Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/rrg93-4m2cCpQAPa_2_lVLr4HqQ.roa
File: rrg93-4m2cCpQAPa_2_lVLr4HqQ.roa (raw, json)
Hash identifier: 467xdzorDxzgwVzYxgQsZD3yg21jn4bTDc9Gfu0tu+I=
Subject key identifier: AE:B8:3D:DF:EE:26:D9:C0:A9:40:03:DA:FF:6F:E5:54:BA:F8:1E:A4
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 061C
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/rrg93-4m2cCpQAPa_2_lVLr4HqQ.roa
Signing time: Wed 31 Jul 2024 23:55:02 +0000
ROA not before: Wed 31 Jul 2024 23:55:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 01 Aug 2024 03:55:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1564 (0x61c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Jul 31 23:55:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=AEB83DDFEE26D9C0A94003DAFF6FE554BAF81EA4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:3f:4d:0f:fb:1d:c5:03:dc:30:da:32:34:37:
6c:c4:fe:94:60:9f:76:ee:eb:38:61:73:df:24:77:
6e:95:f0:42:8a:3e:2d:b2:01:ce:bb:18:b0:86:03:
4a:39:6b:6c:a0:e2:21:4e:29:d4:dc:45:e4:36:24:
cb:76:ae:6b:a7:bf:55:4d:0d:d3:c2:72:2c:5e:09:
5c:8f:30:24:88:ba:82:7b:6e:18:3e:63:93:b2:43:
a7:55:02:a8:13:ac:af:5d:49:f9:9e:7e:33:bd:ab:
7b:ab:22:20:9b:2e:4f:dd:df:33:00:5c:bc:d5:c0:
71:a3:1f:15:cd:4b:46:5c:61:da:e2:eb:a5:1b:30:
80:66:64:00:fe:1b:36:1f:af:fe:ec:ad:8f:f1:5f:
bc:46:dc:ac:15:65:14:95:08:1e:ae:ca:1c:5d:cb:
38:1c:68:4d:bb:47:ac:59:64:79:43:b0:03:d2:c9:
a5:59:7b:dd:e9:da:7d:31:de:e8:8a:4e:47:08:5a:
aa:13:1e:6a:96:a5:13:ca:13:23:dc:6b:ac:5f:65:
5e:74:53:da:2a:a7:f8:1d:07:7a:40:82:28:5c:d5:
5b:42:64:a9:ec:37:d4:f9:f1:55:50:b1:b4:90:e9:
a5:e2:8e:3d:1f:21:85:70:fe:91:30:39:83:84:f4:
21:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:B8:3D:DF:EE:26:D9:C0:A9:40:03:DA:FF:6F:E5:54:BA:F8:1E:A4
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/rrg93-4m2cCpQAPa_2_lVLr4HqQ.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
be:1d:1e:63:7c:28:6e:b9:15:b4:b7:5b:2c:22:9d:e4:12:ee:
5d:fb:d3:82:f7:c3:d9:34:a4:92:65:8f:af:10:15:8e:85:e0:
47:3e:0e:d2:46:f4:47:66:55:62:05:ef:1c:6d:c0:df:d3:13:
47:10:4e:7a:e3:32:76:b9:41:d6:65:4c:14:53:25:b4:de:40:
32:9e:c1:71:de:8e:7d:8c:4d:ac:2e:07:59:30:e1:c4:43:9d:
18:8b:d8:04:4f:c5:5a:22:29:94:d9:5b:f5:d5:b9:24:64:3c:
89:33:57:85:d7:3f:48:a0:da:c2:a0:c9:da:e8:3e:d8:f1:ff:
9b:08:77:3a:3a:c4:54:e3:0b:e0:7e:a0:37:f6:7c:00:49:c9:
6c:ed:f5:73:5a:7d:22:ec:1d:20:a8:e3:57:cb:1d:53:48:16:
bc:98:06:80:b0:4d:a2:5e:b0:3e:11:f0:bb:49:c8:fd:67:0a:
1c:d4:4d:ee:f0:72:15:cb:a1:03:c0:9d:84:8e:d6:8a:94:a2:
1c:65:99:ca:2f:e5:c6:14:18:3a:d4:28:f2:b1:6c:e7:cd:8f:
e0:43:84:b3:07:8e:ce:6b:9b:3f:55:28:cb:8a:6a:45:ca:12:
72:3a:9e:55:25:f2:2a:3b:e2:60:3d:b5:f6:f7:0f:be:c3:ae:
c1:f8:41:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 1 05:35:31 2024 by rpki-client on console-fra.rpki-client.org