Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/lfhzQfdOazamUvBgfk_vEvZJJVA.roa
File: lfhzQfdOazamUvBgfk_vEvZJJVA.roa (raw, json)
Hash identifier: CRaa7EiQi7TIiz5frHzpg0ykVGILzvA539qT/umugtY=
Subject key identifier: 95:F8:73:41:F7:4E:6B:36:A6:52:F0:60:7E:4F:EF:12:F6:49:25:50
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 06C7
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/lfhzQfdOazamUvBgfk_vEvZJJVA.roa
Signing time: Mon 19 Aug 2024 23:55:04 +0000
ROA not before: Mon 19 Aug 2024 23:55:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 20 Aug 2024 03:55:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1735 (0x6c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Aug 19 23:55:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=95F87341F74E6B36A652F0607E4FEF12F6492550
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:64:ea:5a:95:63:70:18:c5:f3:0b:22:99:55:
f5:c1:93:c0:84:cf:d2:cd:1f:46:5e:1e:41:64:a0:
47:49:7d:b3:71:40:04:63:74:fd:f5:6e:4a:69:2a:
eb:fe:17:09:54:68:0a:ba:33:4d:f0:34:c5:9b:cc:
17:ea:c9:a3:99:7d:fe:a3:aa:79:b9:92:5b:eb:e4:
3a:6a:31:38:6a:c9:37:2d:7a:6a:cb:19:8d:fe:5e:
3f:76:99:92:e6:66:bc:9e:74:2a:7c:74:6a:9d:33:
ea:ac:0c:7f:12:63:1b:6c:8f:1c:70:f4:c5:81:3e:
51:1d:91:38:2f:6f:41:78:90:88:bd:9e:df:58:75:
08:49:6b:8b:c1:ca:d2:dd:e8:f4:15:f1:91:85:db:
32:d2:6c:2d:bc:e9:f1:af:8c:8d:c1:47:c4:35:58:
b0:49:53:8c:16:8e:ab:0f:28:8c:b1:ee:d5:be:35:
2b:10:8d:4e:6c:65:f7:ab:df:88:06:89:19:b1:5a:
26:2f:9b:2d:ab:57:45:a6:70:2d:2c:ca:b6:16:0d:
a3:70:e1:0e:3a:9e:cb:7d:13:7c:66:80:6b:54:95:
40:aa:7d:f2:85:54:0e:c6:7c:3f:d4:4c:52:a7:18:
fc:86:8b:4f:73:1b:b9:6b:e6:2c:24:c5:e7:5d:47:
55:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:F8:73:41:F7:4E:6B:36:A6:52:F0:60:7E:4F:EF:12:F6:49:25:50
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/lfhzQfdOazamUvBgfk_vEvZJJVA.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
67:f8:e8:f8:89:da:19:b7:92:38:e8:1c:d6:f2:22:50:4d:30:
13:0f:91:af:58:77:f5:e1:de:22:1c:3f:76:15:d1:9b:15:8e:
6c:a0:b6:62:d6:6f:d0:0a:c7:c3:fc:99:18:aa:a2:0d:08:60:
1d:d3:9f:6d:07:db:14:ae:eb:fa:0c:93:88:cc:67:0a:ff:06:
33:bd:7f:44:5b:a2:ea:14:95:b0:d5:3a:cb:74:e7:2d:b9:3c:
2d:ae:46:ec:b8:f0:ff:80:b3:72:23:f2:d4:de:b5:42:f2:59:
d0:57:2e:9a:83:2c:94:89:d1:20:18:18:c7:eb:7f:e1:9e:7e:
2b:c8:64:30:19:c3:a8:3b:db:05:94:c6:13:8d:ff:08:9d:8c:
dc:8d:01:a4:03:70:ff:e4:83:96:4c:2c:1c:25:03:c9:23:65:
5f:b2:22:c0:65:21:cc:13:0c:87:4e:57:57:7d:ff:0e:b4:c5:
a3:74:8e:da:50:7e:15:49:8c:9e:05:4c:db:16:85:0e:a6:20:
fe:f6:96:d4:32:49:1e:53:21:cc:89:58:61:54:89:c5:d6:70:
7a:e1:55:25:68:1b:2c:10:11:77:d7:0b:4d:f5:d5:a0:c4:6c:
eb:9d:e9:78:d3:f1:99:31:9b:dd:f0:b4:d6:ce:d2:45:20:1b:
20:30:7b:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 20 08:01:56 2024 by rpki-client on console-ams.rpki-client.org