Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/eVvB5RXE9r2_liGlGOj4Fc8aOc0.roa
File: eVvB5RXE9r2_liGlGOj4Fc8aOc0.roa (raw, json)
Hash identifier: 5CnqjHNtliwJ5FnUMHrTEgmoivFrPeq3CLCNAG3g/hQ=
Subject key identifier: 79:5B:C1:E5:15:C4:F6:BD:BF:96:21:A5:18:E8:F8:15:CF:1A:39:CD
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0580
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/eVvB5RXE9r2_liGlGOj4Fc8aOc0.roa
Signing time: Sun 14 Jul 2024 15:55:03 +0000
ROA not before: Sun 14 Jul 2024 15:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 14 Jul 2024 19:55:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1408 (0x580)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Jul 14 15:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=795BC1E515C4F6BDBF9621A518E8F815CF1A39CD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:db:b1:4d:1b:cb:a2:ea:e8:46:cc:87:1b:89:
d8:cd:6b:92:69:f0:c5:c8:c4:83:6b:89:d4:1e:23:
dc:ef:ac:ce:56:f8:af:57:1f:f0:02:8a:73:3d:c8:
25:58:9d:7d:c3:37:52:32:03:d1:e7:9b:0a:2c:be:
89:da:1e:1e:23:14:3d:53:ce:6d:63:d8:11:70:22:
ac:0f:b9:e6:ee:1c:3f:46:a0:56:1a:63:df:04:12:
21:f9:e9:6f:fe:2c:1b:b6:de:32:1d:a6:54:a0:e3:
e8:70:7b:ee:af:4d:76:85:b6:fc:9b:43:87:c7:43:
fa:da:ba:37:40:a8:7f:c8:69:04:5b:c9:b0:a2:28:
25:84:f3:42:10:00:dc:c0:41:60:55:da:5a:45:9a:
6b:00:c6:6c:6f:ad:de:0e:15:e4:c7:21:32:b8:b8:
22:d4:bb:34:d0:3f:34:28:24:3c:81:67:5a:b8:4d:
31:62:27:30:b6:13:5a:b1:34:92:67:cb:17:c0:a8:
d1:6b:45:df:4c:42:ad:0a:70:19:85:16:c2:c2:0e:
d8:77:30:81:97:5a:7e:0e:64:6c:62:9e:98:b5:8a:
4d:0c:e3:21:aa:54:e2:ab:b4:c4:2d:d6:a1:6c:43:
48:35:67:cf:72:d9:5f:8f:13:ec:c7:61:62:42:c2:
ea:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:5B:C1:E5:15:C4:F6:BD:BF:96:21:A5:18:E8:F8:15:CF:1A:39:CD
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/eVvB5RXE9r2_liGlGOj4Fc8aOc0.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:85:c1:63:69:a9:6f:f3:98:8b:4c:98:15:be:0b:53:92:ce:
1e:89:49:fe:52:46:e7:ff:8f:38:d2:8d:13:c5:f0:08:5e:db:
d8:de:e1:61:c9:55:d8:24:ca:d4:f0:de:2a:39:b1:cd:08:67:
78:11:39:7d:5e:65:64:54:3a:c3:7c:ff:0b:62:e4:e5:f9:28:
2e:73:48:de:09:ae:02:37:14:a7:bb:2b:bf:2c:15:e2:1c:af:
e9:9d:e6:c4:1f:d3:4a:5f:52:fa:91:18:1f:ee:3b:74:87:b6:
9c:94:bb:db:90:74:8a:7c:01:9d:09:03:b2:c9:49:55:3c:19:
08:d6:e6:73:37:95:82:33:13:48:4e:12:3a:5f:16:28:57:46:
9b:69:d0:9d:e5:ee:46:fc:76:b9:d6:7a:6f:6f:7c:d3:99:4c:
8b:e0:7d:e0:73:df:f5:5a:aa:54:b0:8b:da:e3:e5:ce:46:02:
eb:cc:9c:e6:c8:1e:8f:f6:ea:0a:25:65:66:8b:6b:77:13:84:
7c:b9:9b:aa:91:90:9c:c3:f9:59:ca:3f:fb:bb:3d:8c:a0:a1:
b3:f2:e6:6b:19:63:be:24:08:e5:5c:8f:e3:f7:76:02:f5:a9:
4a:5f:01:85:13:19:94:7e:26:a6:cc:a1:52:08:5d:38:39:b2:
b4:32:c4:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 14 22:01:11 2024 by rpki-client on console-ams.rpki-client.org