Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/zgkyfgEkgZbWFJAjy22TAX-xW10.roa
File: zgkyfgEkgZbWFJAjy22TAX-xW10.roa (raw, json)
Hash identifier: lA5CENivZE7eIkI//gZK+j/NZhATxXZhYJayq0ueg+U=
Subject key identifier: CE:09:32:7E:01:24:81:96:D6:14:90:23:CB:6D:93:01:7F:B1:5B:5D
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 04E7
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/zgkyfgEkgZbWFJAjy22TAX-xW10.roa
Signing time: Thu 27 Jun 2024 15:55:02 +0000
ROA not before: Thu 27 Jun 2024 15:55:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 27 Jun 2024 19:55:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1255 (0x4e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Jun 27 15:55:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=CE09327E01248196D6149023CB6D93017FB15B5D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:cc:d7:a9:b6:1c:73:89:fb:48:a9:91:f5:c2:
99:eb:a0:3e:de:a0:b9:c0:b4:d3:ce:7b:0c:78:5c:
83:6d:9a:e6:14:4d:df:dd:a4:66:31:9f:8b:96:06:
1e:3e:02:0b:f9:28:5d:09:e2:df:c9:e8:72:04:7a:
14:e2:97:ec:f6:a2:ec:9b:e2:8e:7b:86:a9:a7:b1:
8b:d5:3a:95:14:8c:2c:e7:45:80:d5:7b:a0:18:e3:
48:ec:5f:bb:ff:9e:fb:b7:eb:20:17:33:3f:c9:c2:
e1:ac:17:60:b1:0d:d4:f1:2e:a3:7a:8d:4a:f5:2b:
26:60:28:cc:01:a8:47:75:b4:0b:b0:fa:2a:5a:9e:
52:91:39:c6:af:f5:d5:6a:3e:ea:6e:1e:bb:d7:3e:
78:a9:df:da:68:e3:ff:00:af:d6:31:9c:7a:5e:29:
f7:62:97:a0:9d:20:8d:22:bc:77:9a:d9:00:dc:04:
2d:e0:1a:00:03:f8:27:11:98:ce:7b:8e:b9:e9:e9:
56:75:6c:83:81:85:3e:f5:7f:11:b7:af:14:95:fe:
90:c6:14:32:a0:0b:04:05:94:1e:b2:61:49:60:ed:
07:6d:50:b7:66:5f:78:de:7c:d8:6d:12:ae:53:e7:
fb:29:cf:4e:ff:50:7c:b5:80:08:0b:9e:e2:7d:e2:
50:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:09:32:7E:01:24:81:96:D6:14:90:23:CB:6D:93:01:7F:B1:5B:5D
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/zgkyfgEkgZbWFJAjy22TAX-xW10.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
48:61:27:8e:06:88:bf:20:5c:ec:49:7e:66:61:f6:66:bc:f1:
05:1d:de:11:fd:64:37:1c:58:3a:f6:a8:c1:fb:fb:b4:e8:ec:
82:c4:b0:22:1e:20:77:a4:88:57:45:45:ec:25:71:42:56:ab:
c3:24:7f:fd:8a:8c:35:71:9b:2f:91:07:7a:db:30:f8:8c:3a:
fb:4b:6e:55:e4:0b:c3:33:c2:0d:d0:51:46:76:b6:6d:c0:a5:
70:88:28:73:05:fb:19:dd:f7:e8:57:51:45:8e:f6:af:36:4c:
ec:cb:03:70:07:dc:af:ea:ed:0d:dd:73:7a:0f:25:b4:f3:d3:
ec:c2:5c:dd:97:fb:b9:ba:b4:93:d5:d3:5b:2c:94:62:09:cd:
61:bf:c1:69:9a:05:db:56:67:d5:ac:63:d3:13:f2:26:aa:f5:
d2:39:a1:19:7f:f1:54:94:5c:47:07:8c:bc:47:ca:9e:26:f8:
de:55:83:c7:66:f7:91:e5:3b:08:ec:6f:72:19:e3:a9:99:df:
87:c0:83:ae:0b:7a:99:0d:c9:a3:c1:ea:5f:dd:8d:ca:78:8c:
d2:9e:8a:e4:09:78:7e:a4:9c:10:49:dd:8a:87:df:ed:70:d4:
79:cf:00:75:34:7c:b3:fb:8f:55:46:61:03:e3:a9:64:61:b2:
35:41:1f:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 00:01:36 2024 by rpki-client on console-fra.rpki-client.org