Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/pcsKfn5_NdJteu1krz5lV-qt4Ag.roa
File: pcsKfn5_NdJteu1krz5lV-qt4Ag.roa (raw, json)
Hash identifier: JGyRsKe7/0Ke8I/o2cXJ+beiXCywvp0rzS6l9eDCMsY=
Subject key identifier: A5:CB:0A:7E:7E:7F:35:D2:6D:7A:ED:64:AF:3E:65:57:EA:AD:E0:08
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0A1F
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/pcsKfn5_NdJteu1krz5lV-qt4Ag.roa
Signing time: Fri 22 Nov 2024 23:55:03 +0000
ROA not before: Fri 22 Nov 2024 23:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 23 Nov 2024 03:55:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2591 (0xa1f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Nov 22 23:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=A5CB0A7E7E7F35D26D7AED64AF3E6557EAADE008
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:be:bc:54:0e:51:73:fa:1b:c6:dc:93:76:08:
79:5c:ca:97:62:64:3e:9a:04:89:73:d2:b6:45:80:
ae:ae:26:27:da:31:24:ab:1b:36:a3:8b:0c:91:91:
28:8f:75:7d:e6:48:7a:44:7b:1f:0f:a2:be:8c:b9:
50:92:f6:84:b6:d7:6f:2d:cf:b5:02:83:3c:32:6b:
71:b9:25:7d:c8:1b:94:9a:48:2d:8b:2d:fe:5b:bd:
3f:6f:28:79:28:94:c2:1d:6e:94:bc:dd:1d:9e:46:
67:fb:41:77:95:7e:27:90:27:43:f6:a4:86:7f:b3:
fe:0e:02:e7:66:e1:dd:02:fc:d7:1f:d4:18:5c:60:
7c:84:99:07:08:94:c7:d6:25:f8:3e:3d:99:8f:50:
0f:69:f9:fd:35:bc:f6:42:c2:bb:82:90:b9:a6:32:
59:b0:9d:b5:38:25:7f:77:3b:c8:f0:c3:83:a4:f0:
e2:28:01:90:2b:10:6b:26:8e:fe:6f:24:a2:e2:08:
92:27:5e:35:ed:34:76:af:f1:e9:39:d1:b7:96:5d:
e7:cb:d5:98:59:62:b3:a0:a8:0c:c8:39:31:dd:0c:
56:6b:71:b0:42:22:9d:93:e0:f9:ae:0e:82:17:72:
d8:f4:7b:ba:dc:4f:c2:bf:5b:a5:92:70:70:6b:fe:
5b:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:CB:0A:7E:7E:7F:35:D2:6D:7A:ED:64:AF:3E:65:57:EA:AD:E0:08
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/pcsKfn5_NdJteu1krz5lV-qt4Ag.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
40:e2:69:ba:e2:77:0f:73:73:f6:69:c6:6c:1b:05:c4:b1:c6:
48:da:dd:33:70:bd:2b:9f:5d:cc:01:6e:8e:b5:c7:67:45:24:
7e:db:ab:2d:bd:b4:cd:f8:e8:29:41:e7:a3:c3:f0:c0:8d:fc:
d3:3d:a6:19:4c:39:3b:b2:f8:4c:dd:04:25:f5:95:ca:46:dc:
4a:e6:d1:af:f1:1e:f4:9a:1b:f3:dc:18:db:ce:21:b5:5c:3f:
a3:12:1c:39:f4:3e:b3:d3:dd:47:e9:ef:d6:59:8b:a1:16:36:
0c:dc:cf:5a:9b:37:c7:33:89:fe:48:f4:11:11:24:24:33:7d:
af:6f:c0:f8:02:9a:71:d0:ba:5b:3b:e3:d0:34:f7:54:d5:46:
a4:e4:79:ac:99:a6:b4:34:66:c5:30:2c:23:eb:71:9a:e6:0c:
35:40:53:a7:1d:7d:98:0b:6b:77:37:ab:0f:7e:dd:2c:14:62:
3d:fa:b5:10:30:c3:25:5d:90:ea:33:7a:f5:1d:0f:2e:f0:0d:
aa:ee:87:cf:7a:24:cd:52:87:a5:3d:79:a0:08:a6:0c:26:fc:
94:ba:5d:4b:f0:d8:30:31:d3:58:0a:c7:03:ef:64:d8:f8:6b:
84:f2:d8:91:29:c3:aa:eb:51:3e:aa:ba:34:68:5a:ef:0a:03:
b2:29:0b:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:16:04 2024 by rpki-client on console-fra.rpki-client.org