Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/f-393LjG9a4bXiCzyJFRRO59NKM.roa
File: f-393LjG9a4bXiCzyJFRRO59NKM.roa (raw, json)
Hash identifier: odHxAjRAHnRAdvz4BZ5uy8diap5e0GeoF2LFig9cWNw=
Subject key identifier: 7F:ED:FD:DC:B8:C6:F5:AE:1B:5E:20:B3:C8:91:51:44:EE:7D:34:A3
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0328
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/f-393LjG9a4bXiCzyJFRRO59NKM.roa
Signing time: Wed 08 May 2024 23:55:03 +0000
ROA not before: Wed 08 May 2024 23:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 09 May 2024 03:55:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 808 (0x328)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: May 8 23:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7FEDFDDCB8C6F5AE1B5E20B3C8915144EE7D34A3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:3b:11:95:ec:20:fc:69:a0:60:cf:12:df:ba:
ce:d1:af:5f:c8:79:e3:3c:0e:e3:84:b1:6e:bc:8b:
90:10:bc:10:9b:f0:65:5c:d8:b8:ac:f5:10:0e:bb:
79:01:29:92:e2:bc:56:62:44:f2:40:57:b4:5d:db:
c0:0a:07:20:d8:95:fc:2b:7e:a8:c0:02:3b:ae:1c:
6a:31:e3:86:d5:0a:7b:a6:85:41:05:b7:5d:e4:9b:
f2:bd:e6:25:1b:61:6d:df:fe:18:4f:a2:46:e7:b8:
46:97:9e:e5:d4:b8:f2:93:f1:98:f3:db:9b:ea:1a:
1d:fa:e0:e5:85:59:94:c3:44:8a:b9:77:03:33:a5:
31:ad:89:54:30:72:2f:23:cf:85:02:22:0d:34:5f:
86:db:36:61:81:ff:3b:cf:0e:e1:1f:9b:af:85:65:
f1:f7:6d:b6:5c:8e:20:52:77:d5:59:34:c2:3e:f0:
3e:ac:b1:1d:b1:fa:da:07:fb:31:d7:6b:fa:f3:f2:
be:4a:e3:f7:1d:64:17:35:f7:84:03:af:b5:a5:5c:
9e:8a:b2:d8:75:e7:98:d7:c1:05:48:8e:16:6f:af:
aa:84:bb:aa:66:37:e1:22:09:19:2e:e6:d1:56:a9:
3d:9e:f9:71:eb:86:42:32:26:e2:e6:61:14:49:80:
46:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:ED:FD:DC:B8:C6:F5:AE:1B:5E:20:B3:C8:91:51:44:EE:7D:34:A3
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/f-393LjG9a4bXiCzyJFRRO59NKM.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
76:17:19:af:18:56:73:de:1b:8d:a3:88:52:1b:dd:53:61:85:
47:2b:76:be:35:49:39:fb:d3:a2:02:72:58:d4:2c:6c:41:d0:
7b:0a:86:5a:e9:e2:c8:46:9c:43:22:39:4b:62:8d:c3:2a:c3:
86:d4:83:1d:71:4d:a4:30:eb:61:91:31:c8:94:59:44:6e:01:
a5:c0:e7:c2:3c:db:79:b6:73:c8:fc:8f:bb:5c:4c:4c:95:dd:
26:ef:59:f2:86:d3:bd:1b:d9:b0:10:2c:65:20:4e:29:51:b2:
6a:c4:cd:bf:14:75:0b:10:d2:99:93:2f:82:85:c1:80:59:58:
9a:d2:fc:1b:dc:28:27:b0:41:c8:78:9b:42:d2:bf:1e:2b:26:
c8:a5:d2:92:55:30:9a:f4:a0:4b:e7:44:29:a3:1a:56:73:5d:
ec:5c:63:bc:0e:7e:44:2b:81:de:5e:b0:7c:2b:92:33:44:d9:
9c:98:99:84:e7:56:36:78:f5:de:ae:69:26:ad:99:41:92:e4:
3e:54:06:89:c1:26:b9:d2:f3:82:08:9b:ff:73:ef:e0:9f:6d:
85:6a:89:52:83:fb:5f:b5:1e:4c:e1:25:57:4c:73:80:40:ec:
1c:ed:7f:53:8b:85:06:1c:8c:88:ba:60:c7:48:ce:bb:c0:13:
01:ac:ad:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:55 2024 by rpki-client on console-fra.rpki-client.org