Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/jfapT9wSgQy2lQLFS7PDmeLcVj8.roa
File: jfapT9wSgQy2lQLFS7PDmeLcVj8.roa (raw, json)
Hash identifier: ghvYbYF2c674vdfMfrVevu0NCh/RKJXBJwdx2gzcNxQ=
Subject key identifier: 8D:F6:A9:4F:DC:12:81:0C:B6:95:02:C5:4B:B3:C3:99:E2:DC:56:3F
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0502
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/jfapT9wSgQy2lQLFS7PDmeLcVj8.roa
Signing time: Sun 30 Jun 2024 15:55:03 +0000
ROA not before: Sun 30 Jun 2024 15:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 30 Jun 2024 19:55:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1282 (0x502)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Jun 30 15:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8DF6A94FDC12810CB69502C54BB3C399E2DC563F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:22:8c:09:f3:33:1c:3a:72:54:73:cd:98:7b:
c9:6f:b7:5c:bc:69:a9:16:91:ee:d6:8c:ed:4f:9a:
18:2f:a2:41:fa:e2:89:85:1c:61:7e:71:32:d7:4d:
e1:c5:0a:0d:11:5b:48:6d:81:59:f0:23:37:36:b5:
23:41:45:26:f5:d6:bf:4c:07:dc:0c:f5:f3:53:41:
42:c3:54:a3:38:f7:0a:4f:46:c0:b1:74:47:59:d0:
6f:5e:10:97:1b:22:4a:f6:e9:19:2f:8b:cf:2c:d1:
c5:54:40:a4:80:88:b0:3d:af:a6:2a:d2:2b:69:e2:
1b:85:90:ed:cb:cc:94:eb:3b:35:46:fe:5f:f7:1e:
57:05:aa:4e:29:db:97:dc:7b:14:8e:2b:78:24:8b:
38:bd:28:cb:98:58:29:c3:12:cd:9e:02:7d:da:34:
28:11:2d:32:14:93:16:5f:d1:cc:a0:f9:dc:5a:d9:
c7:ad:17:19:7f:a0:63:b3:b2:bd:fe:d2:ae:92:a6:
f1:ca:8c:b5:dc:45:dc:c1:89:14:74:2a:52:e9:8f:
81:5d:4e:bd:48:75:e2:c6:a3:7b:05:a4:fb:15:76:
84:ee:04:7d:6e:b6:0e:62:af:e2:7c:c4:20:2f:b8:
d3:a1:9f:d9:10:97:36:44:98:f8:99:84:1a:fd:61:
f3:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:F6:A9:4F:DC:12:81:0C:B6:95:02:C5:4B:B3:C3:99:E2:DC:56:3F
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/jfapT9wSgQy2lQLFS7PDmeLcVj8.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:90:94:6d:79:da:ab:89:e1:58:8a:f3:9c:3e:ac:e2:52:b1:
21:bb:a4:96:c5:0d:88:6a:15:c5:95:b2:fe:30:de:3d:41:08:
73:a0:a0:0b:4d:e8:69:7f:4e:ae:b1:73:0e:eb:1d:a1:46:e4:
72:d8:05:78:0a:7d:4f:67:d0:06:17:19:e3:4d:8f:f3:6a:eb:
18:03:4d:b8:94:a3:5b:9c:51:6e:b2:25:4c:52:2f:0e:3f:2b:
0b:fb:2b:87:4a:aa:eb:75:9d:7a:70:e8:9e:30:89:fc:bf:78:
16:f5:94:b4:e6:69:46:52:35:b3:a5:b9:06:10:0f:03:22:98:
10:9e:2f:96:dc:1e:8c:44:41:b6:f8:23:45:51:7f:2f:a8:a8:
4b:e1:25:00:3c:00:12:ba:ed:c7:c5:bb:de:d6:23:ba:9f:42:
b0:be:28:76:94:81:ed:c9:25:62:3c:46:cf:79:ad:8f:54:8d:
0a:33:f9:79:10:25:7b:31:9d:d5:30:f6:b5:bd:d9:ae:8b:57:
c1:d3:88:b6:6d:67:c9:d6:6d:40:e1:59:52:b8:f9:af:8c:83:
fb:65:7b:ec:97:a8:e3:71:27:92:1e:39:e8:3e:49:f0:25:04:
09:4b:54:2a:51:0a:46:0a:b3:3f:f5:38:8f:88:6d:53:8e:d5:
78:82:06:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 30 21:56:14 2024 by rpki-client on console-fra.rpki-client.org