Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/F4PWMdySsGHUNvhyCe9HmPKR6JU.roa
File: F4PWMdySsGHUNvhyCe9HmPKR6JU.roa (raw, json)
Hash identifier: JDm5LWkB8S24nSMXiAUaS5xroGLwUMZ72dVIy7lJzL8=
Subject key identifier: 17:83:D6:31:DC:92:B0:61:D4:36:F8:72:09:EF:47:98:F2:91:E8:95
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 09C8
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/F4PWMdySsGHUNvhyCe9HmPKR6JU.roa
Signing time: Wed 13 Nov 2024 07:55:03 +0000
ROA not before: Wed 13 Nov 2024 07:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 13 Nov 2024 11:55:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2504 (0x9c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Nov 13 07:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1783D631DC92B061D436F87209EF4798F291E895
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:49:3d:34:f4:5b:17:63:39:57:3c:dc:dc:b1:
a5:8b:a8:3f:5d:33:d2:64:16:e9:2f:11:1e:e5:55:
49:4d:d0:25:f5:d5:ea:3c:19:b5:a0:ba:cc:de:05:
0e:81:b3:05:59:89:79:cd:a6:84:d3:f2:1e:70:0a:
31:e7:3f:8a:14:3d:df:b2:ba:a9:94:69:cc:80:f6:
7a:0f:e4:7b:81:66:81:5e:17:e2:32:7f:ba:b3:a0:
5d:ec:df:8d:9f:a3:90:a5:09:e1:7f:ba:67:4c:91:
06:01:74:9a:94:07:6f:bd:10:f3:f9:b6:ac:71:64:
06:a5:8b:ff:50:f3:05:fd:07:37:0d:b8:3e:1a:4e:
89:e6:b5:0b:31:8e:30:2b:79:2e:47:63:ba:60:6b:
c5:64:b3:6f:b2:f9:86:63:4c:02:8a:65:c1:aa:1d:
20:0f:ee:68:7f:0c:8b:d8:ba:7e:71:2a:10:62:29:
f0:2c:27:27:fc:85:92:3d:d1:4c:ba:43:39:96:54:
5b:73:6d:ec:dd:29:be:62:c9:0e:c9:ed:af:b4:77:
0f:96:7d:2f:a4:1f:1b:d6:fe:0e:a4:39:e2:44:a3:
a5:cc:af:24:2f:b4:11:7c:9f:13:36:1d:6e:a3:68:
a1:ca:8f:04:dd:f5:6a:4b:86:29:04:c4:2c:20:28:
57:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:83:D6:31:DC:92:B0:61:D4:36:F8:72:09:EF:47:98:F2:91:E8:95
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/F4PWMdySsGHUNvhyCe9HmPKR6JU.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
c4:5c:e8:2f:58:20:48:87:d3:37:4b:1f:fb:07:f5:0c:43:6b:
0c:b5:73:84:38:7e:03:eb:72:14:53:d2:f4:10:ef:0d:a8:0b:
1c:56:fc:a9:50:ca:ec:55:7d:ee:38:5c:ff:19:95:73:b4:fb:
4e:4c:35:d6:44:92:cc:9e:ac:70:62:53:f3:13:46:31:7c:a5:
f5:bd:c0:26:dc:df:c6:f6:93:d8:49:65:c9:73:31:57:0c:53:
62:24:9d:af:0d:9e:e7:e0:26:32:1f:36:df:af:18:4e:15:45:
f5:0a:8e:f8:d0:dc:01:b2:b8:56:2d:ca:94:af:5c:bb:bc:b9:
a0:ae:98:9e:33:a0:67:24:61:14:15:2e:82:11:00:1b:0a:ee:
4c:da:e5:7c:4e:6a:98:09:e2:11:f8:1b:43:86:4f:da:ca:80:
0f:a6:01:74:de:ae:e8:17:f4:c0:83:8c:ea:6a:3d:e3:88:85:
17:a7:0d:06:99:db:ad:7a:d3:c6:16:87:9c:4f:82:1d:d9:95:
ac:56:b9:0b:83:6a:a2:6a:75:34:61:70:86:52:29:8e:40:a6:
ef:42:f3:50:e2:47:0c:ba:3f:05:a5:48:0b:d5:3b:e8:3e:68:
3c:db:7c:5e:36:a7:e2:f2:a6:59:de:69:ce:01:fe:05:6a:98:
33:32:14:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 13 14:36:36 2024 by rpki-client on console-fra.rpki-client.org