Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/JyVxG_XxE5xaZaMhIqOZPdjQB1s.roa
File: JyVxG_XxE5xaZaMhIqOZPdjQB1s.roa (raw, json)
Hash identifier: ebgYISY/BctEzQ6Da6yYzZx/CVsPbmA73XGWQhK3NrE=
Subject key identifier: 27:25:71:1B:F5:F1:13:9C:5A:65:A3:21:22:A3:99:3D:D8:D0:07:5B
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 064C
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/JyVxG_XxE5xaZaMhIqOZPdjQB1s.roa
Signing time: Tue 06 Aug 2024 07:55:04 +0000
ROA not before: Tue 06 Aug 2024 07:55:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 06 Aug 2024 11:55:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1612 (0x64c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Aug 6 07:55:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2725711BF5F1139C5A65A32122A3993DD8D0075B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:dc:09:28:2e:2c:1b:3a:21:ea:18:c0:7a:8f:
69:4b:1f:4a:1a:df:38:57:d4:74:0b:a2:35:45:3f:
14:21:27:90:84:4f:f9:83:81:0e:9e:5e:14:3c:20:
a1:fa:00:8d:df:0d:ed:00:3a:c9:3d:40:57:e9:4e:
22:6c:f9:c0:d8:af:34:d3:a9:77:6d:b0:2d:68:c7:
c8:6a:16:c1:6f:1c:06:84:a2:7a:9a:b7:a1:05:41:
d9:2d:32:63:9a:30:ef:cc:3b:2a:2d:ee:af:ad:cc:
d6:fd:ad:1c:cd:70:aa:40:97:c7:d3:f4:62:f3:0b:
c3:87:9b:ff:3e:22:b5:fb:ce:01:29:a7:31:ac:42:
98:a2:64:b7:95:5d:a5:9a:12:ff:b5:3f:6e:44:e6:
a4:87:c3:a8:44:aa:c9:3f:76:fb:b6:40:14:7f:16:
15:8a:cd:10:e2:0c:ef:05:00:02:b2:3d:f8:4e:8c:
82:fa:9e:2b:09:fc:34:53:4c:58:42:c8:1f:a1:0e:
50:17:af:98:3f:0d:cc:78:c2:7e:ba:fb:24:7b:ec:
26:8e:9c:41:48:ba:25:b3:a1:c7:ff:f5:94:92:da:
a7:e7:5e:51:8f:5f:c4:bd:ae:8a:4f:72:40:ff:87:
fa:02:19:8e:3d:8d:be:e8:8a:df:4e:d4:cd:d3:b7:
e3:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:25:71:1B:F5:F1:13:9C:5A:65:A3:21:22:A3:99:3D:D8:D0:07:5B
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/JyVxG_XxE5xaZaMhIqOZPdjQB1s.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:15:4f:2b:02:09:99:78:41:da:e9:83:af:28:da:17:81:12:
ce:05:44:32:19:df:4d:83:c6:77:7a:7b:4c:96:9d:f2:ff:b5:
5d:42:9b:61:57:55:4c:fe:78:e3:ba:d3:52:bf:2f:a4:f9:e0:
84:27:31:63:42:67:2c:b2:25:14:58:84:e9:24:5b:34:09:69:
a9:f9:77:67:2c:f1:0f:5a:c7:b9:b7:2f:43:be:05:ad:41:52:
5a:7d:9d:bb:7e:56:6a:e1:6b:98:15:02:fa:3d:c9:21:8e:e4:
92:f8:9a:ca:e4:a9:3f:64:e6:4d:98:2a:8b:45:2b:f1:86:77:
16:18:28:a9:f0:b8:f2:16:ad:7c:06:3f:cb:1e:d8:fb:cf:83:
be:6f:f9:e0:fb:f9:98:db:ff:a1:64:bb:6c:8a:5d:e4:55:9e:
c4:30:56:c8:ce:98:83:e3:3b:d2:c2:6a:80:a4:fe:95:63:aa:
b4:46:b2:50:f8:4e:30:ea:b4:54:66:7d:12:37:ce:41:36:b9:
07:10:01:2e:89:0b:b8:18:a8:f7:e8:81:a7:14:3f:8d:82:a7:
3c:fe:1e:46:7c:4e:f1:f5:c8:e1:e6:7f:04:30:8f:7c:0e:2c:
c2:69:5b:98:55:e5:65:d3:01:f2:9d:f4:20:09:10:25:d3:3e:
dd:9d:bf:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 6 14:11:17 2024 by rpki-client on console-fra.rpki-client.org