Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/jHPIjbwB5XHueDhutI0raxXNq3c.roa
File: jHPIjbwB5XHueDhutI0raxXNq3c.roa (raw, json)
Hash identifier: jtG7WkHJqnRXz25ZBrYsoGMcyAisRagfNBnzRmjQcu8=
Subject key identifier: 8C:73:C8:8D:BC:01:E5:71:EE:78:38:6E:B4:8D:2B:6B:15:CD:AB:77
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0700
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/jHPIjbwB5XHueDhutI0raxXNq3c.roa
Signing time: Mon 26 Aug 2024 07:55:04 +0000
ROA not before: Mon 26 Aug 2024 07:55:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 26 Aug 2024 11:55:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1792 (0x700)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Aug 26 07:55:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8C73C88DBC01E571EE78386EB48D2B6B15CDAB77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ad:f0:e1:36:8f:de:bc:82:24:53:86:56:77:
1a:fa:10:6b:01:0a:3b:d9:7a:27:86:ac:b6:e0:90:
18:48:bf:0c:17:ea:a5:95:b2:23:4a:8f:ae:da:be:
5b:a7:1f:5a:30:3d:af:7b:1f:5d:e1:c8:4f:dc:89:
7f:41:48:83:de:3e:37:1c:af:8a:6e:53:7d:95:a9:
55:aa:cd:ae:a6:29:cd:f1:11:38:42:5e:85:af:97:
31:ab:2a:70:bf:ab:85:a9:c7:86:9b:c9:0c:0b:58:
49:aa:e4:1c:1f:aa:7d:58:f1:a3:3e:9d:73:c0:4b:
04:bd:c5:e5:7c:fe:b8:e0:c1:3c:d8:42:58:05:34:
4e:11:f1:28:9f:cc:bc:aa:d8:d5:b6:57:94:ab:6a:
0a:27:66:4a:69:b6:22:37:d0:6b:c7:9f:6c:79:17:
c5:9e:be:8c:12:24:28:73:a5:8a:b0:42:47:86:a6:
76:48:ee:2c:61:56:fa:c7:8d:0e:e9:e1:bc:d5:52:
37:43:34:aa:dd:1d:6c:2c:42:26:89:b8:81:3c:03:
6b:d3:d7:ac:75:c9:5d:c4:2d:83:b8:89:ba:a9:1e:
4b:69:d3:8d:41:21:57:bd:e9:82:69:a2:81:c1:0a:
d6:34:78:88:85:99:00:98:f9:a1:17:90:1f:26:30:
59:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:73:C8:8D:BC:01:E5:71:EE:78:38:6E:B4:8D:2B:6B:15:CD:AB:77
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/jHPIjbwB5XHueDhutI0raxXNq3c.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
63:35:ec:6d:c4:6b:c2:bd:94:ac:49:a3:be:8e:a7:2a:b6:67:
4e:30:47:7d:32:c9:af:6e:65:95:e6:e7:68:c6:89:fe:dc:b2:
21:4a:5f:9a:da:f1:9a:bb:65:7b:4d:a1:83:50:f2:a7:ce:24:
7d:90:73:41:bb:fe:43:8c:73:3a:15:64:82:fa:a2:e3:f0:ef:
ea:2b:aa:f1:9b:68:ae:2d:8d:da:8c:5d:ea:03:1f:33:51:12:
10:f4:48:46:85:1e:6b:1a:c1:09:7d:c6:87:5d:b3:67:bb:3d:
64:98:84:77:11:74:ee:82:86:8f:33:de:4d:f7:af:a5:07:b8:
67:19:62:ec:ca:90:f3:19:60:0b:7d:a0:58:27:c8:03:54:33:
95:17:14:b6:22:fa:5b:11:2d:66:f9:22:84:d5:af:0c:0a:c9:
b9:2a:02:40:48:4f:45:91:6d:8b:97:8e:df:9c:fb:fd:58:5d:
4b:26:ba:db:6c:9d:e5:0f:e4:2a:9d:9d:94:1a:48:cb:98:0d:
34:23:c4:05:23:e0:a9:e9:14:6a:0b:84:ac:fc:ee:1a:1e:8b:
3d:39:25:f4:4c:d7:76:77:e7:da:12:66:53:24:d2:2e:11:f9:
0a:91:74:ef:eb:36:24:95:84:9d:56:58:75:ed:b9:e5:19:1d:
b5:73:ee:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 14:36:52 2024 by rpki-client on console-fra.rpki-client.org