Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/nPGTVHn710B6EfQg5jy5lqM1bBg.roa
File: nPGTVHn710B6EfQg5jy5lqM1bBg.roa (raw, json)
Hash identifier: ALyVXaEQpkiKEvqr9GD4+9KGXk7x8WDyWqNk9Q1AjRY=
Subject key identifier: 9C:F1:93:54:79:FB:D7:40:7A:11:F4:20:E6:3C:B9:96:A3:35:6C:18
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 057D
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/nPGTVHn710B6EfQg5jy5lqM1bBg.roa
Signing time: Sun 14 Jul 2024 07:55:03 +0000
ROA not before: Sun 14 Jul 2024 07:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 14 Jul 2024 11:55:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1405 (0x57d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Jul 14 07:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9CF1935479FBD7407A11F420E63CB996A3356C18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:ee:1b:7c:e0:73:59:dd:e9:12:39:7e:cd:d0:
53:be:3c:e0:69:db:df:64:a7:8e:68:9a:8e:d6:81:
80:ca:ed:d0:1a:02:12:38:f7:32:2e:54:88:6f:09:
d7:88:5e:38:ee:d9:43:23:4b:89:80:73:29:e0:ad:
e1:b1:ba:dd:e8:7f:44:d9:53:59:f3:47:9e:68:61:
57:58:af:b9:3d:44:34:64:cb:bc:15:b6:80:04:a9:
fd:cb:1e:9a:0e:ee:17:fc:9e:c1:72:08:d7:f6:fa:
65:54:bb:5d:9f:89:c2:34:6c:06:d2:2b:0a:ee:12:
2b:6b:91:1e:ee:0c:db:fe:c0:83:03:8f:0d:b3:54:
00:94:22:5a:7b:48:32:56:d9:11:f0:08:c3:45:fe:
3a:99:e2:f2:aa:f0:82:41:46:6b:64:a4:d6:1e:b2:
56:2e:a7:26:34:c3:36:64:87:58:95:27:ee:cb:a2:
94:50:68:f5:84:ca:58:c5:0f:c5:0c:f1:b0:38:d6:
f1:93:3f:37:e1:57:7d:99:4b:cc:4e:cd:10:13:d6:
73:74:56:79:b6:82:16:4b:21:b3:61:17:5d:a9:e2:
9f:0a:58:71:9e:13:9e:e8:3c:fa:ac:ad:50:88:17:
cb:e1:99:88:fa:ae:7d:20:94:61:ad:61:54:d0:17:
08:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:F1:93:54:79:FB:D7:40:7A:11:F4:20:E6:3C:B9:96:A3:35:6C:18
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/nPGTVHn710B6EfQg5jy5lqM1bBg.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:cb:8f:01:fa:50:e7:06:d4:f5:e4:07:ae:92:ff:38:74:a0:
ac:e1:66:ea:73:f5:73:98:7d:ed:9f:4b:b3:ea:36:5a:72:11:
65:36:cc:bb:b3:57:10:db:55:2d:9c:f3:cd:8f:07:e5:48:d9:
a9:aa:06:1e:29:24:17:57:83:4b:1a:3e:c8:45:6d:e9:4a:38:
8d:ed:84:ba:5f:99:8f:a9:2d:16:50:06:0e:5d:66:27:f2:2d:
ba:5a:80:68:05:3e:1a:bc:bf:a5:1d:53:e6:c6:5c:ca:ab:5b:
b3:0e:95:4b:68:f4:6e:c8:29:0a:73:d9:3e:f8:01:b5:0c:6e:
e0:2b:7e:5c:36:3d:cf:12:85:13:3b:88:c7:65:a7:44:8b:26:
1f:b5:e9:1f:71:b4:71:2a:10:39:b6:bc:b1:ba:26:5c:42:96:
73:06:79:a4:35:46:0b:e9:c5:14:30:fc:db:6b:0f:51:12:0b:
85:6b:b0:d6:6c:33:1f:e4:d6:d0:6e:47:fe:82:81:bb:c1:d5:
39:d4:5e:88:95:e8:24:5b:cb:c0:2a:53:ed:1a:1f:9e:71:e9:
29:e4:36:92:89:a9:f8:cb:37:44:b8:02:24:8a:7a:75:16:3c:
84:6d:88:b4:4e:67:d8:78:3c:47:34:29:b2:cc:18:74:21:66:
c3:d2:5f:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 14 14:26:34 2024 by rpki-client on console-ams.rpki-client.org