Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/q4_76Fc-slsYlPiwfpx2OvpkNCY.roa
File: q4_76Fc-slsYlPiwfpx2OvpkNCY.roa (raw, json)
Hash identifier: m7bbAF84sCf4xTydL0qJzfpCS4VOXx7a8sgD5JCV5+U=
Subject key identifier: AB:8F:FB:E8:57:3E:B2:5B:18:94:F8:B0:7E:9C:76:3A:FA:64:34:26
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0959
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/q4_76Fc-slsYlPiwfpx2OvpkNCY.roa
Signing time: Thu 31 Oct 2024 23:55:02 +0000
ROA not before: Thu 31 Oct 2024 23:55:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 01 Nov 2024 03:55:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2393 (0x959)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Oct 31 23:55:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=AB8FFBE8573EB25B1894F8B07E9C763AFA643426
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:f6:9a:36:d2:5b:28:4a:7a:63:4d:fb:83:2a:
89:51:b3:85:b4:e1:b5:a7:12:2c:d9:ec:ca:15:17:
89:1c:d4:7a:30:2b:7b:79:2f:51:f4:c8:d2:ee:c7:
5e:fd:0e:23:53:76:ed:07:e7:0a:09:40:a7:a3:eb:
ae:f4:5d:51:f6:39:25:07:55:c4:c1:4a:5e:a2:04:
1d:7d:28:d0:be:20:92:47:f4:8d:59:65:14:19:b7:
a1:53:08:fd:d5:b1:87:36:8c:80:f8:ef:d1:89:19:
77:72:9e:3c:50:c3:a9:24:b5:32:b5:4b:81:10:8c:
8f:0b:12:90:a1:ed:d5:6a:73:4a:5b:9f:36:a6:74:
4e:87:c5:80:e9:60:bc:48:d8:f3:7d:75:32:cf:60:
9a:14:7b:41:90:c9:7f:2f:ca:80:72:9e:60:33:31:
41:b1:1b:26:61:71:ff:4d:1c:ab:9f:26:dd:e0:b8:
fa:6e:e0:db:a6:9b:cb:6b:f1:9d:6d:68:e6:ae:23:
7a:f3:3b:1c:c7:1b:27:ce:89:93:bb:1c:39:b7:4b:
99:73:64:8f:c1:86:84:af:81:73:2e:7d:f9:60:4d:
f8:ce:b8:45:cd:ea:55:fe:dd:c3:97:2b:86:34:70:
52:45:a4:31:a6:4d:88:c5:bd:26:34:8a:70:cb:1f:
94:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:8F:FB:E8:57:3E:B2:5B:18:94:F8:B0:7E:9C:76:3A:FA:64:34:26
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/q4_76Fc-slsYlPiwfpx2OvpkNCY.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
21:05:d1:be:d8:49:f3:c2:b4:78:a1:8a:27:b6:16:53:a9:22:
a3:93:ea:f4:fb:cf:41:83:c4:6c:19:fb:e0:f7:fe:af:f1:1a:
1d:22:dc:84:b3:48:5a:09:10:dc:7b:13:ec:4a:41:fb:9c:3e:
ea:be:ad:72:8b:96:f7:d2:d4:ec:eb:c0:6d:c0:f3:ba:61:00:
08:db:32:c6:b9:9c:81:9e:ba:44:cb:8b:20:1e:0d:d2:cd:c1:
89:dd:70:f0:db:af:42:bd:e6:f7:f6:0a:1c:5a:19:8f:5b:33:
26:82:25:96:bb:2d:07:ae:1a:1e:9e:51:9c:e4:3b:d9:32:45:
68:34:51:26:4b:45:75:9b:19:27:67:bd:43:38:7a:b7:59:71:
55:53:50:e6:b0:b1:73:da:f3:1d:9f:7b:f4:3a:41:ce:82:25:
59:ac:66:5b:90:33:c5:9f:05:17:f6:1a:19:27:16:22:3d:d0:
05:54:7a:62:ec:0e:cb:00:71:48:a3:8b:b6:51:9b:48:67:84:
c4:a7:a6:64:4e:be:a0:6b:6f:8a:1c:4d:46:86:f7:56:03:f8:
29:b1:ba:44:75:9b:80:69:66:82:fd:10:e8:dd:86:dc:4b:f9:
6a:dd:d8:3c:7a:21:21:ee:19:0f:16:f4:93:dc:da:b0:23:2c:
07:0d:2e:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 1 05:14:14 2024 by rpki-client on console-fra.rpki-client.org