Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/hJQrbymADdrioChzX9sPpee8PpA.roa
File: hJQrbymADdrioChzX9sPpee8PpA.roa (raw, json)
Hash identifier: asPXTJDI61ffmyEWiMYApTiDliNR3QsIQkvwckcNMwE=
Subject key identifier: 84:94:2B:6F:29:80:0D:DA:E2:A0:28:73:5F:DB:0F:A5:E7:BC:3E:90
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0727
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/hJQrbymADdrioChzX9sPpee8PpA.roa
Signing time: Fri 30 Aug 2024 15:55:03 +0000
ROA not before: Fri 30 Aug 2024 15:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 30 Aug 2024 19:55:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1831 (0x727)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Aug 30 15:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=84942B6F29800DDAE2A028735FDB0FA5E7BC3E90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c3:24:f8:11:e4:d1:ee:47:fe:46:86:c8:a2:
75:ea:b2:1a:fc:86:2b:b3:4d:74:44:ff:40:b2:29:
32:63:8e:22:04:70:f3:81:5e:3b:82:e3:9b:34:38:
12:32:1a:7c:e6:7c:41:66:31:eb:86:53:71:dd:70:
23:63:15:78:2a:16:b7:4f:6c:87:08:58:91:d1:b6:
6b:46:6e:51:73:22:88:c7:13:ab:22:a4:87:3a:73:
49:8d:75:aa:84:1f:98:91:1b:5d:d0:c7:f1:88:28:
e4:96:f3:b3:b8:f7:24:76:e1:4d:e2:3e:de:3d:06:
e1:f4:56:8e:0c:07:2a:8e:f9:f0:3c:12:c7:76:2e:
28:a7:18:56:8c:b9:4e:a1:3f:6c:ac:1a:60:0b:3a:
fe:d3:b0:5b:9e:09:71:0e:d9:d2:96:29:97:e0:35:
58:e7:cf:aa:70:e7:8e:e5:4a:5e:3a:93:ef:50:04:
53:7d:47:6a:0e:b4:bb:6c:19:f7:18:43:d7:90:a3:
8a:af:48:58:4f:cc:74:26:76:d3:4e:9d:84:22:a9:
f0:95:ea:86:e7:96:86:36:51:44:f7:0a:d0:de:71:
b4:c7:2f:d0:24:da:1a:90:c9:8a:25:4e:9c:22:bf:
fd:24:e6:ed:f6:a1:dc:e5:87:63:0b:4f:d7:c5:da:
a4:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:94:2B:6F:29:80:0D:DA:E2:A0:28:73:5F:DB:0F:A5:E7:BC:3E:90
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/hJQrbymADdrioChzX9sPpee8PpA.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
05:4b:6a:44:f6:7a:57:4e:3a:5a:0f:35:92:f8:57:8a:df:94:
cb:58:0e:6e:96:10:be:df:36:7a:91:00:6e:c0:16:f2:94:1c:
10:da:62:be:27:f5:47:8f:a3:93:d2:4c:fc:68:da:e4:dd:83:
28:c0:60:b4:23:80:30:b8:55:ef:31:fb:a7:41:c9:5e:48:8d:
b7:5d:48:0e:e5:41:f2:1f:5c:27:35:50:52:51:7a:63:f7:4a:
6a:7f:6f:3e:5e:ca:f6:c9:c3:e9:56:ff:cf:4c:44:44:7d:84:
8c:83:05:95:32:c0:33:50:8e:08:ac:55:27:e4:0b:13:3a:f1:
f3:d3:b7:bc:bc:e2:ae:b6:38:f1:73:f4:a6:69:fb:5b:43:20:
f3:7a:bc:47:fa:5d:40:e0:80:c5:8d:2c:e8:12:40:bd:2f:a8:
60:df:93:11:85:26:47:31:3a:74:ef:2e:7b:c7:b5:70:26:b3:
80:70:68:9c:c4:92:c1:4b:f5:5a:f9:25:eb:c5:43:72:0a:df:
83:28:a1:8c:e4:1a:53:5e:d3:52:fc:1e:ac:88:de:ad:50:68:
07:9b:7b:2b:5c:b8:3a:7b:89:ef:4d:f6:ba:3a:41:ac:1b:bf:
5b:6e:4d:36:bf:8f:86:78:ce:31:ae:78:a9:80:73:c4:f5:c6:
29:2a:12:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 30 22:15:47 2024 by rpki-client on console-fra.rpki-client.org