Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/goXet_4ZOVS7VAd49hjmmIzjG6M.roa
File: goXet_4ZOVS7VAd49hjmmIzjG6M.roa (raw, json)
Hash identifier: gIKxlTcPYHL5ED1Pij7pNRElKs9ZOP1DFQ9+4/md4qk=
Subject key identifier: 82:85:DE:B7:FE:19:39:54:BB:54:07:78:F6:18:E6:98:8C:E3:1B:A3
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 05BC
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/goXet_4ZOVS7VAd49hjmmIzjG6M.roa
Signing time: Sun 21 Jul 2024 07:55:03 +0000
ROA not before: Sun 21 Jul 2024 07:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 21 Jul 2024 11:55:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1468 (0x5bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Jul 21 07:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8285DEB7FE193954BB540778F618E6988CE31BA3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:9e:a6:9d:e3:c4:15:74:b5:2d:bb:d0:0a:06:
f5:d8:7f:67:60:bd:a1:5e:00:88:91:fe:a3:14:dc:
b2:9c:b9:05:18:38:f0:c7:27:17:e9:d4:f9:ca:0c:
01:df:1d:70:e7:9a:ee:3a:81:c1:77:d5:5c:ce:c2:
e1:3d:df:09:dc:5a:ba:f7:00:a5:33:74:a8:2b:81:
f3:73:6f:54:4f:1c:3c:ff:ff:43:a1:40:b7:88:d6:
56:da:ae:70:df:55:99:6a:3f:4d:e9:35:f3:9c:44:
bd:ed:79:56:b9:6c:81:7c:b0:c1:ff:2b:45:21:7a:
d7:a9:5e:20:d4:fa:2d:38:6c:8b:33:f4:54:36:3d:
85:2d:57:ba:71:85:86:b7:9e:8d:29:c4:bd:da:68:
ca:78:f0:14:9f:7a:50:15:8d:f5:a5:e9:8a:d5:b0:
35:ae:8c:e3:e0:38:7e:03:3e:e3:e1:ac:e9:34:70:
b2:bb:d7:50:97:21:32:63:c2:1c:79:d8:a8:49:59:
23:78:70:eb:b9:c3:a0:36:cc:e7:81:e8:a1:1c:43:
b1:d8:48:01:6b:3f:1f:70:7d:6c:fa:4a:28:ae:22:
3b:0a:77:07:14:a5:ce:30:e3:31:49:f7:10:93:7b:
38:95:bf:49:57:80:90:39:9b:e3:00:06:e8:11:7d:
ad:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:85:DE:B7:FE:19:39:54:BB:54:07:78:F6:18:E6:98:8C:E3:1B:A3
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/goXet_4ZOVS7VAd49hjmmIzjG6M.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
15:53:e6:f0:71:19:f5:ff:24:40:d1:b4:69:2e:f8:7a:20:ed:
b5:ac:fc:63:b4:59:27:16:ba:d6:30:67:f3:c5:48:aa:10:ff:
ec:92:66:73:7b:b9:6e:ea:53:30:a4:a3:73:09:46:0e:bc:16:
5e:0a:af:de:db:d8:c1:be:ba:12:5c:02:3e:c3:e7:5d:89:34:
4a:7b:95:cb:d7:20:ad:d7:4c:82:b9:e4:8c:28:ab:81:43:be:
42:80:1e:07:51:ad:49:91:ae:e6:9b:4f:94:7c:a9:58:60:c6:
b9:1c:be:f9:ea:30:6d:f6:66:e8:57:22:c8:0b:15:58:ba:67:
89:09:d9:f7:b7:1c:37:45:5c:4a:d3:d3:c6:11:d1:50:1e:f6:
e4:b5:5f:fd:e5:78:21:2a:67:81:e8:1e:67:9d:d1:a2:62:73:
90:74:f6:54:e0:65:07:5f:84:74:8a:20:e8:99:af:d2:42:45:
22:4a:dd:67:91:d9:41:5e:6b:3b:3a:99:eb:7f:53:0c:51:ed:
88:03:f3:49:b7:1e:f5:52:55:ba:67:9b:b4:89:e3:e2:2a:77:
0c:3e:38:15:e0:40:5d:4a:7c:52:fe:66:84:0d:44:b4:62:07:
b8:10:1e:91:0e:df:b3:5d:c1:23:12:13:a8:6f:37:7a:14:20:
15:99:ff:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 21 15:14:42 2024 by rpki-client on console-fra.rpki-client.org