Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/lmhYe_-JHCVRa_cBW4_HqccGVdc.roa
File: lmhYe_-JHCVRa_cBW4_HqccGVdc.roa (raw, json)
Hash identifier: dBYTWPirY7nGneefN+MJqrRxPeWtFiKHEDZBLZf2qsE=
Subject key identifier: 96:68:58:7B:FF:89:1C:25:51:6B:F7:01:5B:8F:C7:A9:C7:06:55:D7
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0A6D
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/lmhYe_-JHCVRa_cBW4_HqccGVdc.roa
Signing time: Sun 01 Dec 2024 15:55:03 +0000
ROA not before: Sun 01 Dec 2024 15:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 01 Dec 2024 19:55:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2669 (0xa6d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Dec 1 15:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9668587BFF891C25516BF7015B8FC7A9C70655D7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:91:05:35:7d:65:3c:f3:f8:3f:ac:25:41:5e:
37:49:15:14:12:de:92:5b:3b:1b:de:5c:b3:80:81:
b4:41:42:a4:21:a5:98:c8:27:58:65:22:eb:69:e7:
b4:38:3a:7f:b1:b6:7f:4c:74:f8:9f:d1:e4:e2:01:
ea:4f:d4:14:d5:03:51:52:ac:f8:ee:46:dd:23:7c:
d5:3b:19:e8:90:87:bf:dc:7c:79:c5:e5:18:1e:76:
d4:3f:4f:84:76:48:77:de:66:d9:99:4c:30:5d:69:
40:29:1c:2e:4c:51:77:78:d7:da:73:42:9f:b1:0a:
1a:cc:28:fd:6c:95:f5:54:7f:59:af:50:22:86:12:
ca:61:cd:8d:72:b4:bb:c9:7f:41:fd:f8:ac:83:1e:
84:7f:9e:89:c6:cd:ce:74:13:ce:11:b7:6b:94:a9:
92:d0:d6:e9:1d:72:e3:32:13:bb:86:cc:81:b7:ef:
41:e4:ce:4a:62:89:de:87:dd:6b:05:a2:2d:57:ed:
11:2e:43:79:e5:d3:26:fe:51:56:96:99:56:6a:7f:
c6:58:45:95:85:cd:c6:a7:f7:1d:6b:d7:27:5e:9b:
7a:bc:ea:2f:8d:e2:b7:a1:48:14:2d:08:6f:2c:67:
ce:4a:fa:ad:bd:7b:e8:98:92:c3:10:27:9e:e3:db:
f7:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:68:58:7B:FF:89:1C:25:51:6B:F7:01:5B:8F:C7:A9:C7:06:55:D7
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/lmhYe_-JHCVRa_cBW4_HqccGVdc.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:89:b3:e3:0b:3f:1d:59:93:f3:64:3d:be:56:ef:97:92:43:
89:0c:31:ad:3d:e5:5e:3e:75:84:a4:e5:de:bf:6f:22:ff:c3:
a8:f9:f1:69:49:08:59:77:e1:11:ab:10:7f:a2:66:21:83:0e:
bf:92:f5:38:60:23:99:e7:28:f9:0a:cd:49:de:eb:31:ae:66:
3a:cb:6f:bd:f6:1d:0d:f8:05:5d:24:02:36:0a:c2:4c:f6:68:
97:96:61:67:e0:e6:1c:32:ca:fc:c6:d2:ce:49:c5:4a:67:1c:
50:db:73:88:a1:aa:ae:9f:36:ee:8f:77:6d:49:4a:60:fe:30:
0c:69:4d:57:08:b2:f2:73:01:5e:44:47:46:30:0f:97:d6:6d:
38:70:52:fb:3b:55:be:41:75:d3:52:ca:a0:7b:46:49:18:28:
a1:a1:a6:ca:b3:35:22:a9:a3:2e:3e:4c:8b:3c:31:54:e1:73:
ad:a9:e6:09:1a:39:b2:a9:3d:f9:6c:3b:be:73:9b:66:66:d6:
e8:62:a5:cb:60:7f:1f:44:0e:bb:2d:77:d8:ce:56:a3:8e:c2:
dd:f0:31:9e:58:b5:fd:ab:33:d9:d1:e4:64:07:de:32:41:59:
3c:b1:d7:fe:2a:8c:66:46:aa:37:79:af:2e:c4:95:ed:48:1a:
ee:dd:11:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 1 23:27:39 2024 by rpki-client on console-ams.rpki-client.org