Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/tD14d5BUsD8wvhDn6fD8Vvv2qjg.roa
File: tD14d5BUsD8wvhDn6fD8Vvv2qjg.roa (raw, json)
Hash identifier: YeP8uNOmrFowXU+nLE5H0laORj1z6CA3c+6kdmQsy+Y=
Subject key identifier: B4:3D:78:77:90:54:B0:3F:30:BE:10:E7:E9:F0:FC:56:FB:F6:AA:38
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 082C
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/tD14d5BUsD8wvhDn6fD8Vvv2qjg.roa
Signing time: Sat 28 Sep 2024 15:55:03 +0000
ROA not before: Sat 28 Sep 2024 15:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 28 Sep 2024 19:55:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2092 (0x82c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Sep 28 15:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=B43D78779054B03F30BE10E7E9F0FC56FBF6AA38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:36:fe:66:22:1f:4c:cf:cc:97:55:54:cb:56:
c9:bf:c5:c8:1a:1e:81:32:98:34:c8:53:7f:19:00:
2e:86:4d:8e:03:e3:f5:69:6a:20:e2:d7:2a:b3:f2:
8c:69:1f:62:5e:dc:29:ab:92:97:23:33:14:1c:df:
17:01:43:32:7b:3f:6c:e0:92:b3:ad:05:70:a7:0d:
13:7f:16:5a:ac:7e:14:ec:41:33:48:3e:bc:94:b5:
20:0d:e2:cc:10:86:0f:87:77:e0:81:bb:26:53:eb:
a2:fb:81:3c:ff:4d:90:4c:1c:9a:cc:29:3d:5d:f5:
5c:25:60:53:9c:3f:0b:19:6e:12:18:1f:db:3d:9b:
b5:0a:64:67:81:4f:37:ca:9d:d9:93:aa:63:a2:ab:
ce:30:3f:0c:99:1f:53:dd:93:51:55:11:5c:49:94:
70:af:68:d1:fd:09:24:50:22:19:2a:cd:98:4d:09:
42:b6:df:b8:2e:64:63:99:07:2d:3e:4b:68:76:cd:
ee:90:c8:91:cc:c0:07:c7:9b:40:f9:73:8e:8a:fd:
27:c8:fd:3c:24:31:10:5d:a0:a9:32:f7:30:c4:1f:
42:3a:02:8a:db:00:92:7d:bb:00:04:f0:99:0c:49:
08:7e:a5:d1:53:a3:79:b8:6e:a8:02:fc:4a:89:87:
c0:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:3D:78:77:90:54:B0:3F:30:BE:10:E7:E9:F0:FC:56:FB:F6:AA:38
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/tD14d5BUsD8wvhDn6fD8Vvv2qjg.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:c5:43:38:00:bc:eb:a7:0e:13:69:b1:a8:23:85:22:91:a8:
94:b8:9a:be:d0:e4:dc:85:c0:a4:5b:df:d9:67:69:ca:54:23:
83:ea:06:3b:9f:57:d1:17:7e:2d:df:36:35:9a:b0:1f:de:62:
62:55:e1:92:da:e5:ea:56:a7:0c:b8:51:e3:08:ae:c6:9d:f8:
5f:49:18:82:07:48:3e:3c:40:d0:2a:28:b8:c1:b8:de:11:e8:
02:c5:69:6b:d5:05:bd:ca:8a:c3:64:c6:01:84:04:88:e8:a9:
02:e8:2e:d8:80:7f:2a:95:9f:85:79:be:36:2c:60:43:14:98:
4f:b6:0c:19:1d:a9:f8:d4:e4:0b:72:7b:1d:2f:cd:28:09:7f:
07:df:9a:0d:07:0d:ec:3e:67:23:8b:bc:8c:7d:51:98:ed:ea:
1b:2b:4a:98:cd:d3:8a:b9:3b:df:16:1d:fe:72:a1:8f:a3:4c:
96:84:62:54:46:bc:45:c0:5a:27:d7:80:e9:9e:14:a8:20:4d:
cd:43:24:5b:34:b7:79:e1:0d:47:02:a6:93:c0:43:b8:6d:ff:
95:7e:f5:19:00:5c:81:da:09:d2:4c:20:d1:f3:30:ad:df:6c:
2a:ce:27:8c:74:11:68:76:10:55:5d:22:65:91:b8:4b:5f:ba:
b6:2c:5a:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 20:53:55 2024 by rpki-client on console-fra.rpki-client.org