Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/eKheNv8weI7RpT6xoX3TU9fCyoU.roa
File: eKheNv8weI7RpT6xoX3TU9fCyoU.roa (raw, json)
Hash identifier: iPtdmVvsFywI6HTuRyC+LD1qgi1EEKLM7EjVdDF7XfA=
Subject key identifier: 78:A8:5E:36:FF:30:78:8E:D1:A5:3E:B1:A1:7D:D3:53:D7:C2:CA:85
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 053E
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/eKheNv8weI7RpT6xoX3TU9fCyoU.roa
Signing time: Sun 07 Jul 2024 07:55:02 +0000
ROA not before: Sun 07 Jul 2024 07:55:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 07 Jul 2024 11:55:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1342 (0x53e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Jul 7 07:55:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=78A85E36FF30788ED1A53EB1A17DD353D7C2CA85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:a7:c8:6b:1d:5d:c9:f1:dc:72:a0:71:8a:2a:
af:52:d5:75:dc:de:f8:11:ce:0e:79:ed:fc:21:c2:
ba:cc:13:de:81:f7:25:31:45:98:8d:1d:43:f4:62:
6b:bb:a0:8f:0c:f6:42:a1:c9:3c:d9:50:0e:66:1d:
5e:c4:0c:7a:e6:c6:51:e5:da:14:1e:d3:ea:56:dc:
ec:45:79:ae:65:72:69:9b:fb:9e:31:78:97:6d:1e:
87:1d:86:33:ca:af:0c:be:8a:3f:0d:e6:c0:5e:3c:
dc:ac:f1:58:5a:3f:b2:7f:c7:02:8a:5c:f4:20:87:
f5:3a:48:81:63:98:f9:98:00:2d:01:76:a2:38:2d:
c8:65:30:24:90:5f:2e:a9:f7:24:be:ee:7c:1f:7d:
87:11:81:a5:24:ab:b4:cf:3e:f9:95:a8:6c:89:dd:
c2:40:96:cd:1f:61:71:1e:21:29:a1:5a:6a:52:a9:
25:73:30:1b:0d:01:db:1f:0f:f1:0f:41:e2:f5:d5:
a2:b9:50:fd:87:51:c5:24:4a:86:35:24:da:4e:68:
f6:48:b2:a5:bf:fe:96:13:5b:f3:96:be:e8:2e:4a:
7c:78:de:ed:ec:6d:1a:0d:df:3f:1e:a0:1e:b6:2c:
a9:c6:d3:fc:a9:54:59:ce:27:01:b8:c1:87:1d:de:
48:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:A8:5E:36:FF:30:78:8E:D1:A5:3E:B1:A1:7D:D3:53:D7:C2:CA:85
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/eKheNv8weI7RpT6xoX3TU9fCyoU.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
98:86:32:31:5c:a1:47:b3:c8:93:f9:d6:5e:fa:a3:91:bb:49:
70:c6:97:4b:c4:14:ad:4d:03:84:62:35:d4:3e:6c:1c:e9:2d:
74:34:77:cd:be:9b:c4:3b:f6:f9:b7:ef:f2:81:36:d4:de:8d:
07:40:b6:b2:c3:89:10:71:1e:7b:72:50:51:c3:e9:dd:c0:a5:
cd:f4:bc:70:60:fd:a9:09:18:d7:b2:a1:21:fa:8c:27:35:3f:
5b:39:ca:e7:06:3e:24:e8:e5:da:3c:bf:08:94:c3:39:f2:75:
1b:f2:1d:e8:40:78:0d:df:8e:c5:76:e2:4a:29:aa:e8:7d:e5:
38:78:bc:c2:58:d1:32:2e:3a:ec:c9:4e:f7:64:06:8f:45:73:
47:c6:27:f1:3e:5e:48:ff:d9:5f:49:36:09:6b:b0:c8:09:13:
10:e0:74:f8:fd:0f:b7:5f:12:34:4d:98:e4:93:3f:0b:7f:7a:
e5:ed:8f:47:76:e7:63:e8:3e:b7:75:ee:30:de:14:19:6c:d8:
3a:e0:03:b0:07:ea:f7:e5:d6:cc:c3:e0:41:91:83:51:c1:e9:
94:94:52:11:59:b3:dc:c5:b6:ad:e4:93:69:40:d5:bf:15:99:
6c:67:7e:d6:79:45:33:78:1e:c3:68:70:74:0c:40:af:d5:96:
8e:d2:9e:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 7 13:21:27 2024 by rpki-client on console-fra.rpki-client.org