Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/9K0zjJW9TbYDxx9u-ebO8qJzb80.roa
File: 9K0zjJW9TbYDxx9u-ebO8qJzb80.roa (raw, json)
Hash identifier: jNyQWQ2yh0QBMk7Rw9lFj1rAh41NTkKM6rTDagNf6yc=
Subject key identifier: F4:AD:33:8C:95:BD:4D:B6:03:C7:1F:6E:F9:E6:CE:F2:A2:73:6F:CD
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0A1C
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/9K0zjJW9TbYDxx9u-ebO8qJzb80.roa
Signing time: Fri 22 Nov 2024 15:55:02 +0000
ROA not before: Fri 22 Nov 2024 15:55:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 22 Nov 2024 19:55:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2588 (0xa1c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Nov 22 15:55:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=F4AD338C95BD4DB603C71F6EF9E6CEF2A2736FCD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ca:bf:1f:a3:77:be:ca:b5:3a:59:fb:74:68:
ca:b2:27:63:68:56:4e:f0:77:e6:29:be:bc:82:d6:
0d:b0:4f:fb:7a:ab:79:0a:67:2f:47:c3:3e:97:5b:
25:71:98:3d:67:4b:a7:5e:92:47:e0:66:c4:18:4a:
05:ac:53:9b:94:71:c9:4f:7a:22:22:60:aa:bf:81:
79:a6:d6:71:e3:31:b8:73:28:b7:0f:90:c4:ef:61:
31:21:cb:11:ac:40:b4:c4:33:83:49:d0:aa:e5:31:
f1:43:cd:20:78:77:72:47:9a:ec:31:8e:23:a4:76:
77:98:73:8c:db:91:c7:f4:b2:3e:9c:21:59:e9:94:
0d:79:20:51:a8:72:af:78:8c:a1:1c:43:df:a1:68:
cd:ff:d1:2c:22:d4:7b:79:90:68:aa:54:d0:1c:2f:
1d:cd:aa:0b:b7:c1:0e:95:0b:ac:c0:8d:33:cd:87:
94:d8:05:cb:cc:03:20:96:c0:a7:6d:4d:5d:a0:08:
67:2e:fc:df:88:51:91:ce:45:51:82:7f:09:1c:db:
8f:6d:02:2a:1b:12:d0:7e:0f:e3:36:c6:8e:bd:96:
ed:5d:61:22:4f:12:05:24:8a:55:5f:cf:f0:90:b3:
56:75:31:3b:98:03:05:c3:73:a2:ce:32:e2:2d:04:
cc:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:AD:33:8C:95:BD:4D:B6:03:C7:1F:6E:F9:E6:CE:F2:A2:73:6F:CD
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/9K0zjJW9TbYDxx9u-ebO8qJzb80.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:f0:3d:a6:ce:0f:51:10:c3:c4:59:90:0e:58:9b:d6:8f:a3:
25:37:d3:ed:56:ba:ed:f1:ed:3e:79:8f:a6:b4:82:f3:09:a1:
6d:f0:e6:16:33:6f:70:25:4b:7b:49:a6:e7:64:1e:3c:7e:08:
f5:96:bc:0c:ab:ee:ac:61:59:33:72:b9:a1:1f:f8:41:59:b5:
f8:b3:d1:ac:fa:3a:45:58:90:cf:6b:c2:8b:36:03:21:32:58:
e8:de:2e:83:40:40:8c:93:09:a2:4c:45:6a:dc:f6:97:0e:7e:
20:47:18:16:c1:79:06:58:71:ae:f6:4d:4c:af:c5:7b:f8:df:
89:b8:d9:66:7f:f1:39:47:52:f7:14:d3:b4:7d:6f:81:68:96:
cc:ff:3c:52:4c:f2:7d:82:5f:70:49:f3:f3:73:d9:c7:1d:c7:
c2:95:c8:19:e4:b8:ea:fb:0c:07:2b:5a:c5:24:36:a7:36:16:
e0:e5:dd:50:ff:3e:14:d8:a1:c9:37:94:a7:d9:45:db:b9:a3:
10:cc:82:a9:b1:32:d3:be:9f:40:25:18:ae:83:1f:53:1e:ae:
f5:1a:bd:41:b0:ba:81:03:ff:d4:61:ca:d4:ea:a3:cf:df:ee:
bd:02:1b:13:18:a0:c2:56:81:6c:de:f4:29:7f:86:e5:5a:d3:
e5:83:4b:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:36:00 2024 by rpki-client on console-ams.rpki-client.org