Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/pukcFKYSGFTgL4_88TbIsnsHpVo.roa
File: pukcFKYSGFTgL4_88TbIsnsHpVo.roa (raw, json)
Hash identifier: uYCGVW+9XUgDWwEqH/p6ll/KCRxx7ty9RQEKY68Rc2w=
Subject key identifier: A6:E9:1C:14:A6:12:18:54:E0:2F:8F:FC:F1:36:C8:B2:7B:07:A5:5A
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 03CA
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/pukcFKYSGFTgL4_88TbIsnsHpVo.roa
Signing time: Sun 26 May 2024 23:55:03 +0000
ROA not before: Sun 26 May 2024 23:55:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 27 May 2024 03:55:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 970 (0x3ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: May 26 23:55:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=A6E91C14A6121854E02F8FFCF136C8B27B07A55A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:01:34:2b:c7:e4:99:01:20:66:30:08:2b:2a:
0e:2d:67:a5:8d:ba:5f:cf:d4:e1:8b:60:6e:d4:42:
00:3d:2a:90:82:db:3e:0e:2c:9e:1a:dd:d1:2f:40:
9a:e2:e3:7d:19:1b:5f:0b:c2:47:96:43:a8:08:6d:
3a:d9:bf:d7:4b:e9:64:82:d4:2c:e9:af:ec:2c:83:
e1:7b:84:b2:97:10:f1:48:6a:ca:22:4f:eb:66:f6:
f7:32:86:ea:ec:6d:c6:a7:d3:e6:e8:0d:ea:cc:cf:
1d:15:5d:da:85:04:cb:fc:35:d0:4d:3c:69:c8:4b:
b3:6f:3a:99:23:0e:5e:99:29:86:aa:0e:5f:41:52:
e6:38:d4:f6:95:90:17:27:15:34:36:74:5c:1f:21:
20:07:4e:d9:49:47:ba:cc:5e:b5:cc:7f:ba:0a:3f:
06:31:8e:1d:06:0a:de:4b:9b:c1:dd:ab:f0:0b:67:
dc:95:12:02:f9:5f:f5:79:76:81:b5:2f:6e:e6:75:
f3:2f:2b:aa:c9:ca:cf:28:66:ab:9d:01:0a:17:d0:
d0:b4:ba:32:75:42:3f:45:6b:d7:44:a0:59:20:5f:
38:e2:1b:17:10:52:e1:19:2f:ea:2c:b2:75:46:4c:
c0:50:6d:34:9e:ec:43:de:9a:13:09:51:e2:27:8f:
3b:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:E9:1C:14:A6:12:18:54:E0:2F:8F:FC:F1:36:C8:B2:7B:07:A5:5A
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/pukcFKYSGFTgL4_88TbIsnsHpVo.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
ce:e5:4e:a6:02:25:cc:58:c8:88:d2:71:da:02:f0:92:17:c0:
55:9f:c6:a9:c5:a4:73:db:df:6c:de:d7:25:76:f8:53:d8:97:
d8:27:15:3c:2d:29:7b:d6:cd:ae:83:2d:f4:33:4c:45:dc:de:
f1:7b:f2:d4:21:88:62:a9:c4:ed:65:4e:82:aa:92:3a:92:e5:
4a:30:d4:a2:08:f1:bb:69:05:4e:3c:8e:d1:cf:a3:a8:cd:2f:
c5:a6:01:b0:a3:de:21:a9:b4:fc:62:88:be:bb:15:d9:01:5c:
1d:53:ba:e5:43:ec:44:5f:d5:ab:dc:38:61:fe:3b:f9:f2:9b:
d2:dd:b7:56:94:23:1a:cf:55:1d:23:45:5a:06:f8:98:f1:ce:
fe:ef:2d:d6:ba:5b:52:7e:65:16:94:da:31:89:e7:ad:1b:4f:
a7:22:ef:73:31:91:6d:d3:fa:06:eb:1a:35:a3:10:87:11:3d:
0f:2a:37:85:c5:a2:d9:f1:2e:83:39:ac:b5:d1:88:21:32:9f:
18:4b:4e:96:ed:78:62:c2:ef:56:04:da:78:b1:3e:3a:cd:74:
78:7b:ca:48:41:ec:67:77:5c:09:cd:f9:0c:5b:c9:96:b8:20:
aa:7a:a4:14:4e:03:b2:b5:de:80:10:d0:1d:bf:a6:1c:4a:27:
3e:f0:f9:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:55 2024 by rpki-client on console-fra.rpki-client.org