Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/j0GSIVZ5mjSe-nJX8DItUX-ZtGk.roa
File: j0GSIVZ5mjSe-nJX8DItUX-ZtGk.roa (raw, json)
Hash identifier: JkUD7F+wINaA3GwS5GO9VqI7oTbqPQRaD4aNbNga4AM=
Subject key identifier: 8F:41:92:21:56:79:9A:34:9E:FA:72:57:F0:32:2D:51:7F:99:B4:69
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 065E
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/j0GSIVZ5mjSe-nJX8DItUX-ZtGk.roa
Signing time: Thu 08 Aug 2024 07:55:03 +0000
ROA not before: Thu 08 Aug 2024 07:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 08 Aug 2024 11:55:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1630 (0x65e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Aug 8 07:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8F41922156799A349EFA7257F0322D517F99B469
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:6f:f3:27:ed:87:62:40:ea:22:88:a0:07:1f:
f7:57:b7:95:8d:e3:3a:eb:bc:b8:b0:77:e0:87:24:
da:a6:e0:91:32:91:51:28:5c:38:e4:85:ba:a3:f4:
f9:86:ee:e7:00:4e:df:98:7a:96:d4:7e:1c:93:69:
cc:4a:cf:c4:cd:20:ea:f7:c1:11:1b:fb:fc:92:51:
f6:30:da:ac:96:a0:63:e0:f2:c8:d3:b1:06:01:c1:
ca:89:a6:e8:70:90:f4:97:d6:25:57:8b:56:d7:7c:
29:fe:69:b3:97:4e:17:b0:9a:d8:72:fe:20:27:0b:
b5:f8:8b:48:74:9f:4a:76:76:a3:11:4f:27:c7:30:
ed:48:4e:bf:c3:fb:3e:2b:ac:cf:b6:2d:42:0e:f0:
1b:a1:4a:43:40:f3:70:7f:74:a3:f2:56:1a:06:73:
9a:3a:f7:e6:a7:46:78:4d:b8:ad:b8:a5:07:93:15:
a5:6b:43:6b:1e:49:86:d3:88:32:2d:26:84:ea:97:
83:b8:8c:ab:e6:f0:be:18:07:b4:a9:11:6a:ea:3c:
cc:8c:ea:23:27:f9:df:c1:b4:3e:62:f1:4d:ed:45:
dd:c7:ec:7d:ac:25:67:6f:f0:9f:20:13:f5:d0:62:
e9:52:be:40:15:7b:a1:ce:5a:5f:3d:e5:b5:61:db:
82:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:41:92:21:56:79:9A:34:9E:FA:72:57:F0:32:2D:51:7F:99:B4:69
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/j0GSIVZ5mjSe-nJX8DItUX-ZtGk.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
de:fe:78:2e:a0:08:33:54:0d:70:81:ae:2f:63:eb:9b:51:d1:
44:02:2c:17:c3:f9:21:da:a2:cb:32:c5:eb:79:d8:03:e4:88:
09:ed:18:78:8a:af:8c:87:33:ae:31:50:36:7c:c2:bc:b4:26:
e6:ac:0b:a3:12:48:96:21:72:d2:0d:1e:08:16:63:d7:62:e8:
80:34:9c:6b:bc:fb:b2:b6:9e:8c:4a:2d:2f:56:8b:28:75:95:
dd:6f:6a:d6:b9:db:33:59:2b:5e:e2:64:d8:28:db:3a:26:a1:
b1:29:cc:5f:ee:21:d1:44:97:e2:d3:7f:ef:b1:0e:0f:3f:1d:
fd:99:70:71:70:83:06:39:e4:77:b7:5b:80:89:2f:01:02:c8:
a5:bc:7a:7f:11:0d:cc:e4:03:54:f9:d0:ba:89:0f:0f:0f:d2:
e4:4c:64:11:af:71:d8:70:f3:a1:23:c0:b1:bf:2d:6b:a2:23:
d5:ff:61:86:f6:00:0e:db:68:24:a4:5d:de:af:ed:82:17:c1:
c7:46:83:50:36:69:e7:ef:f8:cc:4a:56:75:00:46:72:cf:16:
20:b4:29:a6:db:ee:dd:c0:79:77:a0:57:fb:77:fd:9a:49:3e:
b1:71:24:dc:72:3e:c7:6d:af:54:c6:fa:2f:6f:1a:69:28:23:
03:b3:13:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 8 15:18:58 2024 by rpki-client on console-ams.rpki-client.org