Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/qNw-6FeSejzCVe99cIyQPKjrCyQ.roa
File: qNw-6FeSejzCVe99cIyQPKjrCyQ.roa (raw, json)
Hash identifier: d3IMIX8feuk7ApW1G1DPmdJfqrsZZV1Z73CpQjK1VoM=
Subject key identifier: A8:DC:3E:E8:57:92:7A:3C:C2:55:EF:7D:70:8C:90:3C:A8:EB:0B:24
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 01D5
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/qNw-6FeSejzCVe99cIyQPKjrCyQ.roa
Signing time: Mon 01 Apr 2024 07:55:04 +0000
ROA not before: Mon 01 Apr 2024 07:55:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Apr 2024 11:55:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 469 (0x1d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Apr 1 07:55:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=A8DC3EE857927A3CC255EF7D708C903CA8EB0B24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:18:4a:5b:e8:b3:9e:bd:db:70:49:fd:e3:bc:
12:ec:01:8d:6a:5d:b0:8b:a1:9b:aa:7a:d3:33:76:
4a:41:8f:1e:17:6c:91:17:26:98:29:cc:b0:0e:c3:
57:27:ad:87:43:58:24:19:05:35:92:83:fc:7b:9e:
6e:76:1f:23:ad:1b:f0:eb:17:71:25:b3:3e:06:8f:
55:aa:e7:13:6b:35:eb:58:a0:96:9b:1d:61:be:f3:
97:ed:4a:1e:e0:9a:80:16:1c:ed:97:f6:d2:5f:e2:
64:38:c2:97:c2:22:ab:2a:9d:c2:df:a9:0d:22:f3:
2d:dd:3b:bf:10:3c:13:83:c7:25:be:f7:69:4e:05:
d5:c7:29:8c:7b:45:9f:70:d1:e1:ed:e7:ca:eb:1d:
5c:7b:8c:9c:c2:53:13:ff:e7:cf:1a:d2:ba:4f:23:
2d:bc:a7:4a:66:d9:8c:ea:29:14:01:79:b8:1a:0a:
8f:89:14:b5:65:07:88:08:76:87:93:ac:c3:81:bf:
ef:97:f7:38:18:f7:24:8e:3b:36:b2:fe:47:f1:5b:
fd:56:2e:c6:e7:06:cc:7c:3a:3d:23:f6:56:84:d5:
41:9d:7c:df:52:5c:61:fe:66:48:2f:bb:39:7b:b9:
ca:58:af:42:ed:5a:f8:ec:00:23:1a:fc:da:c6:f6:
e5:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:DC:3E:E8:57:92:7A:3C:C2:55:EF:7D:70:8C:90:3C:A8:EB:0B:24
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/qNw-6FeSejzCVe99cIyQPKjrCyQ.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:5c:c3:75:b3:bd:7f:9b:73:f7:e4:5b:cb:cf:76:6b:b0:56:
ba:e2:b1:88:4a:58:64:88:a4:05:98:38:d3:de:50:29:f4:f9:
60:80:7a:01:cb:7d:48:7c:45:d4:31:ad:d4:bd:d1:13:c6:75:
97:f0:fc:dc:eb:f8:a1:09:eb:36:39:87:b0:99:84:19:f6:2d:
b4:02:f4:78:d5:a6:2f:e5:bf:e0:cb:53:6d:19:9e:7f:b0:3a:
33:55:d2:c3:ce:52:22:59:d3:1b:a4:46:2d:8f:e8:83:e3:e9:
e3:08:1f:59:0c:0b:ec:c7:c5:7f:dd:1a:b9:d6:03:47:17:ff:
78:75:0e:68:62:42:4b:d8:5b:7a:63:ca:61:97:8c:78:1f:6f:
3d:de:2b:4a:fb:13:fa:75:5a:fa:d2:59:e5:7d:26:e4:cd:76:
4a:bf:af:3c:de:ec:2b:86:62:d0:ab:58:27:f5:ec:dc:7a:d8:
00:c8:7f:21:30:1e:a1:22:7e:49:cd:6a:86:ad:f4:c9:33:25:
45:f0:97:63:8f:4c:5a:37:f7:f6:80:07:96:4e:24:6d:c7:ce:
1e:c9:44:8d:0e:a6:4e:4b:03:59:e5:d0:6c:40:b6:09:5e:5c:
86:41:b7:93:f2:31:f0:52:ef:32:96:f0:03:86:6d:84:d5:13:
6f:8d:c4:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:55 2024 by rpki-client on console-fra.rpki-client.org