Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/zHMaqOpvD8W95MSZKHkXhCrlewI.roa
File: zHMaqOpvD8W95MSZKHkXhCrlewI.roa (raw, json)
Hash identifier: TU5oG0EZevgDaimC4UypzQwfIuQiq79HA/SxwpZ7kGw=
Subject key identifier: CC:73:1A:A8:EA:6F:0F:C5:BD:E4:C4:99:28:79:17:84:2A:E5:7B:02
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 08BC
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/zHMaqOpvD8W95MSZKHkXhCrlewI.roa
Signing time: Mon 14 Oct 2024 15:55:03 +0000
ROA not before: Mon 14 Oct 2024 15:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 14 Oct 2024 19:55:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2236 (0x8bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Oct 14 15:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=CC731AA8EA6F0FC5BDE4C499287917842AE57B02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:78:84:6a:6c:95:42:45:00:3c:e0:b4:42:46:
8b:2e:fa:b0:75:9a:b8:54:2d:cc:64:65:86:51:5d:
1c:b4:a5:39:8d:af:de:c4:67:dd:a1:a1:97:48:5c:
8b:e8:e8:58:70:16:ba:4b:47:f4:bf:0d:c8:02:5c:
8c:e3:00:b0:33:69:19:5e:f6:b2:be:4a:55:20:b1:
76:2b:d0:87:6d:c0:ec:ef:de:31:e4:29:9b:84:9a:
62:99:d7:ef:0b:3e:b4:6b:25:82:4f:25:c3:3e:19:
4c:6a:90:bb:19:15:41:c4:e8:8a:9d:e5:b1:b1:0f:
aa:a2:55:06:8a:47:0e:35:26:9c:53:1a:38:d1:94:
28:4d:74:e2:ad:a5:5d:38:40:d2:84:fd:fc:a5:33:
5b:ee:e7:67:d9:e8:d3:5b:dc:46:31:43:a0:80:40:
d6:ff:18:1d:32:a8:35:47:2e:b4:a0:aa:35:3c:f9:
a9:a5:d0:37:97:2e:ae:7a:2b:84:c8:0b:1f:4f:dd:
77:e3:41:5f:f1:e3:e3:89:f3:2e:fe:00:22:42:df:
65:03:fe:4e:29:f6:14:78:cf:d3:6b:09:b1:33:bc:
70:f2:06:55:f7:4d:e7:ff:06:45:8d:3b:6e:e9:e7:
13:49:fb:7e:58:ac:8e:8c:62:2f:be:f1:8e:53:3e:
d2:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:73:1A:A8:EA:6F:0F:C5:BD:E4:C4:99:28:79:17:84:2A:E5:7B:02
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/zHMaqOpvD8W95MSZKHkXhCrlewI.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:a4:b8:be:fa:24:62:ac:b3:98:36:a6:62:25:2c:b1:8c:b2:
f1:c2:64:d8:ba:92:50:de:24:f4:69:57:5b:96:76:12:aa:92:
88:f5:6a:ba:23:c8:d4:0d:1e:0c:72:40:03:f9:c1:fe:25:fa:
fb:fa:84:bc:f2:da:aa:1a:42:22:bd:f2:c8:83:a4:ff:2d:93:
79:b4:41:82:67:12:01:10:d3:40:22:9a:6b:f7:39:ac:27:66:
82:d4:d0:fe:79:6d:ec:ab:a8:42:c6:6f:19:1b:0e:91:c4:cf:
8f:e2:23:c7:39:5c:e5:9d:89:04:19:a8:94:38:f9:ab:d3:aa:
04:88:2d:ea:49:f6:61:50:2b:c3:42:aa:df:8f:6b:37:a5:8d:
ba:68:cf:26:c0:d7:5b:b0:ed:74:03:9d:c5:b9:40:87:00:94:
14:09:48:8b:87:4b:08:99:0d:30:3a:7f:f3:bc:70:92:e6:59:
db:a9:50:a4:69:31:0c:b5:69:16:da:7b:47:04:22:a0:c4:ea:
aa:3a:df:14:21:a8:6f:ff:9d:f7:5d:4d:a9:52:ab:85:d3:4b:
01:56:bc:51:d5:fa:13:91:62:f7:e3:df:4c:39:78:a2:7a:62:
72:f7:99:19:c2:d8:82:02:16:a4:3d:67:47:d9:df:86:5c:6b:
1f:e3:e1:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 14 22:22:32 2024 by rpki-client on console-fra.rpki-client.org