Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/6dv3c-OW42nh_jUoZN_aXucX3po.roa
File: 6dv3c-OW42nh_jUoZN_aXucX3po.roa (raw, json)
Hash identifier: Fp5gYRl3wSVLKtHN5aA8/rwvA2f9S+UCuXSR2aszO6g=
Subject key identifier: E9:DB:F7:73:E3:96:E3:69:E1:FE:35:28:64:DF:DA:5E:E7:17:DE:9A
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 075A
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/6dv3c-OW42nh_jUoZN_aXucX3po.roa
Signing time: Thu 05 Sep 2024 07:55:04 +0000
ROA not before: Thu 05 Sep 2024 07:55:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 05 Sep 2024 11:55:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1882 (0x75a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Sep 5 07:55:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=E9DBF773E396E369E1FE352864DFDA5EE717DE9A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:cd:20:37:e4:82:45:96:69:8a:54:06:49:c8:
51:72:8c:e6:3a:97:84:d4:37:c9:64:2d:8c:6d:6e:
fc:75:08:8d:f6:54:03:39:ab:9c:94:8a:75:48:4c:
a7:c2:3a:7e:ef:97:41:1b:b5:39:58:d6:5a:f7:74:
62:66:11:6b:73:ef:f3:9b:1b:0a:37:a3:55:6c:74:
39:50:b3:06:8c:73:51:b2:12:1a:ed:99:8d:57:f3:
03:3e:25:0f:e7:6c:93:b9:de:7f:c9:1f:f0:08:6c:
53:80:d9:df:9c:70:fc:bb:fc:2a:9f:91:62:3c:8d:
73:ae:c5:cc:01:24:61:88:88:d2:c4:99:cd:fc:ab:
ca:64:91:2e:53:14:97:d4:5f:b6:24:a1:57:ce:68:
9b:af:e3:85:29:95:ba:44:c8:3e:d5:f2:a9:c1:80:
1e:d2:b8:0f:b3:bf:cd:d4:b2:67:43:f1:1f:4b:3b:
ef:0d:de:69:8d:ae:5f:8d:56:c6:84:6b:0d:ab:3f:
24:f5:25:3f:5c:60:15:b1:c3:05:09:72:e2:b4:e1:
02:52:90:a3:68:58:86:22:8a:9a:59:56:7c:8f:4d:
26:d3:e2:a3:fc:7b:be:83:60:74:ae:34:37:9e:bd:
28:3a:37:9e:16:db:97:0d:10:15:87:71:ee:7c:30:
4d:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:DB:F7:73:E3:96:E3:69:E1:FE:35:28:64:DF:DA:5E:E7:17:DE:9A
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/6dv3c-OW42nh_jUoZN_aXucX3po.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:40:9c:58:c3:02:5a:98:3a:42:24:a5:42:ac:5c:00:ff:4a:
52:e0:4c:0c:5d:ac:cc:35:2e:c2:d9:1f:e7:8f:b3:f3:13:f8:
9b:11:47:f0:a2:28:09:c0:b8:2f:33:fc:df:e0:ee:7b:0f:95:
f8:89:ab:3f:e6:fc:1c:3a:2c:45:9a:c8:b0:f5:03:c6:7b:f8:
79:f8:7a:78:99:5a:8e:d2:25:fc:d2:f1:e7:d2:37:eb:df:b5:
4c:92:0b:20:d3:a3:8b:87:38:3f:0a:83:8a:4f:5e:51:8e:e1:
c8:bc:b8:53:37:52:0c:4e:0b:d1:09:9e:0b:96:32:55:10:54:
d7:33:fa:c6:5c:b6:9d:d2:a4:7d:39:5b:59:43:9e:73:06:80:
f7:0d:a4:fa:d4:b3:45:41:39:ae:24:e0:98:5e:e5:1b:46:2e:
61:e8:c8:0d:0d:47:ec:2b:bd:b8:7b:77:46:d2:af:22:f8:f5:
19:ab:01:10:78:3b:8c:4e:9d:71:04:2d:1a:6a:9e:1f:af:63:
e2:97:b0:20:14:d5:0e:51:e4:65:d0:85:06:0f:e3:b5:25:87:
01:9a:c9:32:6d:e5:92:e5:5f:ae:67:4c:18:49:48:c6:71:94:
a3:88:de:74:54:fa:6d:cd:b9:5e:98:3c:45:89:5d:ee:d0:9f:
59:c0:cd:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 5 14:38:41 2024 by rpki-client on console-fra.rpki-client.org