Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/09sHvt78ohTg6X8f6vXGFJ94P8k.roa
File: 09sHvt78ohTg6X8f6vXGFJ94P8k.roa (raw, json)
Hash identifier: 8Q0ZQnxPsP8EQ+1p/FtWb6JBr8a1VP5uM9sJZjWx7Nw=
Subject key identifier: D3:DB:07:BE:DE:FC:A2:14:E0:E9:7F:1F:EA:F5:C6:14:9F:78:3F:C9
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0980
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/09sHvt78ohTg6X8f6vXGFJ94P8k.roa
Signing time: Tue 05 Nov 2024 07:55:03 +0000
ROA not before: Tue 05 Nov 2024 07:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 05 Nov 2024 11:55:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2432 (0x980)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Nov 5 07:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=D3DB07BEDEFCA214E0E97F1FEAF5C6149F783FC9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:66:7a:54:a8:d5:74:22:4a:a5:9c:e2:39:48:
4c:d4:60:e7:78:a0:67:3d:d0:83:4a:ee:89:7f:ab:
91:10:97:6d:3c:f9:01:47:b1:53:97:b9:6b:e6:33:
95:04:05:93:d9:8c:f3:da:bc:80:56:0a:5a:56:0c:
bf:b8:b7:ae:ba:dc:55:e6:70:dc:f0:ac:c0:da:02:
66:25:6d:dd:17:bf:6f:91:1c:8c:21:f9:ee:a8:1e:
46:07:46:09:bc:dd:e2:ee:c0:2e:73:ea:12:f6:50:
93:6e:44:61:c1:a6:cc:14:f3:89:18:7e:14:28:5e:
9d:17:c1:da:f2:02:83:f0:95:46:95:fa:4b:84:9d:
28:66:77:35:bd:1c:f2:64:22:29:59:ee:0c:87:38:
0b:e4:46:43:55:b8:1c:83:b3:7c:61:22:7b:38:56:
30:e1:69:b7:0b:33:0a:ac:58:72:b9:ae:76:3f:21:
d5:83:30:c5:97:d3:6d:ef:dd:6c:b1:c6:fd:d4:82:
83:10:5a:de:67:0f:71:f1:a4:be:aa:5f:e8:98:6b:
7b:e7:8c:77:2e:f1:a0:57:f7:6d:e1:63:4a:71:a8:
79:0c:d8:44:9c:5e:c9:4b:fd:49:a2:f6:0b:de:88:
d8:bf:95:24:94:ec:3b:d3:02:ed:d3:5b:be:a7:c9:
31:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:DB:07:BE:DE:FC:A2:14:E0:E9:7F:1F:EA:F5:C6:14:9F:78:3F:C9
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/09sHvt78ohTg6X8f6vXGFJ94P8k.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:13:1a:21:28:ff:11:7c:f7:53:d6:93:aa:51:fb:a4:88:d2:
7a:f5:d0:13:ad:05:b7:7e:be:15:21:67:b7:cb:3b:8c:9e:46:
82:fb:90:22:8a:df:9a:86:24:d5:34:88:1b:ba:12:ee:80:34:
04:9e:b4:45:f3:00:25:41:55:1b:ee:c1:7c:60:b3:a2:d6:c0:
89:d5:ef:3e:27:19:36:26:b4:1f:a5:b8:05:7b:93:72:29:c7:
c9:34:49:c4:38:27:a2:2d:57:20:dc:0e:5b:16:a3:e0:87:a0:
e6:34:33:14:8b:ab:21:73:66:df:d1:99:5c:57:9f:37:e9:6f:
e0:df:cf:a3:a3:be:70:f1:ef:78:71:03:c2:d1:58:38:04:f5:
06:d7:05:79:d7:6e:83:d3:77:15:1d:9e:0e:1d:0e:68:8a:d0:
56:48:99:7e:27:92:1e:f2:7e:9a:3c:2f:89:24:62:a1:c6:31:
ac:f2:bb:17:2b:89:49:6e:19:14:46:5f:46:c5:c5:22:cb:73:
c4:30:41:9f:73:29:d2:1b:f3:d1:96:9b:d0:6f:af:4a:b6:7f:
76:4e:6f:bf:30:94:20:92:dd:ac:7e:56:81:ce:35:9d:48:a6:
d6:29:26:13:1c:aa:ca:9a:75:05:f9:b6:1c:18:72:38:26:2c:
48:5a:47:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 5 16:38:32 2024 by rpki-client on console-fra.rpki-client.org