Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/uBx0XEejOElTG8_e_PAlPCzS0Dk.roa
File: uBx0XEejOElTG8_e_PAlPCzS0Dk.roa (raw, json)
Hash identifier: Py/UNGr09COSFxYDTJ+FKsa9HakYwkxnmMKByMxvXUs=
Subject key identifier: B8:1C:74:5C:47:A3:38:49:53:1B:CF:DE:FC:F0:25:3C:2C:D2:D0:39
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 036D
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/uBx0XEejOElTG8_e_PAlPCzS0Dk.roa
Signing time: Thu 16 May 2024 15:55:04 +0000
ROA not before: Thu 16 May 2024 15:55:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 16 May 2024 19:55:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 877 (0x36d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: May 16 15:55:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=B81C745C47A33849531BCFDEFCF0253C2CD2D039
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:21:b6:21:53:d4:29:a5:bc:92:f4:50:f3:e5:
a1:44:ca:62:47:dc:9f:8d:0f:f5:b0:22:9d:66:32:
27:ee:0f:8a:a9:3d:50:70:ef:82:35:07:82:d4:14:
d4:49:37:75:51:a6:eb:d1:ca:07:ac:4d:df:aa:a7:
6b:b5:d1:12:06:3c:9a:0e:79:9a:47:32:c4:ad:5a:
9e:21:04:20:5c:5b:19:2b:cd:87:c5:60:cd:b0:a6:
d7:12:ff:97:27:a2:b2:fe:1c:47:19:e0:08:34:f9:
d8:23:0c:7d:e2:7c:68:97:8d:7c:0f:3d:6c:cb:87:
10:0e:fd:a8:e1:a0:8f:7e:b9:01:6e:3d:1f:25:35:
6b:fb:1c:1c:a5:56:df:ed:cc:d3:a3:9e:f8:7b:ce:
cb:19:e0:c2:4f:6c:bd:1e:56:2c:98:a8:52:13:e2:
80:17:76:f5:b2:17:00:58:7e:c6:cb:8c:a9:21:e4:
2d:76:80:8b:d8:8c:4a:24:4e:d2:32:c8:1a:37:18:
7f:62:87:ef:03:34:69:fe:8c:b7:6d:a2:c2:36:b2:
1d:f1:14:bc:03:ed:33:9f:9f:89:a3:93:03:c8:52:
eb:c1:0b:65:39:c7:20:f7:2e:43:04:5d:c3:55:21:
f1:5a:d5:4f:7e:fa:69:39:5a:7a:d2:3f:3b:50:82:
40:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:1C:74:5C:47:A3:38:49:53:1B:CF:DE:FC:F0:25:3C:2C:D2:D0:39
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/uBx0XEejOElTG8_e_PAlPCzS0Dk.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
85:df:36:ab:ee:d0:2a:4b:3c:09:0f:78:f0:1c:c5:a4:4e:ca:
ed:01:20:1a:85:f2:39:84:11:e2:0a:f3:de:67:67:a1:61:91:
d2:90:a1:f1:11:d0:d0:38:5c:8a:c7:1d:58:b0:cd:a7:e1:17:
86:60:ef:37:a4:53:b8:48:0e:65:f3:5e:68:9f:8b:ea:b8:04:
3c:41:ed:a0:86:65:7c:39:1a:75:85:04:4d:14:2a:18:5c:bd:
b5:c9:84:43:7a:3a:fe:4c:47:48:fa:e9:13:23:10:1e:0c:86:
2f:b8:ae:96:eb:78:70:89:50:ee:12:bb:50:5b:4d:4b:8f:16:
2c:48:7a:b6:3e:f2:36:40:4e:58:b3:0a:bb:0b:af:70:b1:08:
9b:16:cb:94:11:2e:a9:ed:0a:98:23:47:07:9d:97:f6:8b:a5:
67:8c:ce:f4:6a:02:a3:8a:c0:c1:ac:92:31:ce:57:66:dc:26:
b6:18:8d:72:a2:db:3f:7a:85:a6:a2:4f:fe:e2:14:c0:6f:e8:
2e:2b:43:ad:9d:09:f4:fb:d9:f8:4f:02:0b:2c:47:5d:db:d2:
b7:2e:a9:d9:0d:25:57:11:3f:01:77:4d:94:d0:ff:cb:f8:c2:
c4:8a:47:b8:df:52:0d:3f:e7:6f:59:4d:a2:05:7b:03:ae:32:
a2:44:c2:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:55 2024 by rpki-client on console-fra.rpki-client.org