Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/v-3ClmVMqfdL4WH_dvr3gHe8Smw.roa
File: v-3ClmVMqfdL4WH_dvr3gHe8Smw.roa (raw, json)
Hash identifier: gF30BgKY+ZtKN3G2av97vTJHQJ3NKBo6InrUMBrcJUI=
Subject key identifier: BF:ED:C2:96:65:4C:A9:F7:4B:E1:61:FF:76:FA:F7:80:77:BC:4A:6C
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 09AD
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/v-3ClmVMqfdL4WH_dvr3gHe8Smw.roa
Signing time: Sun 10 Nov 2024 07:55:03 +0000
ROA not before: Sun 10 Nov 2024 07:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 10 Nov 2024 11:55:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2477 (0x9ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Nov 10 07:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=BFEDC296654CA9F74BE161FF76FAF78077BC4A6C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:07:99:21:21:32:6a:cb:33:86:d9:a8:f6:a0:
ef:c5:17:24:1d:e5:48:c6:d1:5e:c7:aa:4f:b6:18:
2b:7b:f3:53:30:ff:e2:e4:2d:e3:ca:da:0f:53:c7:
e9:4d:a5:8a:e4:42:a9:9f:60:b7:0a:7f:f3:22:26:
ee:a2:09:0d:9b:00:18:98:d1:ef:60:d9:5e:5f:78:
fe:52:c3:5a:f1:9a:b8:73:46:dc:de:0f:ea:44:88:
df:b7:da:b6:1b:a4:fb:a4:63:78:22:65:36:76:51:
5f:38:c5:90:6f:c3:02:d8:79:00:2b:2d:fa:d4:59:
41:15:b0:0c:33:f4:5e:6e:f1:57:28:1b:15:c6:00:
a0:94:7d:e9:a1:0a:63:4b:54:68:82:3b:02:0f:5e:
91:f4:89:05:e9:6a:67:67:79:e8:d0:f2:95:02:5b:
59:53:a6:d2:e2:e6:5d:21:2e:8c:2f:92:9e:9c:03:
dc:b6:c9:42:a9:f3:36:9d:8d:89:39:41:ad:9b:ee:
a0:04:75:b5:14:9e:a9:b2:1e:a8:f5:6c:4e:28:1f:
70:63:13:15:6e:ae:fc:c8:71:8d:10:55:bb:86:5e:
cf:43:bd:04:a5:b1:fa:94:64:e9:cf:58:00:6c:cd:
50:96:e4:43:2f:46:e9:e7:62:57:b5:54:5b:16:b1:
8c:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:ED:C2:96:65:4C:A9:F7:4B:E1:61:FF:76:FA:F7:80:77:BC:4A:6C
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/v-3ClmVMqfdL4WH_dvr3gHe8Smw.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
64:66:79:c2:a8:60:6d:42:28:e2:4d:f8:72:f1:e8:43:67:15:
09:06:43:be:4f:69:1a:39:4a:ac:7b:c3:45:e6:cc:99:32:ec:
15:2d:88:53:88:86:45:63:d5:92:6b:26:24:3f:2e:a0:41:e1:
0e:ba:83:2e:0b:7b:72:cb:60:01:94:2e:3d:95:6b:94:34:8d:
6e:2d:dc:7b:a8:b0:87:b6:cd:64:1e:87:ae:4c:c9:7d:60:ab:
4c:a5:82:99:68:74:6c:68:8e:d9:60:31:47:83:55:91:64:f9:
84:31:04:89:85:c1:02:5a:30:51:0b:0e:ea:f4:de:77:4a:9b:
f6:16:11:a9:a4:ee:6c:92:c9:00:fe:36:16:54:61:16:25:a5:
4b:71:d5:b1:0b:d9:13:e6:9a:4b:5f:6a:d4:19:82:14:84:65:
85:da:a5:d9:ac:26:6f:00:2e:0d:d9:86:4d:47:2a:d8:cf:eb:
a3:69:bc:1a:68:ea:be:61:0d:00:aa:b4:11:7f:2c:5d:a6:b5:
56:44:f6:52:10:06:d1:33:22:69:36:3f:1d:de:c1:66:c8:55:
c5:10:21:33:04:e6:74:e5:c2:fe:a0:6d:5a:82:3a:3e:e0:f5:
0f:e1:2f:20:69:e8:c1:b0:3c:42:96:cb:d4:0c:d2:bc:5d:60:
19:44:c9:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 10 14:05:01 2024 by rpki-client on console-fra.rpki-client.org