Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/lqwR83VEgCYl34dbbz0bvvfS0Ms.roa
File: lqwR83VEgCYl34dbbz0bvvfS0Ms.roa (raw, json)
Hash identifier: I6pOVvT/x23aPnyoVc0EMl1snyuUF7jxhNFIhzEhenU=
Subject key identifier: 96:AC:11:F3:75:44:80:26:25:DF:87:5B:6F:3D:1B:BE:F7:D2:D0:CB
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0787
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/lqwR83VEgCYl34dbbz0bvvfS0Ms.roa
Signing time: Tue 10 Sep 2024 07:55:04 +0000
ROA not before: Tue 10 Sep 2024 07:55:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 10 Sep 2024 11:55:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1927 (0x787)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Sep 10 07:55:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=96AC11F37544802625DF875B6F3D1BBEF7D2D0CB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d4:91:4a:1a:ca:ba:19:8b:39:34:3b:b0:58:
4f:62:d0:5c:fb:27:88:7f:9e:69:98:21:41:60:09:
fa:44:20:4c:03:cb:c5:f5:85:03:d0:8b:64:42:c1:
5e:bf:99:29:bd:34:92:1e:b0:ad:e0:74:be:40:ca:
ee:3e:a0:8f:6b:24:85:e2:df:12:a9:d1:ee:c3:38:
aa:c7:ba:11:4e:5a:8b:1f:e9:f1:aa:a2:4b:80:46:
e2:29:13:07:d7:e6:ae:4e:93:12:94:e5:44:89:ad:
56:4e:68:71:25:e7:cf:71:8f:96:29:3a:ce:95:89:
57:20:69:1a:b7:6a:be:9e:7f:40:0a:ea:de:8d:ea:
27:45:6f:84:69:e2:51:36:9b:78:c5:9f:88:68:6e:
31:92:5c:b2:0d:a6:85:9b:64:f7:da:2d:ee:b8:d6:
a5:22:96:03:0d:bd:f1:7d:17:30:e0:4d:e0:e5:c5:
ae:41:b3:65:52:ee:fe:4a:3c:03:50:b0:6f:ae:eb:
54:30:f6:32:c8:7e:ee:e9:47:94:f1:7f:e6:37:d2:
c9:2a:cc:9f:eb:11:21:80:24:d8:db:09:5f:75:f9:
31:86:ce:41:a9:e4:84:80:45:2d:d7:3f:64:88:3b:
8d:19:35:41:b7:e9:40:6d:41:19:31:d4:cc:19:e4:
14:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:AC:11:F3:75:44:80:26:25:DF:87:5B:6F:3D:1B:BE:F7:D2:D0:CB
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/lqwR83VEgCYl34dbbz0bvvfS0Ms.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:44:85:a7:97:81:1c:7a:1c:bd:82:28:a7:3f:6b:b7:3d:18:
d0:7c:a0:6f:4b:48:62:b0:f1:ed:07:1f:10:fa:15:ec:3a:77:
17:c4:f5:45:05:e7:24:5a:ba:e2:3d:f2:96:82:04:28:30:6c:
f5:f9:8a:6c:16:ff:b3:b7:60:8d:8e:78:59:3b:33:46:f6:14:
e8:0c:6a:cb:33:8c:ac:d0:88:f2:1f:a9:61:cf:1c:23:a4:7f:
c2:f2:ff:f0:dd:10:09:eb:a2:b8:92:a4:e4:00:ba:d1:2a:10:
0c:00:2a:0b:9a:89:28:bf:ca:fe:a7:ba:14:d1:e3:9f:b8:d9:
21:b6:a4:29:c2:05:cd:97:4e:58:0d:4e:f1:e1:bd:a6:68:f5:
62:64:23:47:08:2d:ff:0b:db:b9:b4:6f:cc:6d:41:12:fa:76:
5f:5c:a1:0a:06:85:f3:b6:07:7f:5e:93:c8:bd:1b:5d:24:d5:
d8:fe:cf:16:4f:00:39:4a:f7:1e:a5:2a:12:aa:3c:5f:53:48:
43:04:67:e7:f1:f2:7e:9a:0a:cf:c2:5e:7f:33:d2:12:f7:b8:
37:e0:71:7a:10:53:9d:96:7d:71:ac:6c:a9:cf:c0:0a:79:a2:
76:61:0b:91:8f:9b:8a:a2:36:87:f5:a3:1c:ca:23:7f:c8:6d:
80:19:22:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 10 14:13:40 2024 by rpki-client on console-fra.rpki-client.org