Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/prabYjE6cRkaU9uKnF3ZHlICiJ8.roa
File: prabYjE6cRkaU9uKnF3ZHlICiJ8.roa (raw, json)
Hash identifier: 5/XY/33HpYkW+xRvMzqSHCZr0kL5KQAk9TNJW1CJQmM=
Subject key identifier: A6:B6:9B:62:31:3A:71:19:1A:53:DB:8A:9C:5D:D9:1E:52:02:88:9F
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 05F8
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/prabYjE6cRkaU9uKnF3ZHlICiJ8.roa
Signing time: Sat 27 Jul 2024 23:55:03 +0000
ROA not before: Sat 27 Jul 2024 23:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 28 Jul 2024 03:55:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1528 (0x5f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Jul 27 23:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=A6B69B62313A71191A53DB8A9C5DD91E5202889F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:03:2c:02:8e:77:97:31:16:24:bb:a3:fc:50:
f4:fc:11:1d:5d:ec:1d:9e:df:8f:69:d0:14:b2:f9:
26:e5:26:bd:cf:53:d1:a1:31:cd:e9:e6:99:04:df:
e4:e7:d8:2e:12:0f:1f:0a:c0:ee:d1:61:9b:8c:8c:
b9:03:e4:f8:01:c6:a3:9f:d9:bb:6c:f5:06:77:7e:
da:8d:60:53:7f:f1:aa:e6:4f:1c:36:b1:c4:69:e4:
57:95:11:e0:d1:34:39:10:c6:19:6a:97:ac:c5:c1:
d1:51:2e:12:46:65:04:00:f7:c8:f5:d9:ca:10:50:
96:e4:57:73:ba:6c:e0:19:e8:d6:35:dd:f4:54:af:
a0:17:0c:d9:c4:26:59:6e:5b:86:4f:ff:f6:fb:d4:
98:7e:36:26:10:af:a7:05:92:6e:ed:00:7a:71:9f:
e9:3b:11:94:8c:7d:54:f2:a1:b4:0f:ca:aa:9d:17:
fd:50:5b:de:97:ae:f9:1f:25:17:b7:8f:ec:a5:34:
62:32:9f:20:b7:a6:80:d9:d0:53:9d:c4:71:fe:ed:
6a:2e:57:f4:d8:e3:15:db:bc:f0:25:83:73:01:27:
43:3b:b5:9e:9a:3f:15:37:26:67:62:18:34:c3:96:
41:1a:41:60:ea:3f:d1:43:da:40:d5:27:1d:03:26:
65:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:B6:9B:62:31:3A:71:19:1A:53:DB:8A:9C:5D:D9:1E:52:02:88:9F
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/prabYjE6cRkaU9uKnF3ZHlICiJ8.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
92:fb:97:8b:dd:07:0e:5b:2e:99:25:c1:ab:7b:be:69:31:ec:
9f:90:df:b1:4e:72:55:4f:c0:ba:fb:72:16:f8:ab:64:73:59:
e8:53:d2:f6:86:00:fb:83:df:f7:6c:14:69:05:ee:7e:79:14:
30:cb:9a:1a:ce:16:a1:f2:46:28:28:d5:42:8c:8f:94:73:9d:
e0:1e:46:99:56:45:4c:e5:9c:63:6d:cd:ff:e5:a8:e2:b6:7b:
78:ab:d7:86:e7:1b:fb:32:6b:ef:3f:b7:3d:04:70:8b:22:83:
de:9a:c0:70:39:fd:b6:9c:d4:82:92:2f:15:79:a1:74:c8:6e:
92:a6:b0:66:7d:02:3d:50:1a:33:47:b8:45:17:1d:22:bd:61:
51:08:6b:b8:17:a7:41:f1:3f:ce:eb:e8:15:35:44:4c:8f:99:
cf:65:1b:c7:41:ff:4c:12:89:8f:e1:0b:3d:e3:f7:ea:ae:08:
2a:ee:ea:7c:4f:db:c9:35:92:8b:30:20:d4:9f:79:7a:12:0e:
ce:5f:9e:d0:57:18:5b:f8:9e:11:71:06:56:a4:07:e6:e5:af:
4c:f8:67:11:cd:63:e3:6d:80:ba:02:21:a4:6a:dc:11:1c:13:
7a:74:8d:e3:7a:a1:7c:ef:92:8b:05:b7:ea:89:d3:8e:4e:1e:
3c:a7:ac:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 28 06:06:32 2024 by rpki-client on console-fra.rpki-client.org