Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/eUm-aSC0Ysn0vRDWapzekt8uBC8.roa
File: eUm-aSC0Ysn0vRDWapzekt8uBC8.roa (raw, json)
Hash identifier: 0lw7b9adCvjoxcR6KtuxM0xIm6U5xP4455LTfXoBWxg=
Subject key identifier: 79:49:BE:69:20:B4:62:C9:F4:BD:10:D6:6A:9C:DE:92:DF:2E:04:2F
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 06F4
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/eUm-aSC0Ysn0vRDWapzekt8uBC8.roa
Signing time: Sat 24 Aug 2024 23:55:03 +0000
ROA not before: Sat 24 Aug 2024 23:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 25 Aug 2024 03:55:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1780 (0x6f4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Aug 24 23:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7949BE6920B462C9F4BD10D66A9CDE92DF2E042F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:e2:9b:7e:3d:33:d3:87:48:61:26:86:93:29:
5f:18:f6:e0:4c:d6:e2:bd:b2:7b:45:b6:05:e0:24:
6e:c0:87:37:60:ae:d3:b0:63:c7:a0:c9:7a:c5:51:
09:00:92:1e:9a:b6:ba:59:14:cd:3a:41:f3:c0:79:
56:2c:f6:56:d2:25:70:24:db:fb:cd:a7:d3:6c:a5:
c0:b8:0b:b2:97:e3:f1:d0:c5:2b:45:3d:e2:89:22:
00:2f:a9:0e:56:6c:4f:3b:77:54:73:1b:49:5f:85:
4b:4f:27:5d:fb:c7:32:01:6b:04:b9:49:93:51:e7:
55:47:d1:44:23:c6:74:3a:13:34:54:b4:48:8b:5e:
c4:71:40:a8:2a:9b:20:15:64:20:94:6b:cc:47:dc:
99:75:bf:66:b7:0a:aa:32:1f:7a:60:b5:fd:48:ed:
c0:4f:9f:05:57:e8:b8:91:d5:cd:3d:92:e5:5d:f7:
0e:ae:1b:b2:9d:3a:e7:4d:44:1d:76:37:f3:12:6f:
a7:4e:81:4d:33:f7:09:a4:b3:aa:95:c8:e3:0f:fc:
c9:0e:59:56:09:28:40:5d:ef:73:e6:14:6b:ca:3e:
32:5a:cc:58:17:05:ea:2c:21:6d:f7:f7:19:13:e6:
88:99:1e:05:b0:21:6f:8f:8e:99:32:5e:c1:95:d9:
3a:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:49:BE:69:20:B4:62:C9:F4:BD:10:D6:6A:9C:DE:92:DF:2E:04:2F
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/eUm-aSC0Ysn0vRDWapzekt8uBC8.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
39:ef:4d:5c:0e:05:c4:df:0a:3d:e9:b8:7c:9c:bd:6d:5d:81:
21:ec:60:1d:26:60:72:c6:f0:7b:2c:de:23:bd:7a:3d:08:e6:
16:17:67:f3:2e:d3:5e:0e:7d:3a:27:c2:51:93:51:cb:44:29:
73:ac:ed:d5:60:91:56:4e:08:ed:62:65:38:5e:01:35:38:ac:
0d:02:6a:ec:24:a8:97:9f:38:8e:25:f0:50:00:79:b4:1b:6a:
47:cd:24:c6:8a:1d:36:e4:4f:ff:d4:cf:5d:47:c9:27:7f:2f:
27:78:d8:4e:d3:76:69:c5:1d:67:07:4a:43:a9:dc:47:c7:d7:
a8:53:08:4e:03:27:c1:fc:82:18:c0:26:80:ec:a5:c3:8c:2a:
61:9d:52:d9:24:a5:8f:10:2a:5d:8a:55:15:c2:19:b4:2b:ec:
b1:da:dd:45:ac:fd:2b:d0:9c:9d:ca:81:3e:cb:ff:95:76:ad:
18:45:fb:a6:03:e4:76:02:df:e6:9d:45:09:63:e5:3e:d9:d6:
94:f6:c4:ac:74:f4:30:2c:54:e7:fc:23:97:5e:97:8b:dd:85:
56:37:b9:e2:ce:25:9d:06:54:47:e0:4d:4d:0f:08:a2:34:00:
47:9f:e3:b9:c1:e9:cf:36:e7:8d:47:a2:5c:14:90:b5:ed:ed:
9e:23:ba:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 25 05:48:12 2024 by rpki-client on console-fra.rpki-client.org