Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/0nvpwwh5lTgEUmgtuy91OVCvp-8.roa
File: 0nvpwwh5lTgEUmgtuy91OVCvp-8.roa (raw, json)
Hash identifier: G1AuTywmFSs9Bp2qbksKcR5bo1S8xI1+8CHrx518O2M=
Subject key identifier: D2:7B:E9:C3:08:79:95:38:04:52:68:2D:BB:2F:75:39:50:AF:A7:EF
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 06FA
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/0nvpwwh5lTgEUmgtuy91OVCvp-8.roa
Signing time: Sun 25 Aug 2024 15:55:03 +0000
ROA not before: Sun 25 Aug 2024 15:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 25 Aug 2024 19:55:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1786 (0x6fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Aug 25 15:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=D27BE9C3087995380452682DBB2F753950AFA7EF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:10:5e:ed:40:14:74:78:e2:35:75:cb:b7:a0:
00:48:ce:1e:9f:b3:71:dc:e0:52:af:2c:57:f1:dd:
d1:0e:7d:e0:71:fa:8c:1b:ca:c0:cc:17:86:51:f4:
48:82:90:c5:60:24:ab:22:cd:5a:2a:7e:bb:13:93:
ea:77:91:bb:a1:c0:97:ac:2a:c4:8b:ea:3a:2b:d6:
98:04:11:82:8a:a2:65:7f:e9:69:22:ed:e1:96:1d:
6d:38:26:d5:d2:d3:39:b1:18:9b:0c:3c:91:74:05:
e5:85:57:4c:33:08:e8:22:c5:24:97:7d:bf:37:98:
3d:dc:74:c4:92:f2:53:4f:3b:2d:46:35:25:03:ec:
a3:69:86:6b:63:f5:36:cc:e7:b5:95:f6:7e:01:25:
7f:99:cc:de:41:84:2f:19:af:06:ee:6b:08:98:d8:
0d:10:4c:1a:ac:3a:3e:ea:8d:bb:24:28:01:1e:8b:
a6:e6:f6:56:cd:fe:88:f8:c6:3f:12:36:b6:02:4a:
c5:75:08:f3:e7:a0:f8:c5:58:df:96:85:e5:02:37:
ee:84:70:b8:19:90:da:c5:29:f7:37:c9:57:e4:7c:
9e:9d:f0:38:94:98:f6:52:34:31:c5:5c:52:74:ad:
c6:c2:89:a2:49:07:1f:f6:8d:cb:0f:48:e3:ee:16:
2e:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:7B:E9:C3:08:79:95:38:04:52:68:2D:BB:2F:75:39:50:AF:A7:EF
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/0nvpwwh5lTgEUmgtuy91OVCvp-8.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:47:e2:fe:d0:a6:a1:ed:aa:1a:98:b3:e7:ea:4b:33:50:09:
93:d1:3a:3f:19:dd:8a:43:f5:a3:0c:22:50:1c:32:2e:47:3e:
c5:f2:3e:b8:89:2a:21:da:09:64:51:bc:90:b5:a2:b3:46:61:
7f:7e:43:84:f0:53:ec:1e:62:99:e6:d7:b9:e4:01:7b:db:01:
d2:8f:e7:48:0b:9f:60:11:34:86:0b:cd:c7:a2:a9:2f:51:d8:
fe:d3:38:66:46:17:02:7a:61:b6:b1:8a:93:a9:62:79:a6:52:
68:67:26:98:3c:b9:c0:ae:0b:df:df:17:b2:8e:04:7a:34:eb:
53:5b:4e:d1:b5:15:b9:8c:82:90:50:99:2b:06:0c:89:17:c1:
d5:92:41:62:1e:d9:3c:df:9d:e6:f5:80:85:3b:3b:91:54:41:
62:96:a1:97:a2:d6:f7:84:a2:80:ca:88:72:35:9f:d0:bf:99:
68:bf:ee:0a:fc:74:36:4f:29:a4:6f:a0:d1:de:1f:a0:35:73:
70:e3:1f:db:59:77:b3:c1:74:7d:50:b6:e0:01:83:bc:46:44:
74:44:b0:4f:3e:71:dd:9d:f8:aa:36:05:29:32:0d:29:c6:a3:
a1:a7:d4:37:b4:63:96:70:5b:b8:e4:df:62:df:62:11:fe:63:
52:01:c0:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 25 22:19:59 2024 by rpki-client on console-fra.rpki-client.org