Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/f57tOP7QMNRLPxANQgmBN_U49fU.roa
File: f57tOP7QMNRLPxANQgmBN_U49fU.roa (raw, json)
Hash identifier: y4lgL47WveFvzk6/WDr1sL1GCzj5QIaBZ02UiYZ79QY=
Subject key identifier: 7F:9E:ED:38:FE:D0:30:D4:4B:3F:10:0D:42:09:81:37:F5:38:F5:F5
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 084A
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/f57tOP7QMNRLPxANQgmBN_U49fU.roa
Signing time: Tue 01 Oct 2024 23:55:03 +0000
ROA not before: Tue 01 Oct 2024 23:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 02 Oct 2024 03:55:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2122 (0x84a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Oct 1 23:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7F9EED38FED030D44B3F100D42098137F538F5F5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:bd:40:a2:82:1b:e8:13:12:68:ba:3e:71:57:
0e:a5:a0:15:b1:5c:4e:ae:93:4d:58:34:42:11:0f:
db:ec:2d:17:d2:34:aa:69:03:34:fd:58:2c:46:c0:
09:f8:84:35:d6:f4:4c:37:12:3b:1e:d4:e3:42:32:
f9:28:26:59:ad:dd:e4:a7:97:46:38:32:e7:17:42:
6d:97:2a:54:43:51:5f:ed:69:dc:e1:46:ec:e0:63:
18:5f:12:60:87:2d:2f:c6:e0:b5:ae:49:7e:24:8c:
01:79:3b:04:47:98:7a:65:0c:8a:9f:bb:33:51:40:
05:75:75:7d:4c:6d:4f:bb:11:b2:df:d4:3a:c9:2f:
4e:63:17:f5:8e:e2:6f:b0:59:dc:66:e4:34:f8:77:
36:a7:64:54:f7:a3:2d:61:f6:5e:a1:a9:dc:b3:6e:
17:ba:2e:b6:7e:09:0c:c3:b7:52:a4:c7:b1:67:f8:
4a:0c:57:c9:ef:01:bf:58:37:38:43:5e:f9:47:b5:
cc:fa:7b:29:83:59:ce:b5:bc:c6:53:64:91:7e:43:
6a:f1:97:db:2a:8c:3a:da:bd:3d:ce:87:c3:4c:9b:
de:19:d5:7f:48:24:a3:eb:2e:2f:29:8b:ff:86:c0:
3c:49:c2:64:35:e2:d7:fd:ab:2a:c1:83:28:70:88:
c1:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:9E:ED:38:FE:D0:30:D4:4B:3F:10:0D:42:09:81:37:F5:38:F5:F5
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/f57tOP7QMNRLPxANQgmBN_U49fU.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:67:4e:dc:e0:a2:76:af:04:85:8b:d1:49:08:42:2a:d3:c1:
3e:42:6b:78:d4:80:8d:dc:4e:65:f3:a2:9e:bc:a5:a8:52:8c:
c5:db:36:19:5f:c4:d4:fa:c5:ae:bc:7c:48:d4:e8:8f:45:b2:
83:37:3b:b7:8b:c6:2d:f6:ba:f1:cf:5c:7f:c8:0c:c4:08:08:
34:ea:62:20:cf:2d:5a:da:1d:30:21:a6:ea:d1:23:a3:ed:9e:
c6:12:fc:4b:d2:4d:c1:66:63:16:2f:b3:e4:1f:43:bf:cf:65:
a9:e4:0e:a9:eb:3e:16:6b:5f:04:78:5c:6c:21:53:da:78:16:
01:c8:c0:40:d4:d9:6f:2c:0f:65:1c:5c:53:52:48:80:fc:7f:
c9:0b:98:3a:c1:e8:e1:18:e8:f7:72:d6:7d:4d:df:36:72:5d:
96:47:ed:68:85:d6:f7:57:72:66:5c:83:b2:e3:c6:50:c6:38:
6f:54:97:e1:83:0e:67:53:dd:a7:65:4d:59:b3:c4:54:03:88:
d7:b1:35:7e:5e:b5:9d:b0:72:85:3e:97:77:f0:4a:7d:04:df:
8c:73:7b:bd:3f:f0:88:2b:4c:5d:e8:29:89:c0:7c:cc:e4:81:
90:1e:24:8d:3c:3d:1e:92:f0:83:26:a4:33:15:ab:d4:e7:4d:
e4:dc:34:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 2 04:59:38 2024 by rpki-client on console-fra.rpki-client.org