Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/mWvorTe8QYCY8rJenDW5dFzG7Ig.roa
File: mWvorTe8QYCY8rJenDW5dFzG7Ig.roa (raw, json)
Hash identifier: E+mw/maRBXDg/6IrY4UK9T79PKXA8qJOxMwJJi4DDNI=
Subject key identifier: 99:6B:E8:AD:37:BC:41:80:98:F2:B2:5E:9C:35:B9:74:5C:C6:EC:88
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0583
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/mWvorTe8QYCY8rJenDW5dFzG7Ig.roa
Signing time: Sun 14 Jul 2024 23:55:03 +0000
ROA not before: Sun 14 Jul 2024 23:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 15 Jul 2024 03:55:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1411 (0x583)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Jul 14 23:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=996BE8AD37BC418098F2B25E9C35B9745CC6EC88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:73:0f:5a:ad:f4:62:a7:53:5a:a7:37:e4:c3:
f2:ed:59:4a:99:b5:1f:12:63:03:1a:91:63:19:dc:
6b:15:00:de:8e:61:11:6f:61:c3:0a:04:3d:32:08:
03:09:b7:37:94:b2:b0:ea:33:21:ee:66:a0:5f:30:
85:7b:a9:9b:61:65:c9:bf:29:5e:53:14:57:96:4c:
d7:1d:c4:da:cf:e0:69:46:73:b3:a1:5f:32:48:60:
df:35:ad:34:59:90:eb:e3:da:0b:27:08:66:e0:76:
75:22:55:ea:cb:ed:23:41:fa:00:a8:a5:ed:29:45:
26:1e:56:67:3c:4d:e1:78:17:5b:42:ec:dc:cd:18:
e1:74:d5:3f:84:cd:1a:2c:ce:1a:1d:68:87:12:78:
2a:90:66:fa:ea:df:3e:8d:72:ab:ad:52:2f:24:24:
f4:a9:fe:96:98:04:aa:c2:bd:f4:d9:6c:c7:9c:ab:
f7:18:6c:e5:83:16:8c:dd:a7:9a:24:68:4d:fe:ba:
e5:59:05:84:bd:2b:d6:3d:f4:2d:b7:ab:c7:73:95:
2a:df:45:81:8d:a1:35:52:80:38:7b:e3:0c:ed:9d:
03:d0:6a:15:8b:e8:e9:06:f9:30:a8:5e:c0:ee:0a:
8c:0f:c7:bc:63:82:9d:26:fa:33:a9:20:b2:b1:3e:
35:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:6B:E8:AD:37:BC:41:80:98:F2:B2:5E:9C:35:B9:74:5C:C6:EC:88
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/mWvorTe8QYCY8rJenDW5dFzG7Ig.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:4d:ab:ef:fa:93:82:58:2f:39:ef:eb:64:eb:81:16:e7:00:
6c:0e:3d:cd:bc:ec:a5:cf:b6:e0:1b:39:46:0e:b7:70:c6:66:
30:1b:d9:f4:3c:87:28:c4:14:ac:58:12:09:20:5e:ff:a9:91:
b8:7d:32:d7:4b:45:5e:ff:2d:d9:84:5a:e0:c4:6c:ae:a2:cf:
23:f8:dd:fe:07:28:78:1d:79:2b:40:e2:58:5c:d9:e0:2c:07:
42:51:7b:01:06:c4:2b:70:44:93:bf:d0:66:0f:8d:a2:33:f0:
e8:cd:39:6a:b6:c2:93:dc:47:13:cd:f8:9c:18:df:04:5f:0a:
f3:80:8f:78:2b:64:12:c5:cd:37:27:3d:de:a3:85:d2:3f:8e:
ee:56:ba:2f:86:24:8e:25:fb:8e:4a:43:03:7b:f7:fe:c2:8e:
56:9a:2d:a7:e4:cf:06:a0:31:be:12:5b:ed:1e:b9:f3:cd:d5:
bf:f2:f6:02:2c:1a:bc:52:05:d6:be:bf:29:ce:5d:46:89:92:
57:05:a3:5f:ae:cb:a4:19:31:00:0f:0e:02:74:e1:8f:13:f8:
0e:d9:75:99:eb:1b:ee:4e:2f:3e:cf:e9:cd:c1:0e:24:79:96:
6b:86:41:8c:11:94:5b:2e:a5:5d:bd:e9:de:ed:2c:45:78:11:
65:39:8a:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 15 04:39:51 2024 by rpki-client on console-fra.rpki-client.org