Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/LNuf1P_KrW5sQ0vV9hNC3uRhOdA.roa
File: LNuf1P_KrW5sQ0vV9hNC3uRhOdA.roa (raw, json)
Hash identifier: pa9U9y0ddaKDRaVt+0pkanRVLVu4TXqFS5z7AZECoFs=
Subject key identifier: 2C:DB:9F:D4:FF:CA:AD:6E:6C:43:4B:D5:F6:13:42:DE:E4:61:39:D0
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 09D1
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/LNuf1P_KrW5sQ0vV9hNC3uRhOdA.roa
Signing time: Thu 14 Nov 2024 07:55:03 +0000
ROA not before: Thu 14 Nov 2024 07:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 14 Nov 2024 11:55:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2513 (0x9d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Nov 14 07:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2CDB9FD4FFCAAD6E6C434BD5F61342DEE46139D0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:f0:06:3a:2a:86:a2:26:5b:b4:d9:fa:37:8d:
d3:41:1d:6f:7e:49:b1:82:20:ec:24:92:54:2c:78:
70:ca:15:07:87:c1:e5:20:cb:1b:2e:6e:dc:d4:2b:
7c:ef:57:f1:e6:53:ef:d6:42:fe:8e:85:c1:96:72:
80:db:6a:80:9f:cc:1c:46:34:27:2d:8d:e8:7c:2d:
dd:d0:0f:76:50:23:19:a8:88:e5:44:ec:01:d9:48:
65:8a:58:44:22:f8:63:1a:91:d2:eb:c7:7b:18:a8:
73:e8:4e:5e:7c:2b:24:ac:ae:72:27:5a:e2:19:1f:
61:68:a8:f5:4e:ef:e4:39:68:5d:eb:e0:0b:73:c3:
85:15:c3:0a:50:39:e4:88:ce:88:91:eb:ee:60:33:
94:b0:be:36:ff:81:35:a5:2c:65:28:9e:5b:8a:4d:
45:02:be:b9:c8:a6:a5:07:43:11:10:9c:81:13:26:
5e:2a:db:5a:26:a3:52:27:fb:f5:33:fc:fc:fe:12:
e4:cd:1b:16:5e:36:e5:35:3a:c1:71:a6:6a:73:d2:
10:70:52:93:c3:df:73:b6:cb:4b:8f:51:64:5d:42:
35:f3:59:ba:1f:11:08:fd:4e:d2:41:12:09:ce:c0:
77:8c:52:11:eb:ea:f1:75:f3:31:f2:43:dc:29:7e:
dc:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:DB:9F:D4:FF:CA:AD:6E:6C:43:4B:D5:F6:13:42:DE:E4:61:39:D0
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/LNuf1P_KrW5sQ0vV9hNC3uRhOdA.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:79:ae:00:d1:f9:ff:ac:4f:4e:6b:ad:3d:0e:8a:a1:2d:1e:
bf:bf:1b:11:45:6b:7d:ce:80:74:09:e1:13:2e:69:e9:23:8f:
06:fd:c6:25:20:36:67:b2:d8:5e:8a:b1:79:ce:0b:47:67:ec:
c3:0b:d2:98:d2:6a:b0:31:be:c6:26:90:fe:3a:aa:6e:c0:6b:
d4:18:c1:02:d0:ae:f9:21:d3:f1:92:44:37:af:91:01:3c:b0:
3a:ca:4f:3e:3a:6a:eb:4e:03:4e:46:91:53:f4:2d:3d:18:36:
5c:e6:41:67:95:50:11:35:05:cb:0d:b5:f3:cd:fe:f2:4e:b8:
d4:b9:62:5f:7a:1e:02:48:02:94:3c:2a:f0:23:ba:3c:80:93:
c5:ed:09:86:5d:a8:27:eb:d9:05:7b:9c:1f:18:d0:d6:01:47:
96:78:2a:30:cb:8c:fd:bb:3e:ba:47:41:82:dc:5d:b3:cf:24:
9f:31:7c:10:a7:af:96:79:34:45:d8:1a:1c:5f:54:f7:04:2b:
a5:3b:cf:8b:22:49:d2:be:15:07:53:c4:02:18:63:0f:1b:08:
24:b6:fc:2e:bd:fe:e3:b6:83:09:e3:5f:aa:b6:85:ec:e7:90:
e7:21:2f:dc:60:1b:5e:fe:a2:7d:f8:95:54:b3:f8:99:10:4f:
9f:eb:ad:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 14 14:16:23 2024 by rpki-client on console-fra.rpki-client.org