Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/NFGw7q4IybF9ZPwzrgbkKXCO5xo.roa
File: NFGw7q4IybF9ZPwzrgbkKXCO5xo.roa (raw, json)
Hash identifier: fR17G8zZuvwvrj8D+ezB0HQhIsuu8zSzl4JSSpeAFvg=
Subject key identifier: 34:51:B0:EE:AE:08:C9:B1:7D:64:FC:33:AE:06:E4:29:70:8E:E7:1A
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 06B8
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/NFGw7q4IybF9ZPwzrgbkKXCO5xo.roa
Signing time: Sun 18 Aug 2024 07:55:03 +0000
ROA not before: Sun 18 Aug 2024 07:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 18 Aug 2024 11:55:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1720 (0x6b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Aug 18 07:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3451B0EEAE08C9B17D64FC33AE06E429708EE71A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:0e:0c:09:0a:7a:08:10:b3:88:0d:01:f3:f9:
47:ce:59:88:9b:35:99:cb:c3:0b:08:72:ae:11:96:
40:06:b4:8f:ff:17:fc:a2:61:9b:58:83:1c:29:a1:
d4:9c:7c:9d:ec:19:7d:83:3a:ae:61:af:e4:df:f8:
64:eb:fa:8d:73:09:18:61:4a:1f:2e:b7:05:bb:9d:
b4:00:fa:73:35:68:0f:ee:86:10:56:7c:98:24:c8:
aa:3e:2f:c8:10:ad:4d:7f:99:2d:6f:92:d0:5c:96:
f2:88:47:ac:13:13:25:01:6a:4a:8e:9b:95:8a:99:
32:94:17:11:88:f6:5c:ba:48:98:f9:d6:24:8f:92:
ae:c1:ff:83:d2:6a:2e:30:f6:7b:c5:ae:35:ca:90:
ee:64:fa:21:60:f2:59:ef:92:18:a7:79:d2:a8:b6:
cb:b9:8d:ec:e2:da:2f:9a:7f:09:f0:d3:5f:42:a6:
a0:af:ff:76:c4:fe:9a:69:97:2b:4f:ff:03:f3:eb:
f2:36:22:93:e3:90:85:fe:ff:71:f7:5d:b1:4a:f2:
97:f4:49:b3:41:e2:9e:3a:b6:04:ab:72:84:c2:7e:
58:a0:02:32:c7:f1:a3:94:ca:1b:32:cd:07:90:09:
50:5c:9e:8f:20:ab:17:86:11:43:39:a6:b3:0f:5c:
27:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:51:B0:EE:AE:08:C9:B1:7D:64:FC:33:AE:06:E4:29:70:8E:E7:1A
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/NFGw7q4IybF9ZPwzrgbkKXCO5xo.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:f3:3e:27:b6:01:7f:96:a7:df:13:72:bb:90:25:c0:cd:84:
7f:f1:78:25:03:be:cb:cb:be:0f:2f:71:59:c1:ed:58:22:69:
50:d6:b2:14:d6:14:32:a8:ab:fb:44:fe:5f:da:df:4d:7f:be:
a1:72:1a:57:07:d5:53:49:0b:0f:a6:f7:91:5a:79:2c:e4:51:
99:60:a0:8c:01:65:d2:cb:e9:db:ac:d5:f3:b4:d6:a6:61:05:
d4:9b:4e:b3:bb:21:c8:78:0e:3d:65:32:39:04:35:b6:61:e2:
ea:d1:53:83:4e:79:41:3f:bf:3d:18:a2:d4:a0:29:40:b5:db:
07:ed:13:1c:0f:e5:40:53:f8:dc:b0:44:b1:4b:3e:f5:d9:37:
03:50:9c:c6:9d:f8:0f:f5:ca:90:d9:b1:9c:5b:61:d9:11:99:
bf:3a:62:7b:81:a3:35:60:b6:eb:03:9d:a1:f6:53:ff:d1:88:
e8:eb:d1:88:0b:ea:66:1b:5a:71:e5:bb:6a:0d:83:f4:57:c6:
14:ea:a6:ae:d8:9f:82:99:0f:ad:b2:32:ac:55:d9:92:ea:41:
53:17:03:90:17:33:78:fd:a3:7a:91:03:91:9c:8f:3b:04:31:
08:bd:a2:d2:6e:ad:33:77:4c:f3:1b:ee:59:a5:77:45:ef:81:
0a:97:2c:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 18 14:30:56 2024 by rpki-client on console-ams.rpki-client.org