Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/eY6pJGOaXG-yeSOogAcPg1_7gJw.roa
File: eY6pJGOaXG-yeSOogAcPg1_7gJw.roa (raw, json)
Hash identifier: VOF9ToEekCVo6ofzYqH0skE1b2H3O4JDCGZsa5qIjo8=
Subject key identifier: 79:8E:A9:24:63:9A:5C:6F:B2:79:23:A8:80:07:0F:83:5F:FB:80:9C
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 058F
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/eY6pJGOaXG-yeSOogAcPg1_7gJw.roa
Signing time: Tue 16 Jul 2024 07:55:02 +0000
ROA not before: Tue 16 Jul 2024 07:55:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 16 Jul 2024 11:55:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1423 (0x58f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Jul 16 07:55:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=798EA924639A5C6FB27923A880070F835FFB809C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:20:41:71:5b:c9:4d:13:2e:9f:08:ed:cc:2e:
59:86:69:d1:c6:9d:a5:bc:f7:a6:e0:86:43:66:48:
a5:34:51:86:85:76:a7:aa:59:11:88:4b:59:9b:4b:
2d:d0:10:a6:97:0a:de:06:c6:ec:45:d6:8e:dc:e2:
28:1e:c4:32:d8:2e:47:bb:62:7c:55:e9:68:71:1d:
96:33:64:ea:05:56:ad:b8:a1:c6:50:3d:f2:13:12:
7d:54:32:a3:c8:d5:63:38:b0:9d:49:6f:a3:70:5a:
01:a8:f5:78:9b:ce:ac:81:47:74:14:3e:f4:59:b6:
42:ec:d4:46:c7:cc:85:96:9e:76:16:6c:7a:7b:0c:
32:3a:67:0a:e4:85:5b:12:8b:33:d4:14:d3:e2:ca:
9d:aa:80:6c:89:6e:65:2f:b7:8b:4a:f2:f5:a3:81:
81:10:d2:b4:c0:72:21:87:a0:0b:71:5e:b4:3f:5f:
fd:a1:10:f7:74:40:a5:5f:c6:52:6d:cb:65:9d:8b:
f0:04:26:de:7c:a9:e3:a5:d7:c7:8d:89:a2:63:33:
2f:35:86:28:48:56:b6:b9:f3:9b:16:7a:77:84:c5:
12:17:4f:ae:8e:93:b6:b9:b2:93:d5:2e:da:64:c3:
cc:bd:47:4d:5f:60:aa:94:c2:ea:6b:26:43:83:ae:
e7:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:8E:A9:24:63:9A:5C:6F:B2:79:23:A8:80:07:0F:83:5F:FB:80:9C
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/eY6pJGOaXG-yeSOogAcPg1_7gJw.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:fe:eb:8f:65:94:c3:ee:96:b0:d0:79:94:2e:af:14:b1:f3:
99:8c:a4:15:b2:44:26:54:ab:85:48:00:aa:95:d1:43:32:7a:
de:92:78:6b:bb:59:f4:2f:d0:0e:5c:f7:06:78:2d:5d:f3:f3:
64:92:9e:2a:3a:33:a8:c0:bd:78:90:b5:17:28:ca:69:d9:8b:
ac:07:65:34:55:94:b5:94:8e:a5:ba:91:e6:cd:08:6c:d7:7c:
74:1e:46:e9:41:45:26:a8:e9:42:42:c9:94:8c:53:f9:f8:7a:
eb:9b:54:d2:cb:cf:dd:ce:bd:4c:50:32:7c:35:26:3d:e6:db:
d4:72:19:ac:ae:fc:d3:89:bd:bb:a9:7b:54:0d:fc:00:39:75:
40:a2:9a:7f:f2:8d:1f:0f:78:7a:be:09:3e:f8:e8:e3:97:9a:
85:a1:bf:ef:9e:17:e6:96:bb:4a:cc:a2:a4:50:5d:5a:f8:92:
0c:cb:48:db:80:59:2c:fe:ec:b1:b0:de:05:99:74:1d:de:e1:
0b:b1:a3:f6:76:25:4b:cf:07:80:46:47:58:8f:f5:d3:cb:2e:
c0:b2:a5:5a:d6:74:f1:fe:e3:b3:18:c4:67:f2:51:91:54:d1:
22:ed:82:5b:d0:9f:a3:b9:8f:03:de:73:7f:d1:17:90:53:20:
96:bf:5b:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 16 15:47:45 2024 by rpki-client on console-fra.rpki-client.org