Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/KpLVT3ibf6-sI-T2X9aQEU9o6LU.roa
File: KpLVT3ibf6-sI-T2X9aQEU9o6LU.roa (raw, json)
Hash identifier: sseXOyeyJDrRT17Ni1PM+Zf47gOIWdZCHqU9KpaVD6M=
Subject key identifier: 2A:92:D5:4F:78:9B:7F:AF:AC:23:E4:F6:5F:D6:90:11:4F:68:E8:B5
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 07B1
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/KpLVT3ibf6-sI-T2X9aQEU9o6LU.roa
Signing time: Sat 14 Sep 2024 23:55:02 +0000
ROA not before: Sat 14 Sep 2024 23:55:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 15 Sep 2024 03:55:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1969 (0x7b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Sep 14 23:55:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2A92D54F789B7FAFAC23E4F65FD690114F68E8B5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:de:5c:9c:6f:ee:b0:cb:ad:85:4f:5a:70:90:
c2:cb:da:10:1f:ee:35:b0:62:e3:b5:8a:a0:8a:04:
4c:ee:79:51:cb:f0:4c:d5:b4:3a:8d:9f:54:ef:07:
e0:c5:3c:97:d5:2f:c4:ad:25:e7:8a:db:a2:21:f7:
c6:ea:42:3b:94:29:00:ff:e6:e9:ca:31:ec:8d:f3:
3e:84:ba:c7:c4:78:32:f1:36:34:37:8c:5d:e2:cb:
90:2b:ab:0d:0c:6c:c3:fb:fd:2a:c6:74:58:14:0b:
db:68:59:57:d3:b1:00:ef:52:6a:64:ca:4e:b3:4c:
79:c3:64:75:59:2b:8a:54:58:ab:98:24:66:5d:3c:
d7:8b:fd:3b:39:a8:67:24:d0:0f:47:7d:6f:34:fe:
d1:a5:a9:31:af:68:e6:21:45:86:fe:fe:2b:83:96:
36:d1:8a:00:6a:02:58:f7:3b:9e:7a:d7:71:7a:b6:
10:93:4a:2c:f8:a1:c9:76:98:65:08:d3:a4:83:a0:
54:6a:05:94:2c:5a:7e:91:32:bb:52:0d:70:a2:5b:
5a:78:fe:af:24:4f:b9:2f:b5:6f:b2:8f:dd:95:32:
a5:49:99:ce:56:3d:c7:fd:41:99:41:a5:19:87:85:
04:fd:d5:2e:c3:a7:41:65:ec:1d:11:52:d6:92:dd:
d7:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:92:D5:4F:78:9B:7F:AF:AC:23:E4:F6:5F:D6:90:11:4F:68:E8:B5
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/KpLVT3ibf6-sI-T2X9aQEU9o6LU.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
03:cc:d8:15:34:35:81:40:13:c2:66:d6:a7:6e:33:29:de:f9:
97:12:a1:2c:c0:7a:37:e9:16:09:4a:da:d0:d3:0b:35:9b:d9:
ff:71:0a:cd:9e:ad:7d:b6:d6:66:e5:3a:1a:8d:f3:0c:1b:6e:
6e:56:7a:5b:39:e4:37:74:c9:5b:6e:9b:d1:9f:cc:7a:96:35:
12:98:c4:50:69:f7:10:fb:ce:09:77:f9:7c:90:51:96:3b:3f:
43:ee:90:11:a4:66:d0:0c:3c:02:68:50:59:be:e4:c1:a9:0f:
56:b2:e0:59:57:e9:a8:4e:4a:21:be:e3:6b:39:c2:05:c8:33:
b9:76:ef:d0:9e:1f:c2:83:9a:8a:3c:78:8a:aa:88:c5:35:e4:
be:86:5a:81:55:45:89:b0:1a:b9:ce:4d:3c:4d:35:9d:03:3d:
53:e1:76:0b:69:19:d1:30:bd:f3:35:ee:e5:af:e6:1d:f5:b8:
ee:56:de:99:44:08:d3:7e:9e:7a:f4:0c:0f:dc:a7:56:1e:7f:
88:46:4a:0b:b0:fd:14:6e:f1:75:da:8c:a4:86:e5:45:56:cb:
08:5e:d4:1c:1a:26:93:38:2a:87:b2:04:06:c3:62:4d:0a:4e:
17:d8:0c:8b:1c:a7:9a:44:ec:03:7c:3f:cc:46:82:0a:57:2d:
2c:87:be:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 15 07:46:36 2024 by rpki-client on console-ams.rpki-client.org