Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/rGhyQzDVT5QAlC9-y5ZjjnBKnVE.roa
File: rGhyQzDVT5QAlC9-y5ZjjnBKnVE.roa (raw, json)
Hash identifier: 7afSYZd7+hPB4WGHLD8XuOuBeNWeQA7FxsukpITVdzw=
Subject key identifier: AC:68:72:43:30:D5:4F:94:00:94:2F:7E:CB:96:63:8E:70:4A:9D:51
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0349
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/rGhyQzDVT5QAlC9-y5ZjjnBKnVE.roa
Signing time: Sun 12 May 2024 15:55:03 +0000
ROA not before: Sun 12 May 2024 15:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 12 May 2024 19:55:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 841 (0x349)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: May 12 15:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=AC68724330D54F9400942F7ECB96638E704A9D51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f1:73:9a:31:12:41:73:8b:eb:72:d9:26:8f:
03:73:4a:3d:43:4e:47:62:9b:eb:06:6e:89:7b:cd:
b7:3d:60:b8:c1:b2:83:ab:2d:8c:32:6c:e0:8e:71:
6d:8b:c5:6f:db:7d:fe:c3:71:0e:c6:62:dd:63:3f:
66:a3:b7:ab:d8:9b:b2:46:57:a0:0e:8d:2a:7f:8c:
ec:59:b2:67:a5:ec:e6:1f:8f:d6:c8:97:fb:66:3d:
80:bc:df:e5:42:90:74:d2:f6:7c:42:c5:2b:f9:db:
88:2c:2f:db:45:8e:38:9f:66:ca:c3:0a:5f:fd:14:
61:54:0b:6b:aa:8d:07:af:20:67:55:a6:08:00:e4:
de:9c:b9:73:85:06:e7:d6:0b:2d:1c:da:62:c0:5f:
79:22:c1:19:22:74:22:5b:e9:c1:06:fa:57:42:0c:
c7:b4:54:5d:57:14:d5:5b:77:ad:a2:84:08:65:3e:
d4:70:df:c9:e7:0e:16:d9:1b:8a:1c:ee:09:3f:56:
34:44:04:40:45:72:f5:40:37:be:be:4e:7c:5e:a3:
5a:29:4c:ba:74:b8:03:9b:8a:30:ca:03:83:3f:4f:
74:6e:05:5e:f8:00:f1:71:0b:e9:ee:99:11:51:ab:
cc:aa:90:5e:d9:c1:bb:3d:63:32:3c:d7:56:5c:ae:
ef:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:68:72:43:30:D5:4F:94:00:94:2F:7E:CB:96:63:8E:70:4A:9D:51
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/rGhyQzDVT5QAlC9-y5ZjjnBKnVE.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
af:97:ed:f7:e6:96:b2:f8:d7:d2:96:17:38:86:a0:85:ea:39:
7b:9a:d0:8d:fe:b9:f8:ff:93:d8:ee:17:ca:aa:ad:58:a6:98:
1f:12:47:c2:28:f1:7d:1e:0a:df:13:9c:a8:47:43:9e:2e:49:
82:44:23:6f:d4:44:8a:ce:8f:d1:8a:80:f3:58:53:0a:e1:b7:
9b:95:71:26:43:06:43:51:f4:27:63:8e:42:79:0c:7e:1f:32:
fb:93:25:44:1d:23:1e:b1:de:35:e8:b6:34:d7:69:bc:a3:9b:
19:34:e2:27:9d:3a:e6:2b:e3:ef:6d:56:37:26:cd:d0:33:7b:
1e:4f:0f:3f:8d:4c:84:b7:39:df:b6:df:54:da:84:c9:59:11:
28:6e:b3:97:bf:1e:33:71:26:c3:c6:4f:01:5c:67:b3:9a:0b:
2a:6c:16:ea:7d:45:0b:1a:f2:1a:99:c4:b6:9a:1b:be:8e:1d:
6e:b6:68:24:f4:bd:cd:03:5d:41:d7:89:fa:6b:0b:3c:57:ad:
af:98:4b:3e:31:b0:70:84:a3:7e:0a:f0:dc:f7:85:f9:d9:07:
d1:5e:84:f1:c8:f2:d1:5a:3a:b7:0d:b5:08:2f:11:31:68:e8:
d9:e9:1f:04:26:e6:1c:8f:4e:f7:c0:82:e2:c5:3c:f7:bf:0a:
7d:f1:cb:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:55 2024 by rpki-client on console-fra.rpki-client.org