Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/fGFKJN8-21hLg75gK0kaNsHs5Dg.roa
File: fGFKJN8-21hLg75gK0kaNsHs5Dg.roa (raw, json)
Hash identifier: 6WQFR+6cCZDnNcr1ZJvRAwd5C7U0RRD37L5kqMTD2vQ=
Subject key identifier: 7C:61:4A:24:DF:3E:DB:58:4B:83:BE:60:2B:49:1A:36:C1:EC:E4:38
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0760
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/fGFKJN8-21hLg75gK0kaNsHs5Dg.roa
Signing time: Thu 05 Sep 2024 23:55:04 +0000
ROA not before: Thu 05 Sep 2024 23:55:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 06 Sep 2024 03:55:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1888 (0x760)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Sep 5 23:55:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7C614A24DF3EDB584B83BE602B491A36C1ECE438
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:40:1e:df:9c:cf:28:1d:e1:f7:ee:8f:e4:ad:
7f:40:68:48:94:b5:8c:fe:69:b7:d5:3e:4d:e4:2f:
e8:48:19:1b:dc:09:67:c0:fd:17:01:cc:4e:42:a5:
e6:6d:f4:d4:d2:40:ba:fc:f7:23:53:98:cd:6b:f3:
02:cb:5a:28:75:18:d9:67:63:93:37:a2:d9:56:7e:
44:13:8e:68:45:6a:72:a5:b0:12:f0:14:31:7b:2c:
93:8b:0d:33:ef:0e:0b:92:3b:01:1e:cb:6d:11:20:
45:b5:3a:c4:68:d8:35:56:18:2e:bb:18:be:db:ad:
1c:24:82:7c:04:20:87:e3:77:43:eb:1a:47:ed:02:
1c:24:73:ba:c3:a0:43:d4:00:e5:99:17:60:6d:b9:
ab:77:ca:8f:88:ea:45:fc:47:22:e3:e0:45:07:80:
64:b7:b3:a4:ed:73:3b:94:64:f0:e6:56:17:ce:93:
1e:14:d1:f8:d1:0a:b5:de:11:6e:b1:75:0f:db:9d:
a7:d9:17:b2:53:44:41:3f:bc:8d:3b:c3:a9:51:b9:
ca:4b:f1:3a:18:5c:7b:70:c0:fe:1f:68:77:ea:3d:
07:23:67:db:20:f7:17:40:9d:ac:d2:d4:bd:72:43:
7b:81:75:09:c4:2e:fb:ff:e0:3a:1d:dd:30:32:e0:
42:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:61:4A:24:DF:3E:DB:58:4B:83:BE:60:2B:49:1A:36:C1:EC:E4:38
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/fGFKJN8-21hLg75gK0kaNsHs5Dg.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
37:16:90:34:c2:0f:b0:bb:9d:db:8c:21:b0:e9:48:78:be:16:
37:7e:7c:ec:fe:51:f2:bb:08:3c:6c:01:3a:54:d5:7b:b0:39:
37:db:be:96:35:34:18:a2:d4:00:30:c1:1e:7e:f1:d3:bb:b9:
3e:2e:c0:e4:37:ab:5b:b2:9a:c7:91:cc:82:78:4a:1b:2a:3f:
ba:1e:8a:6e:94:c4:7d:52:3b:d3:04:ef:e3:ab:c3:06:dd:e2:
6c:4b:7e:5f:a4:0f:6d:38:b4:ca:88:2a:b0:1f:6d:58:2a:d3:
89:f3:60:4e:91:50:84:7f:73:6f:14:93:8a:43:5e:73:ca:c9:
76:89:a9:b7:04:a2:fc:4b:61:4f:8b:80:72:62:4f:2f:70:fb:
4a:c6:e7:b2:66:89:a3:ed:b0:ae:74:bb:a5:28:f8:aa:c6:27:
f3:2e:1e:28:0b:d4:89:dc:32:e4:55:e0:f4:74:a8:dd:7b:05:
ed:09:27:35:45:69:96:78:d7:c2:ec:b2:9d:8a:69:2d:4b:d3:
d0:51:e0:fd:19:8b:67:e2:4f:93:af:fa:3f:d2:86:ef:35:b4:
3c:df:d6:32:b5:1c:d3:56:82:55:35:f4:5a:a9:12:0a:26:51:
b6:2d:03:bd:63:b6:06:f5:64:45:81:2a:93:31:3c:58:54:38:
fc:40:b3:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 6 05:11:44 2024 by rpki-client on console-ams.rpki-client.org