Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/sVY4JJGX5fjVBLzcPQUO2YWFC_k.roa
File: sVY4JJGX5fjVBLzcPQUO2YWFC_k.roa (raw, json)
Hash identifier: sv86dfhQTEwwYCAOFFAUn7+WPdF96+rsGD+YSgqtaic=
Subject key identifier: B1:56:38:24:91:97:E5:F8:D5:04:BC:DC:3D:05:0E:D9:85:85:0B:F9
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0892
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/sVY4JJGX5fjVBLzcPQUO2YWFC_k.roa
Signing time: Wed 09 Oct 2024 23:55:02 +0000
ROA not before: Wed 09 Oct 2024 23:55:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 10 Oct 2024 03:55:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2194 (0x892)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Oct 9 23:55:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=B15638249197E5F8D504BCDC3D050ED985850BF9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e1:e4:bf:b7:0c:5c:e7:1d:aa:40:dd:61:da:
11:c8:a9:34:96:7f:63:4a:fe:6a:38:22:67:b8:3e:
f3:69:09:6a:08:5f:25:0a:8d:93:fd:f7:f8:18:e8:
48:67:07:d6:4f:93:1c:75:42:18:06:2b:b2:9c:45:
e1:63:08:b2:0f:98:38:7d:1a:b0:f3:f5:e6:7b:41:
14:e1:f1:b5:5b:a6:13:0c:dd:65:96:31:37:77:41:
49:e9:42:b0:6f:3d:ce:bf:18:ee:3d:3e:6e:db:54:
3a:70:ed:19:52:61:2e:74:01:f8:dc:23:0c:67:53:
fd:e8:b4:9b:f6:c6:9c:58:6c:f2:f8:5e:a7:26:7a:
be:c4:2b:dc:0a:81:05:aa:42:cf:dd:fd:65:3c:9c:
53:9d:06:0a:a2:9e:2c:da:1a:0d:b1:93:de:87:4c:
22:81:0f:3f:41:ff:96:8e:90:82:9e:e4:5a:c1:58:
d9:da:03:f0:4d:a3:88:b2:53:03:33:cc:d7:74:0b:
51:a3:87:52:33:3c:39:c4:77:11:6c:50:01:b3:3c:
b7:62:88:e4:06:ef:68:c6:a2:57:55:33:bb:4b:c9:
d1:e2:b8:7e:77:c6:b3:cc:b1:18:6c:2a:43:87:d5:
4e:51:c8:04:e1:8f:21:26:a5:d7:ad:b9:0c:9d:36:
ba:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:56:38:24:91:97:E5:F8:D5:04:BC:DC:3D:05:0E:D9:85:85:0B:F9
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/sVY4JJGX5fjVBLzcPQUO2YWFC_k.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
36:3f:b4:6f:cd:61:05:ee:65:1a:17:7b:69:9d:29:a1:d2:98:
45:97:2a:6d:99:46:b7:c4:7c:07:80:e6:9e:1a:ab:cf:28:7a:
0e:37:bb:ec:d5:ec:f3:28:e7:47:41:12:1e:d8:ea:71:a0:e6:
3f:62:d8:51:2b:1a:35:69:cc:c1:5d:2a:e3:8d:bb:6e:6b:15:
04:c5:a4:7a:8e:d3:dd:1e:6b:e8:a0:81:c0:9f:0f:72:1b:55:
c8:f4:d8:b4:31:d9:b5:8e:85:33:9c:69:26:b4:78:28:f6:6c:
f7:62:c9:e4:ef:f8:32:a9:b4:8a:1b:6d:48:5e:2d:82:5f:c3:
ed:5a:df:d6:65:a2:73:71:7c:10:1c:85:01:43:94:ba:35:2c:
04:f9:46:76:02:f1:7a:1d:d6:59:42:a8:74:ad:43:e6:29:20:
46:08:c2:3e:62:f6:47:0d:9e:bd:cd:94:56:6d:c7:ac:cf:e3:
2e:50:64:e3:3e:4a:4e:3c:b2:48:87:63:65:91:09:44:e3:8e:
6a:a5:9f:f8:5d:50:2e:3d:7c:4b:dd:65:a5:ae:83:c2:29:26:
f3:8f:c4:98:f2:23:f1:4c:b9:48:07:16:09:cc:f5:24:16:32:
05:ab:09:fb:66:2f:2d:75:f0:e2:96:e4:05:b6:7a:73:58:b5:
47:50:da:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 10 07:48:28 2024 by rpki-client on console-fra.rpki-client.org