Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/pWLHu7PgbmMYzZH911A_EbbCJjg.roa
File: pWLHu7PgbmMYzZH911A_EbbCJjg.roa (raw, json)
Hash identifier: EeZqDeXP+C/B2niH1srCZZqgns8sXmgKdHYFnbMtAuo=
Subject key identifier: A5:62:C7:BB:B3:E0:6E:63:18:CD:91:FD:D7:50:3F:11:B6:C2:26:38
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 06D6
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/pWLHu7PgbmMYzZH911A_EbbCJjg.roa
Signing time: Wed 21 Aug 2024 15:55:04 +0000
ROA not before: Wed 21 Aug 2024 15:55:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 21 Aug 2024 19:55:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1750 (0x6d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Aug 21 15:55:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=A562C7BBB3E06E6318CD91FDD7503F11B6C22638
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:15:e3:14:ba:d8:02:25:3d:83:68:1f:e0:e9:
8e:dd:1f:b0:3e:98:3b:12:49:98:22:23:df:88:f5:
a2:34:cd:93:29:7d:f3:44:51:25:82:25:c5:1a:86:
7c:bc:72:3a:01:8b:49:4c:f4:29:90:fd:10:47:45:
13:1d:71:fa:57:4d:28:ed:79:6c:5d:6b:83:57:63:
be:4c:ba:2a:29:b3:1b:68:47:14:15:a4:5b:58:15:
6d:7d:8f:87:8d:e3:a7:ca:94:d7:2e:ad:75:d1:3c:
84:aa:a0:e3:cf:a7:b3:35:c3:1f:74:7c:0e:bf:12:
09:42:02:c4:c4:5e:02:ad:5c:dd:13:1e:00:af:5c:
a0:fe:89:95:11:60:5d:d9:25:bc:14:f0:c4:8a:dc:
60:ec:e2:71:81:80:05:72:6e:48:e2:31:ff:fb:a1:
5f:e1:32:af:6e:61:b0:20:08:ca:9e:f7:14:43:19:
a5:d0:de:6f:62:eb:f0:7d:8b:a0:e9:8c:ac:95:51:
6b:30:89:9d:ac:ec:ea:fd:20:9e:f7:3f:61:ec:e4:
6a:10:6b:8e:d8:99:be:50:9f:d7:4f:f1:bb:b2:28:
64:45:4c:25:be:24:eb:86:dd:5d:2d:1a:4f:c5:e8:
39:cc:10:68:fe:4c:1c:f7:02:d8:5e:80:8d:02:a4:
11:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:62:C7:BB:B3:E0:6E:63:18:CD:91:FD:D7:50:3F:11:B6:C2:26:38
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/pWLHu7PgbmMYzZH911A_EbbCJjg.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
91:49:ef:8a:88:33:1b:00:b5:5a:0a:d3:41:6a:fa:c4:6b:a4:
5a:3c:90:ac:29:90:30:fb:60:60:a9:74:b6:d4:db:59:d1:5e:
eb:b4:52:99:22:51:ca:5c:eb:47:66:e7:b7:26:cb:c4:fb:e5:
26:30:96:3a:ff:8a:dc:68:c1:2a:6b:50:81:e9:0f:84:e0:04:
94:e9:9d:32:80:4c:76:98:8c:3b:93:26:9f:82:44:0d:f5:af:
f2:d7:b7:e1:bf:27:57:a0:30:7d:98:94:81:bc:ca:f5:f5:1f:
8e:0d:46:73:d9:6c:31:64:e1:6a:96:89:64:d5:e2:e2:23:a7:
d6:12:a3:3b:13:7d:bd:14:a8:dd:98:08:d3:65:2b:8a:3d:e6:
93:c7:88:de:17:8d:a1:e3:1b:1f:86:d4:67:7c:a4:8d:9f:ce:
2a:5d:89:71:1a:aa:c0:4f:1b:b3:5b:ed:8d:d9:16:18:f4:9c:
31:8e:31:08:b7:d7:1c:b0:24:f9:20:36:e2:76:f6:30:e8:24:
ac:8b:d8:45:c7:d4:d7:0c:fa:c5:45:9b:85:15:c7:3b:0d:ee:
82:9d:47:10:51:8f:c1:55:d1:85:5f:db:09:19:08:72:9b:71:
76:3c:b9:81:10:0e:48:90:bd:2a:38:a8:2c:7c:65:72:0a:c5:
cd:f4:ad:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 21 22:37:03 2024 by rpki-client on console-fra.rpki-client.org