Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/eoucZ1juaJuCaTVVjMb7M5F4QBE.roa
File: eoucZ1juaJuCaTVVjMb7M5F4QBE.roa (raw, json)
Hash identifier: C3hUGDeu8pxWNKI30nHmzpBwWQg4ElArJBzSZZKfLJo=
Subject key identifier: 7A:8B:9C:67:58:EE:68:9B:82:69:35:55:8C:C6:FB:33:91:78:40:11
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 097A
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/eoucZ1juaJuCaTVVjMb7M5F4QBE.roa
Signing time: Mon 04 Nov 2024 15:55:03 +0000
ROA not before: Mon 04 Nov 2024 15:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 04 Nov 2024 19:55:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2426 (0x97a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Nov 4 15:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7A8B9C6758EE689B826935558CC6FB3391784011
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:4d:37:15:87:07:48:47:30:72:2f:d4:d1:f5:
92:4c:ab:9d:7e:c5:66:2b:c0:9f:92:0b:e5:f6:5d:
4d:8e:9f:58:5d:16:c9:62:aa:d6:a1:28:e0:d2:ff:
73:5a:1a:ad:26:08:5f:18:d3:5f:ba:da:0a:eb:18:
12:63:f0:6f:d9:28:ed:af:9d:79:38:63:45:7b:87:
18:a9:a3:ac:08:19:d8:10:a4:fd:cf:86:a2:66:7d:
74:1e:07:a6:1e:62:a1:3c:44:e5:ef:85:f6:8d:29:
92:ff:22:a5:fa:1b:a7:8c:cf:1c:23:95:c0:6f:45:
1c:14:aa:71:d1:a0:e2:7e:99:7d:b2:78:c8:52:80:
22:9a:2f:ba:7f:17:f8:46:ad:36:79:91:3e:0a:1d:
0b:98:8f:fa:59:82:37:87:25:2a:62:ec:e7:24:9d:
0a:da:e1:c2:a2:53:f2:a9:3d:57:64:c6:de:a7:76:
c9:04:18:1f:57:4d:7b:66:47:cc:7a:2c:b8:c0:c7:
61:1d:d0:bf:13:99:d6:a5:52:f3:67:84:64:14:25:
5c:61:c3:af:bd:62:07:3c:b6:71:26:79:e6:33:eb:
64:9c:0d:66:36:c7:3d:22:98:17:81:3a:0c:10:b2:
26:91:9a:e7:fd:59:8c:d0:7d:08:67:b8:f3:58:89:
2c:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:8B:9C:67:58:EE:68:9B:82:69:35:55:8C:C6:FB:33:91:78:40:11
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/eoucZ1juaJuCaTVVjMb7M5F4QBE.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:00:75:ca:4c:48:d0:44:4b:2d:d0:be:88:07:24:6f:81:aa:
02:41:1b:61:47:be:99:f0:36:8e:12:a6:48:b6:4c:f8:3a:cf:
8c:1d:28:8b:44:5d:74:48:13:ab:79:53:bc:be:5e:26:46:3a:
c1:ce:35:59:83:3c:c8:e7:dd:f1:14:74:9b:ed:68:ae:ed:8a:
30:55:f6:24:b0:b7:e6:b2:78:6e:46:4f:b1:b9:c6:4c:ce:87:
38:88:36:40:ff:06:21:a7:7e:24:d1:1f:e6:05:4d:63:3b:50:
7c:d4:1a:d7:6e:be:16:91:17:c9:bd:35:3c:ee:36:d1:13:1d:
c8:50:a6:36:f7:b0:d2:de:c6:3a:8a:26:3a:c5:36:76:9c:80:
4a:3f:da:58:6c:00:ad:bd:4b:42:88:4c:c9:0b:0a:5b:39:c1:
ec:d6:0d:4e:8e:00:04:2e:cc:bb:34:18:ed:9f:89:88:16:65:
a4:ce:ab:37:72:f4:8b:7a:6d:6d:4c:92:f3:a2:aa:ec:0d:35:
62:2d:42:fc:3e:67:a2:e1:36:6d:a8:53:db:26:84:0b:0d:7a:
32:5b:86:b5:65:ce:e4:8a:a0:3f:e5:07:67:be:7f:dd:2e:12:
0e:e6:93:8a:d6:97:e5:e1:65:28:0e:a6:81:79:5b:05:0a:78:
9f:a5:a7:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 5 00:43:15 2024 by rpki-client on console-fra.rpki-client.org