Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/hPvVBEW0pF8J_eqw67iyAjZzzG8.roa
File: hPvVBEW0pF8J_eqw67iyAjZzzG8.roa (raw, json)
Hash identifier: 7+N50sop8YxhKn/3mzeqqIEABGsxiPommzMdUQPDVec=
Subject key identifier: 84:FB:D5:04:45:B4:A4:5F:09:FD:EA:B0:EB:B8:B2:02:36:73:CC:6F
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0850
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/hPvVBEW0pF8J_eqw67iyAjZzzG8.roa
Signing time: Wed 02 Oct 2024 15:55:02 +0000
ROA not before: Wed 02 Oct 2024 15:55:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 02 Oct 2024 19:55:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2128 (0x850)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Oct 2 15:55:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=84FBD50445B4A45F09FDEAB0EBB8B2023673CC6F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:3f:53:a3:3d:98:bf:17:fd:61:a5:33:65:cc:
af:0d:e8:e7:19:dc:0b:39:6f:2e:51:aa:c0:e1:7e:
20:8a:fa:5e:14:96:e9:c2:d4:ec:e6:65:bc:7f:43:
94:16:6d:41:19:e7:12:2d:89:01:89:c6:b2:db:32:
83:56:07:c8:b9:f2:f5:88:8b:2a:61:df:be:a5:bd:
76:fb:ce:61:01:4d:fd:fb:e3:e8:a4:64:89:61:b5:
74:b2:c2:6a:9e:a9:1e:0b:71:c8:78:5f:ab:1f:6b:
04:15:8e:c4:08:7f:e7:59:9a:e2:42:46:4a:d9:42:
41:aa:2c:29:1e:b8:ed:82:7d:26:8f:2e:9f:c5:e4:
46:ca:45:bf:cd:0c:2b:01:0d:ab:51:59:ca:de:2c:
a3:fc:56:d1:9b:0d:22:da:6b:ef:00:29:30:ee:3a:
ad:ca:f9:d2:03:67:d0:bc:71:52:59:af:2f:4e:fb:
58:0f:10:7f:44:62:45:e9:03:ca:45:e6:9b:5d:03:
89:e0:b9:65:ea:e6:8f:54:5d:b6:4b:e0:a3:2e:52:
cc:31:f1:24:ec:c0:49:16:4f:28:11:69:c7:da:d0:
a2:20:f3:ec:fe:f3:9e:bb:f3:7c:51:d0:de:76:f1:
91:3e:df:c7:78:f1:3f:d1:b6:7c:7d:31:73:48:1b:
06:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:FB:D5:04:45:B4:A4:5F:09:FD:EA:B0:EB:B8:B2:02:36:73:CC:6F
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/hPvVBEW0pF8J_eqw67iyAjZzzG8.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:2c:57:d7:4b:e7:c7:21:07:c8:ac:ea:76:ee:9c:03:42:33:
ed:4e:0e:34:f4:1c:1d:42:a1:72:d1:78:fd:0f:9c:ef:0b:13:
d0:d8:53:13:fb:4c:be:08:e9:0d:0e:18:0d:13:ac:b4:7c:78:
6f:ab:9e:e5:50:97:ab:fa:00:ee:55:ef:69:6f:86:fb:d0:c9:
f9:81:c0:65:0f:a1:49:30:bc:14:03:30:b3:3a:eb:8d:9d:26:
b3:e6:6d:f6:0a:d6:2a:bf:a2:29:9f:7c:73:78:88:aa:c3:97:
ed:b6:b5:20:99:e6:0c:b0:57:b1:ef:5e:f4:90:f9:8c:89:88:
1a:11:a5:a3:1c:17:89:6b:c0:1e:38:33:12:87:ec:1b:31:39:
49:a6:12:f2:e2:83:2c:51:cf:fd:1b:d3:f2:a0:18:1a:4a:bf:
ef:c8:5c:02:0c:55:83:b8:b6:5e:4c:4c:ce:41:e1:10:6f:ea:
eb:d4:22:d2:1f:2d:e8:65:14:1e:94:7e:08:b5:70:1d:f4:d3:
a9:c5:03:26:9e:eb:e8:7a:73:3b:35:de:ba:0a:ed:d0:af:3a:
51:6b:5c:74:ad:17:43:37:80:98:c7:bf:78:36:46:12:4a:96:
37:b6:d6:46:12:96:f5:1e:02:ac:6c:67:83:a6:2c:a8:d7:19:
b7:c9:96:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 2 21:50:15 2024 by rpki-client on console-ams.rpki-client.org