Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/f4ARgQBHG4EHSfjAf-wKvPwXWN4.roa
File: f4ARgQBHG4EHSfjAf-wKvPwXWN4.roa (raw, json)
Hash identifier: zxemkpBM6rCEgqvuJNMB7u3HQ3bUDwJlF6f2rms6zPo=
Subject key identifier: 7F:80:11:81:00:47:1B:81:07:49:F8:C0:7F:EC:0A:BC:FC:17:58:DE
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0586
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/f4ARgQBHG4EHSfjAf-wKvPwXWN4.roa
Signing time: Mon 15 Jul 2024 07:55:04 +0000
ROA not before: Mon 15 Jul 2024 07:55:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 15 Jul 2024 11:55:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1414 (0x586)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Jul 15 07:55:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7F80118100471B810749F8C07FEC0ABCFC1758DE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:11:b9:b7:37:5f:f5:9e:36:3d:ab:1b:10:74:
1c:6b:8b:4d:d2:01:04:60:ce:96:46:89:5c:0d:d3:
30:64:00:e3:c3:64:d4:0d:34:52:de:6a:26:bd:03:
78:db:3c:c2:c6:55:96:6c:b7:21:0f:98:85:48:6f:
f0:1b:d4:d4:f0:e7:9d:d1:f4:ae:03:ff:3c:2b:5b:
3e:75:1b:f9:62:20:b6:01:09:ef:e4:6e:69:d4:39:
21:46:db:c5:22:07:50:b1:d1:06:0d:df:3d:72:af:
2b:cb:32:d8:16:bb:99:58:fc:4a:f4:f8:38:4b:b8:
63:4e:43:6a:22:77:3c:a9:75:f6:20:eb:6f:21:81:
a6:9c:9f:a7:3d:5f:46:bb:97:26:5c:a6:1b:23:3c:
29:a5:45:a7:f4:cb:16:fe:f1:36:37:ba:22:ba:ff:
51:39:37:65:8e:1f:7a:61:fd:ac:e7:ce:38:4a:32:
34:70:bf:e1:7b:ee:c1:29:4b:5a:74:a2:3b:ea:be:
7b:61:e8:c8:7e:ed:e6:19:da:e8:85:98:95:80:7c:
48:28:8f:47:fb:38:9f:62:d9:1a:49:47:6e:7d:77:
b5:c3:91:cb:1c:98:6b:ed:99:ba:b1:04:01:e9:6c:
bd:46:63:9f:18:39:0d:16:97:21:bb:7c:75:c8:e7:
d1:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:80:11:81:00:47:1B:81:07:49:F8:C0:7F:EC:0A:BC:FC:17:58:DE
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/f4ARgQBHG4EHSfjAf-wKvPwXWN4.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:b0:69:8d:5d:3a:ea:ef:c0:78:06:44:1b:cf:28:3c:c8:f0:
ad:52:b4:a4:d7:2a:52:5e:cc:65:9e:3c:56:a7:9d:89:8c:75:
b3:b9:71:4b:4e:65:23:55:f5:44:b3:1a:1c:b8:be:4c:a4:b7:
bf:90:7e:dd:a9:f3:9c:10:aa:33:4b:24:7d:18:89:17:13:66:
a6:1b:b7:86:51:1e:77:71:ed:a2:12:ec:26:31:55:8b:74:3f:
1a:fe:8d:49:86:a2:bc:55:f7:bf:89:d0:46:d6:b8:d6:f2:ee:
a6:49:7e:c7:d2:e0:49:8f:e8:11:61:c5:e8:9b:14:f7:34:40:
e0:4c:eb:db:eb:0b:59:69:7e:84:50:f4:45:15:b1:61:cd:e9:
8f:4a:1c:c1:a3:c7:f3:5e:4a:ee:35:50:f9:8b:df:64:61:82:
90:06:7e:d7:31:c6:b5:4f:47:c9:63:c3:b6:54:b1:56:80:9d:
c2:9e:0a:fe:bb:35:5c:1e:0b:54:9a:d1:be:71:b4:4b:ae:9f:
f6:f4:ba:e5:de:91:eb:16:64:78:b9:fb:95:0e:29:55:8d:0e:
e9:35:d7:0f:14:8c:99:3d:d8:35:79:c7:6b:36:72:b1:40:43:
4d:82:e3:33:06:e6:71:fc:23:95:d2:ba:ac:b2:3a:a6:24:14:
16:bc:5a:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 15 13:08:14 2024 by rpki-client on console-fra.rpki-client.org