:3b:ba:62:77:25:98:a2:7c:7a:7c:28:f1:
68:d7:f6:08:77:26:2b:f5:4b:86:f5:ae:c0:e1:ed:66:e4:0d:
0f:05:67:f1:c9:50:6f:52:80:fd:93:f7:1c:e2:84:d1:03:10:
b6:92:dc:5d:43:da:1f:c7:8a:e8:bd:de:95:80:e1:ff:82:fd:
f6:93:50:ab:40:df:a7:08:9a:7d:f9:ab:4f:8c:20:79:81:bb:
8a:01:f6:f5:95:d0:53:3e:5a:a8:40:d7:a0:d3:51:89:2a:d4:
42:42:98:ec:71:9f:e4:e5:71:48:27:80:26:87:da:ba:8f:17:
92:1a:27:f1:52:98:94:1d:2a:ec:e9:23:66:6a:2d:20:e4:6b:
a3:1c:79:aa:e2:c5:5e:64:d3:b7:3e:ab:ba:b6:24:8b:ac:10:
8d:9a:23:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 25 14:55:51 2024 by rpki-client on console-fra.rpki-client.org