Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/rEWVH8aExZXM-b_0xrSFYxbsBgQ.roa
File: rEWVH8aExZXM-b_0xrSFYxbsBgQ.roa (raw, json)
Hash identifier: KYQrMtlqMrkyR+b02qq9aMB1pLiNQPP6UJw1TmgCzug=
Subject key identifier: AC:45:95:1F:C6:84:C5:95:CC:F9:BF:F4:C6:B4:85:63:16:EC:06:04
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0886
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/rEWVH8aExZXM-b_0xrSFYxbsBgQ.roa
Signing time: Tue 08 Oct 2024 15:55:03 +0000
ROA not before: Tue 08 Oct 2024 15:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 08 Oct 2024 19:55:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2182 (0x886)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Oct 8 15:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=AC45951FC684C595CCF9BFF4C6B4856316EC0604
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:bd:ec:0f:c0:35:c6:24:66:a1:f0:16:0e:d7:
ab:e5:1a:48:b2:d6:26:ed:53:a9:e8:52:3f:82:bf:
87:7e:b4:2a:25:a7:63:30:96:05:37:e1:f7:15:02:
4a:8d:89:a0:61:5a:75:4d:49:ca:cd:84:c7:e2:05:
89:47:a5:b2:9f:65:93:e7:b1:7c:95:b5:73:49:c2:
86:1d:d5:09:a0:23:f7:61:a6:38:51:51:5d:ec:ba:
d6:55:47:60:c5:3c:51:ad:cb:42:64:98:ed:bf:ad:
2c:e8:7d:14:9f:a8:e9:71:1c:ae:52:0d:99:f0:89:
fd:c2:32:dd:88:b0:8a:73:7c:f7:78:06:a9:ce:db:
82:04:ab:98:47:1f:87:d0:f4:1c:a4:24:2d:ba:e9:
cf:4c:c4:9b:fb:f1:03:78:25:2c:33:74:0c:72:73:
f5:42:b0:ae:48:2b:be:57:11:37:90:67:aa:48:d5:
c4:ed:23:c5:b9:26:03:b1:66:80:30:aa:2c:d5:1a:
12:c4:69:d8:84:10:bf:ed:55:8b:91:62:f0:54:6f:
13:da:f9:b8:06:47:3a:3a:4c:05:49:d6:6f:1e:eb:
22:bb:17:79:4e:fc:71:a4:e8:a4:70:e1:29:fb:1b:
77:d6:7e:05:b7:a8:81:6e:17:d4:17:63:2e:8c:73:
b7:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:45:95:1F:C6:84:C5:95:CC:F9:BF:F4:C6:B4:85:63:16:EC:06:04
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/rEWVH8aExZXM-b_0xrSFYxbsBgQ.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
09:ca:40:76:a0:24:80:cc:00:d2:ab:88:7a:df:ed:e7:fa:33:
5e:ab:57:6e:ef:9a:d5:83:a0:23:41:a7:ee:a0:9e:32:90:4f:
6d:cb:c7:d4:34:16:63:0e:f3:36:f0:64:73:a7:2c:a1:4d:80:
4d:62:bd:6f:f8:cf:38:14:b6:82:32:c4:d9:7a:2e:c7:8c:c7:
e6:0c:ff:56:44:11:14:80:bc:67:88:c5:ae:5f:31:47:ee:ed:
26:b7:80:6e:b1:30:e0:c6:0b:d8:1d:94:e4:72:30:ed:60:5a:
39:1e:6b:b3:fb:e2:c7:8e:31:ce:b9:42:84:06:d9:4c:01:d4:
94:2d:5d:84:92:38:f8:ea:59:33:31:9d:cb:56:c2:c7:4f:85:
22:86:82:d7:cd:b5:dd:f7:f2:b0:8e:ad:fc:fd:f8:dd:42:73:
c5:4d:97:1c:2a:ff:d7:0b:f9:b1:9e:75:bd:7d:a2:42:89:6a:
21:5a:e2:b4:06:3c:a5:ce:92:b5:4b:a7:fd:8b:6e:40:46:bc:
ba:dd:9d:fb:f7:27:16:18:39:7f:b0:85:bd:f8:2d:f0:a4:64:
c3:77:04:8c:bf:00:72:9d:cb:68:5c:c8:c3:85:de:66:0b:fd:
d7:35:e8:e3:dd:c5:09:1b:23:0c:89:2a:ee:bb:eb:03:81:b8:
9c:d7:43:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 8 22:48:46 2024 by rpki-client on console-fra.rpki-client.org