Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/uIrqd7KhXi7VrTT7NfHa3SujN7U.roa
File: uIrqd7KhXi7VrTT7NfHa3SujN7U.roa (raw, json)
Hash identifier: RT7jarCCdKtmkrv9Sg21BhGngRK27bTjFcV0fblnHgE=
Subject key identifier: B8:8A:EA:77:B2:A1:5E:2E:D5:AD:34:FB:35:F1:DA:DD:2B:A3:37:B5
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0382
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/uIrqd7KhXi7VrTT7NfHa3SujN7U.roa
Signing time: Sat 18 May 2024 23:55:04 +0000
ROA not before: Sat 18 May 2024 23:55:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 19 May 2024 03:55:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 898 (0x382)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: May 18 23:55:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=B88AEA77B2A15E2ED5AD34FB35F1DADD2BA337B5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:2d:6c:fe:de:e0:71:82:e9:9c:89:d2:01:9a:
2b:81:34:fb:93:2e:03:89:fb:65:15:85:53:a7:50:
3d:bb:27:0e:d9:45:7b:65:c2:5a:53:7c:61:34:4c:
e7:e2:df:06:23:15:e5:9c:65:82:81:60:61:05:d4:
99:7d:ed:96:a9:a6:a4:04:18:91:19:19:e8:d1:65:
88:0b:20:22:f2:3c:d6:49:43:f1:d0:30:c2:24:1d:
e8:74:d4:00:4d:5b:9e:13:06:22:a8:f6:cc:c8:a3:
79:b0:4f:82:c2:ca:b9:9f:a2:0b:3d:a6:da:5f:a4:
51:64:39:d3:eb:88:1a:11:1f:e6:79:55:33:af:9b:
b7:a2:0d:94:bf:3a:47:67:56:b5:ce:d0:37:51:86:
27:de:35:83:bf:34:97:b0:c8:81:00:9f:1f:44:fb:
f1:5b:30:08:5b:25:d2:8b:39:99:d4:98:8d:8a:e3:
a6:28:63:2a:e4:7c:70:e3:33:97:8f:54:9e:e8:ee:
47:00:c6:3f:30:63:44:88:75:ad:ae:48:d2:4f:6e:
6f:61:5c:09:df:16:fb:b9:a5:e5:0c:c2:6d:90:f1:
2e:92:84:55:b4:6f:53:bd:77:f8:fa:a1:b2:23:b5:
bf:1d:cd:9b:b2:54:59:c1:8c:e5:07:09:98:86:fe:
c7:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:8A:EA:77:B2:A1:5E:2E:D5:AD:34:FB:35:F1:DA:DD:2B:A3:37:B5
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/uIrqd7KhXi7VrTT7NfHa3SujN7U.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
28:03:ed:b6:5e:67:50:5b:b2:e6:f7:e5:73:e9:44:df:62:d5:
69:8c:54:cd:54:d1:bc:f7:d7:19:bd:46:3c:35:cf:f8:20:61:
ef:a5:b9:fb:ef:e3:cc:10:f4:b3:f9:f5:7c:cf:c1:4f:b1:5e:
ef:1c:e8:35:8f:5d:88:f2:78:d2:b5:33:41:31:b6:09:10:9c:
58:7b:1b:be:78:63:37:a2:e1:8b:e0:37:ed:49:b5:24:b0:ca:
47:67:a6:00:5e:59:5c:dc:92:3a:1e:e7:e7:11:5a:98:e8:d3:
35:56:22:2f:ce:3d:83:bb:38:06:92:09:7d:9d:63:77:ad:b1:
f0:85:e2:fc:0e:85:25:ae:e3:49:4e:35:19:07:55:3b:03:ce:
f6:15:3f:95:06:26:9c:72:3a:bf:05:63:66:4e:ae:3f:7c:a0:
22:65:01:a0:2b:8d:f8:51:13:ab:2c:3f:39:b7:90:7c:93:32:
c9:1b:2d:76:c0:c5:0e:56:22:11:90:97:32:d1:79:7c:82:8b:
a4:78:12:f4:46:ca:86:2c:55:60:2a:27:26:79:e0:84:48:75:
c9:bd:48:c5:f3:32:dc:83:06:0c:bd:17:02:e7:80:46:b8:dd:
4c:3d:be:39:b4:10:43:54:03:ba:49:c2:60:19:d1:43:a7:c8:
74:0f:e0:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:55 2024 by rpki-client on console-fra.rpki-client.org