Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/i583EdgqlztXUXMmRfNRbgjKNwI.roa
File: i583EdgqlztXUXMmRfNRbgjKNwI.roa (raw, json)
Hash identifier: jREuMVgK9pCG1cLQXw6VkKczgCREPdRY1oHtahq61JI=
Subject key identifier: 8B:9F:37:11:D8:2A:97:3B:57:51:73:26:45:F3:51:6E:08:CA:37:02
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 05C5
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/i583EdgqlztXUXMmRfNRbgjKNwI.roa
Signing time: Mon 22 Jul 2024 07:55:03 +0000
ROA not before: Mon 22 Jul 2024 07:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 22 Jul 2024 11:55:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1477 (0x5c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Jul 22 07:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8B9F3711D82A973B5751732645F3516E08CA3702
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:4b:fa:bd:e2:86:11:6b:d8:1d:aa:1a:54:bc:
83:98:81:57:06:50:68:b2:57:42:0d:39:51:9f:b4:
51:bf:a2:ea:5f:f6:7b:d2:5a:9d:c9:c6:cc:0f:48:
ee:1a:1f:59:52:cf:90:f1:69:0f:d8:a8:73:b5:bf:
6c:e3:5d:f3:b0:96:f8:90:09:70:27:32:f4:36:5e:
f9:80:f8:7d:66:21:d9:e5:6d:30:21:95:49:03:fa:
1f:68:a9:e6:df:07:2b:ce:a1:84:c8:48:a0:f4:f0:
46:53:3b:4c:13:82:31:3e:81:c4:f9:31:30:75:8f:
0b:a7:0e:35:82:44:a7:1f:f4:78:49:df:d0:c0:14:
0c:b2:57:69:14:4e:fe:01:98:35:a0:5d:22:6b:87:
6f:76:78:cd:01:6e:4b:a5:1c:65:d0:41:15:b4:5c:
e1:9c:df:79:b0:76:52:09:bf:a0:e5:80:31:95:6d:
93:59:f5:ab:31:6a:04:2a:f7:0f:fc:11:db:80:87:
eb:ef:69:dd:2b:d0:8b:2d:a8:55:cb:2e:c4:d0:3c:
53:75:6d:50:9f:61:08:0b:d6:8a:d3:33:92:d7:cf:
18:00:54:62:cf:2d:0d:3f:74:08:40:ec:1f:79:23:
83:a1:55:eb:cd:73:f3:c5:d0:ba:f2:b5:16:89:cc:
6f:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:9F:37:11:D8:2A:97:3B:57:51:73:26:45:F3:51:6E:08:CA:37:02
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/i583EdgqlztXUXMmRfNRbgjKNwI.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:be:a5:c4:61:37:cd:aa:26:64:48:dd:2d:bc:b2:bd:ac:20:
76:73:76:f9:02:35:39:1e:92:75:51:48:a5:f2:e5:ba:a2:e5:
02:1c:f5:93:7e:3d:61:f6:3e:8b:b2:ce:e9:57:89:b0:e7:64:
21:05:80:9e:d8:f0:e0:c5:25:58:ef:f9:6e:43:cf:11:ce:24:
bb:16:60:54:86:72:1c:e5:82:c9:24:04:e0:08:54:e8:07:04:
9f:04:73:28:a3:05:fd:cb:09:1e:c8:e2:52:cd:d3:d1:85:8d:
b6:10:ff:fc:f8:6e:a0:9d:33:bf:5a:5e:ac:c9:b3:6e:4b:42:
2f:43:7b:b0:40:be:a9:8d:73:4a:da:32:ee:00:0b:95:5f:83:
fa:c3:ef:90:b2:3f:55:ae:e1:e4:ed:c7:b8:65:40:03:8c:d1:
90:91:35:6c:78:97:a3:d5:8c:ed:f5:82:c8:87:c5:77:be:ae:
ca:2d:8f:a9:1a:f5:a8:f1:61:dd:e2:ad:a0:4e:a8:f3:9b:bb:
15:8a:f9:4d:09:c8:38:3e:59:3d:83:68:75:27:2a:3c:3a:3e:
0c:81:33:9d:a4:88:d9:7b:93:f4:83:0b:ce:88:68:3c:43:8d:
cf:82:bc:5e:71:94:51:c5:18:e1:df:48:f0:08:25:e5:d9:3e:
70:c3:3a:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 22 16:02:46 2024 by rpki-client on console-fra.rpki-client.org