Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/eZBIJeN5nlhmi_1MvfjFcCcHT54.roa
File: eZBIJeN5nlhmi_1MvfjFcCcHT54.roa (raw, json)
Hash identifier: oESQyBTTcrqTNshvXR+w2uDtxeplUxQe/f5VBnwu9Kg=
Subject key identifier: 79:90:48:25:E3:79:9E:58:66:8B:FD:4C:BD:F8:C5:70:27:07:4F:9E
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 091A
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/eZBIJeN5nlhmi_1MvfjFcCcHT54.roa
Signing time: Thu 24 Oct 2024 23:55:02 +0000
ROA not before: Thu 24 Oct 2024 23:55:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 25 Oct 2024 03:55:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2330 (0x91a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Oct 24 23:55:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=79904825E3799E58668BFD4CBDF8C57027074F9E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:38:a8:39:19:3c:1d:c0:a6:29:b8:c7:13:6c:
7a:95:85:cf:98:6e:50:4a:1c:d5:85:10:52:b9:9c:
b9:43:b1:6e:4e:a5:90:94:59:15:60:1f:fd:b1:b6:
c8:32:ab:d7:e8:da:38:f4:2a:55:06:f7:82:6f:b7:
5d:76:08:97:56:94:2d:77:19:d3:1d:2a:5f:6c:cd:
f4:e8:e0:3e:3b:47:9b:1c:e2:f5:1d:3a:a0:5c:71:
3d:93:31:47:18:b2:9c:b7:2a:a3:6f:58:63:5b:b5:
37:1c:ff:16:28:11:c1:c2:7e:53:41:0c:ce:10:86:
18:89:a5:d2:c1:66:65:cf:b4:0b:27:f7:a5:5e:5c:
27:2e:75:4f:77:07:96:ed:4a:02:7e:9b:57:f0:14:
e2:0c:74:23:3b:77:a0:d0:9c:5e:15:f3:e8:8e:c4:
7c:4a:7b:ed:0b:11:3a:38:f1:76:b0:48:66:f6:55:
69:aa:25:05:2f:af:46:6e:eb:f6:d7:ea:fa:45:de:
d1:47:d2:9e:43:8a:38:86:32:24:68:be:a5:4a:41:
c5:ce:2e:da:5a:9b:79:bb:94:7e:3b:73:bf:57:dd:
35:8c:07:71:74:e3:04:41:4b:92:14:99:cf:b6:f5:
3f:0e:0b:66:79:79:55:5c:31:3a:1c:94:a0:1b:1a:
0e:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:90:48:25:E3:79:9E:58:66:8B:FD:4C:BD:F8:C5:70:27:07:4F:9E
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/eZBIJeN5nlhmi_1MvfjFcCcHT54.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
df:34:27:82:4f:12:a6:f9:97:46:be:8d:71:54:8c:0b:63:58:
c6:ec:1d:57:e9:37:a1:cc:b4:e8:d3:ad:51:21:c1:2b:7b:6f:
f2:97:27:ae:84:de:b1:7f:5d:e0:6f:5d:06:b1:f3:10:28:fb:
bd:8d:22:ca:aa:29:43:a4:7d:c0:69:61:53:c2:ea:5b:eb:7c:
92:6a:d0:05:f3:81:1f:30:ab:f0:15:8f:01:d8:f8:19:71:0d:
ca:3d:90:12:6e:b6:74:19:44:3d:2b:b5:07:53:3d:3a:17:d6:
e5:1f:4c:3f:e9:74:99:2c:2a:20:32:f7:e9:ab:0f:da:28:5c:
05:56:a9:2e:e6:65:08:3d:ca:a9:d3:7e:e2:92:cc:12:54:ee:
08:07:cd:d5:ea:23:2a:dc:c4:7d:e3:86:fa:f7:57:a3:5a:bd:
93:a7:12:08:65:13:e6:f6:5f:62:2b:81:36:bd:7e:e2:58:51:
81:cf:a5:f5:7f:94:ee:94:d3:a6:b4:23:a6:18:1d:f9:63:3d:
37:96:ff:c6:4c:07:a3:b5:be:b7:41:7b:de:a2:50:e8:2b:14:
e7:e3:73:07:b5:0a:5c:b1:1d:20:d4:e5:f0:99:48:30:4d:64:
88:91:02:54:14:e0:0b:d9:30:23:a1:46:4f:09:a3:a7:6a:3c:
66:bc:db:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 25 06:22:37 2024 by rpki-client on console-ams.rpki-client.org