Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/n1EVkcwO4N9OV_wJLjqG6bv98Aw.roa
File: n1EVkcwO4N9OV_wJLjqG6bv98Aw.roa (raw, json)
Hash identifier: 8wIRF5uwy8KyNPL5lZKaO5fEEd9kRTzi7LP9IcmwyK8=
Subject key identifier: 9F:51:15:91:CC:0E:E0:DF:4E:57:FC:09:2E:3A:86:E9:BB:FD:F0:0C
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0751
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/n1EVkcwO4N9OV_wJLjqG6bv98Aw.roa
Signing time: Wed 04 Sep 2024 07:55:03 +0000
ROA not before: Wed 04 Sep 2024 07:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 04 Sep 2024 11:55:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1873 (0x751)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Sep 4 07:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9F511591CC0EE0DF4E57FC092E3A86E9BBFDF00C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:ef:e4:f6:f2:74:72:d9:95:cc:f5:bb:0f:9a:
8a:44:f2:fc:f7:92:3f:de:46:d2:93:e4:56:07:83:
90:a3:a0:df:16:ad:b3:5b:75:9c:0f:9d:e1:15:24:
98:91:4e:16:e6:3a:4e:f0:ad:7b:50:e0:65:55:28:
f1:2c:1f:97:4c:c7:f7:41:a6:e9:9e:a9:1e:2d:84:
c1:bc:20:dc:c6:61:15:e2:0c:4a:6d:c2:44:a0:69:
0c:b9:ca:90:ad:8d:1a:77:74:2c:10:30:bd:12:ac:
ac:15:d3:cf:50:54:a0:d9:3f:0d:d3:73:af:2d:e2:
c3:f2:b4:e6:b0:43:39:f8:37:7c:2c:c5:de:69:1b:
bc:bc:da:a6:ab:a8:45:9c:3f:41:9c:58:94:de:c0:
e6:c5:81:06:cf:bb:93:fa:9d:17:59:0a:27:ee:24:
3c:7a:3e:8e:6f:cd:a0:c0:40:8b:5d:a0:7c:bd:2d:
e5:f5:0a:c5:58:80:15:0c:19:49:47:47:0b:74:bd:
ba:bb:af:62:3c:ee:3c:94:4c:5e:1f:aa:da:f7:a4:
b9:56:ed:c2:2b:e7:3d:f0:9a:d5:f9:bf:42:a4:90:
b6:29:95:49:fd:2c:0f:47:51:3a:2f:ee:66:e7:4c:
4c:9a:30:f2:bf:3c:2b:e5:19:3d:92:ff:aa:91:78:
53:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:51:15:91:CC:0E:E0:DF:4E:57:FC:09:2E:3A:86:E9:BB:FD:F0:0C
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/n1EVkcwO4N9OV_wJLjqG6bv98Aw.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:70:f9:ca:56:cb:80:fe:ab:ed:8b:ad:b6:3e:1f:90:ed:b8:
0d:a2:3a:b7:e1:c6:d4:24:55:33:70:af:c4:ed:06:fb:bf:d6:
c6:c9:f2:54:be:e3:6a:87:ec:47:fb:f6:0f:3d:de:9f:60:0c:
68:36:9a:2e:dc:9b:cf:a4:9a:0e:c6:92:84:28:fa:eb:8c:90:
14:36:c7:60:dd:87:64:b5:76:51:b1:fb:46:d0:84:af:c3:4f:
ba:8c:75:da:4a:e3:ae:a8:69:2c:dc:2d:4f:ca:26:32:98:95:
d8:a8:bd:30:2d:5e:0b:5b:98:2a:c4:55:0c:77:8e:91:f6:50:
43:0b:e9:83:7d:59:12:9c:35:a3:bc:9b:25:df:b2:f0:e7:5f:
38:c2:ef:44:b2:d6:39:8c:07:7d:0f:11:60:39:06:80:54:8c:
69:39:2a:3a:45:99:1b:07:50:e5:a0:29:53:bf:85:c3:e2:78:
ec:7a:91:48:32:06:7f:ec:55:b5:d2:5e:e8:bc:3e:2e:4d:72:
92:9f:9a:42:84:a0:18:53:69:aa:d0:90:42:e8:e5:c4:d0:f0:
1a:30:60:49:9b:ab:c2:4f:90:a3:2f:8f:e8:ef:40:8e:a8:ac:
1d:6a:b0:fc:f6:8b:88:0a:3f:82:0d:fc:5b:fc:6f:3a:b4:41:
a4:e1:fc:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 4 13:38:39 2024 by rpki-client on console-fra.rpki-client.org