Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/wyhxpZBhfSFL1iWYO7Yj90UwY6k.roa
File: wyhxpZBhfSFL1iWYO7Yj90UwY6k.roa (raw, json)
Hash identifier: /acqZgOgFbLwzUjq2eGyvm55ozmypKSiy2ktXMUWM0A=
Subject key identifier: C3:28:71:A5:90:61:7D:21:4B:D6:25:98:3B:B6:23:F7:45:30:63:A9
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 098C
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/wyhxpZBhfSFL1iWYO7Yj90UwY6k.roa
Signing time: Wed 06 Nov 2024 15:55:03 +0000
ROA not before: Wed 06 Nov 2024 15:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 06 Nov 2024 19:55:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2444 (0x98c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Nov 6 15:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=C32871A590617D214BD625983BB623F7453063A9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:cf:30:5f:af:58:cd:4f:e1:7c:29:db:cc:b6:
71:8b:c9:d9:39:04:9a:b5:72:70:16:cd:b5:0c:7e:
19:b1:07:94:a8:ce:4c:ca:e3:21:c0:fb:59:9a:bc:
e7:ef:2b:f4:35:30:b2:e6:98:8f:02:5c:da:56:37:
0d:d9:2b:da:31:84:da:cc:12:19:58:78:3c:9b:39:
9a:19:b6:81:f1:f1:35:6d:5b:2f:ba:86:1f:15:8d:
5d:14:ca:c2:a3:31:0e:24:da:a7:5f:6e:15:c8:8d:
b3:11:9c:93:52:7d:1f:94:46:f9:e7:bf:a2:f5:87:
a0:f5:a8:a8:40:12:18:1f:56:bd:d3:f3:cd:9a:d3:
04:95:5d:33:6b:4c:2e:eb:89:5a:c5:15:c2:d3:d9:
db:bc:28:89:b8:ca:70:4b:cc:4b:9d:c4:f5:e7:e4:
58:60:48:89:53:49:dc:f8:6b:73:e5:d9:1a:9e:38:
b5:76:d7:99:7a:14:0e:1e:06:0b:e2:e5:19:b6:05:
57:7b:10:6c:3c:af:2f:ae:4a:07:4a:4e:2c:7a:3a:
6e:0e:dc:19:35:5f:93:a0:8f:0b:f1:48:7e:ee:4d:
3b:4a:1c:d9:4c:0e:0a:be:37:72:c8:49:b2:fa:2a:
69:6e:2b:be:76:69:16:1d:cf:66:03:2b:96:61:60:
86:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:28:71:A5:90:61:7D:21:4B:D6:25:98:3B:B6:23:F7:45:30:63:A9
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/wyhxpZBhfSFL1iWYO7Yj90UwY6k.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
c3:d3:d3:01:df:ee:0b:c0:04:93:78:44:b9:02:ad:9a:9d:8b:
d9:3b:1a:b3:01:38:67:da:b3:13:f1:24:bb:36:ed:80:f7:63:
7a:ba:05:2a:c5:87:9c:8b:c2:86:4d:e6:dd:dc:9f:0b:a7:62:
fb:3b:87:18:ee:47:41:ca:74:f9:85:14:9d:47:b4:b9:40:aa:
45:82:6d:db:1a:ce:9b:e0:d1:56:1a:03:b4:5b:79:ed:b9:17:
5b:c3:4f:79:47:18:78:3a:af:c5:4d:bd:f1:b5:67:90:07:de:
99:0b:50:5b:24:01:47:98:16:00:00:d7:fc:37:9b:15:96:48:
bf:48:4c:41:ea:c6:7a:12:b5:6b:f7:fc:f7:72:29:84:76:d2:
55:51:33:f4:9f:1c:d5:07:6e:d4:2e:39:d9:e9:0b:e5:41:7d:
47:82:93:71:c8:78:a5:09:35:f5:f5:91:29:3f:90:9d:94:47:
98:f9:9b:34:5e:e7:81:c5:12:e9:f4:d8:9a:82:72:46:70:b3:
c3:c6:33:94:36:46:46:b4:fe:9b:14:e2:ae:b7:01:32:1f:23:
80:e9:cc:a9:9c:56:c1:24:96:df:61:6e:be:2c:82:ef:fc:e4:
d5:de:04:79:eb:b1:4f:8d:62:da:73:99:34:95:3e:31:35:f8:
30:e9:1f:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 6 22:55:50 2024 by rpki-client on console-fra.rpki-client.org