Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/xiNc1eBB5Mf_XKpoqtCluc3ofrs.roa
File: xiNc1eBB5Mf_XKpoqtCluc3ofrs.roa (raw, json)
Hash identifier: kjJAAmH2IJtfp6LoBdkTfufwM3V9o+IdAnpfGh5K1Fk=
Subject key identifier: C6:23:5C:D5:E0:41:E4:C7:FF:5C:AA:68:AA:D0:A5:B9:CD:E8:7E:BB
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 06C4
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/xiNc1eBB5Mf_XKpoqtCluc3ofrs.roa
Signing time: Mon 19 Aug 2024 15:55:03 +0000
ROA not before: Mon 19 Aug 2024 15:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 19 Aug 2024 19:55:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1732 (0x6c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Aug 19 15:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=C6235CD5E041E4C7FF5CAA68AAD0A5B9CDE87EBB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:3d:d4:b5:e6:7b:13:a1:3c:fd:3c:4b:12:85:
cb:a1:a0:f2:f5:50:d1:75:4b:31:6f:31:f6:e8:89:
a5:c6:bc:55:7a:eb:4c:5f:18:c0:2b:ae:00:ae:31:
92:a9:56:c6:30:a1:36:fa:5b:61:78:25:00:f0:37:
fd:e2:22:d9:ee:a5:31:4d:8a:7d:8f:29:c8:67:95:
34:f6:46:ee:12:2f:ae:30:45:de:dd:94:c2:4a:31:
ac:35:98:0a:b9:53:ad:37:00:b1:20:b8:94:ed:5e:
b7:cb:0c:7e:97:11:6e:23:ea:93:6e:78:aa:31:11:
44:38:6a:a9:8d:24:97:1c:fe:e5:0c:dd:7c:24:bf:
f0:ef:79:6d:46:88:17:33:fa:2f:5a:21:04:25:60:
ad:8f:e1:67:10:85:96:96:25:4c:1d:d7:da:35:2e:
92:4a:25:5d:f1:95:66:64:0d:a4:12:30:cf:97:f6:
b3:af:4d:bb:fd:62:6c:72:8e:79:db:00:29:7d:5f:
e9:cd:c7:4d:32:f5:3f:34:01:63:66:8c:fb:a9:37:
07:d8:26:53:98:70:bf:d8:55:b6:be:6f:62:a2:c2:
96:20:38:4e:cf:c1:cc:cb:5b:ad:0e:17:32:d4:4e:
ad:8b:6f:62:e5:ef:58:f7:fa:a0:c9:b1:a2:b6:04:
8e:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:23:5C:D5:E0:41:E4:C7:FF:5C:AA:68:AA:D0:A5:B9:CD:E8:7E:BB
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/xiNc1eBB5Mf_XKpoqtCluc3ofrs.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:99:29:ed:a7:93:ba:af:c0:93:6a:c6:db:a6:a1:25:1d:73:
13:5d:6d:d7:9b:63:67:71:26:38:4b:46:f1:ab:a6:d9:e0:16:
b8:bc:70:62:47:71:e9:2a:10:ff:5d:4d:88:14:af:27:05:13:
7d:8a:37:af:40:1b:e1:cb:07:6d:8c:9f:f9:31:c2:d6:ff:b2:
0a:f0:d0:c9:c9:64:c3:bf:d2:96:5b:6d:03:ba:f0:3a:6c:fb:
ee:c6:ef:a7:e9:b4:3d:6e:3a:b5:dc:ed:ad:c7:59:05:f8:e7:
04:20:11:67:9f:b3:c2:3e:aa:8f:c3:19:b7:b3:45:aa:05:b4:
62:da:21:13:25:c4:c4:98:35:df:03:3d:40:aa:89:2d:59:1b:
7d:b9:70:a5:13:e1:43:ab:9f:9c:b9:ce:a2:83:3a:5b:ea:3d:
c0:7e:c4:3d:40:f7:94:6f:8c:d4:d3:12:6e:a4:f4:aa:de:f0:
08:14:82:e3:c4:4f:f2:45:36:d0:ac:2d:db:81:c8:33:f0:ad:
21:43:fe:95:d6:95:99:fd:7b:ab:91:a1:84:5a:68:02:1d:c7:
34:cd:58:84:bf:44:ad:a0:5b:c3:d9:5c:73:0f:dd:f6:6e:a3:
c0:8f:7e:c4:65:c8:4e:2b:9f:e3:f1:f0:0d:00:78:be:3b:2e:
d9:07:78:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 19 23:30:22 2024 by rpki-client on console-fra.rpki-client.org