Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/Ns-8NyhK8QfTzof1ecWzPvpHJqY.roa
File: Ns-8NyhK8QfTzof1ecWzPvpHJqY.roa (raw, json)
Hash identifier: RMom7tYYJK3ia8CI8lRBSAA1K5ZmOIzJd6fokzUtG1A=
Subject key identifier: 36:CF:BC:37:28:4A:F1:07:D3:CE:87:F5:79:C5:B3:3E:FA:47:26:A6
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 08DA
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/Ns-8NyhK8QfTzof1ecWzPvpHJqY.roa
Signing time: Thu 17 Oct 2024 23:55:03 +0000
ROA not before: Thu 17 Oct 2024 23:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 18 Oct 2024 03:55:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2266 (0x8da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Oct 17 23:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=36CFBC37284AF107D3CE87F579C5B33EFA4726A6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b5:90:59:62:ba:62:79:03:6c:8d:cb:bc:c6:
9c:a8:77:41:7a:46:2d:c4:b2:13:7b:26:48:a1:18:
a7:38:77:fb:c7:58:e0:d3:0b:52:0c:4e:e0:ea:61:
ab:de:25:66:e7:32:fd:7d:01:e4:38:9f:71:1f:51:
8c:a8:fa:2b:3d:11:67:58:d5:58:99:3d:ec:c5:e7:
9d:c2:7a:41:0f:12:38:50:8c:b8:80:87:73:8a:b8:
3e:08:bd:08:01:be:2b:0b:c7:81:51:a5:e9:f0:b1:
cc:af:7d:33:52:59:58:c5:bb:36:ec:2a:c5:10:fe:
77:d2:bc:25:d5:79:e0:ee:ff:64:75:05:f6:3e:db:
e9:34:e4:6e:60:0b:aa:95:cc:e0:58:79:97:42:4f:
6e:8e:93:fd:5b:a9:90:12:1b:ed:c5:eb:29:56:67:
d9:72:6d:1a:19:5d:d0:09:3e:73:62:81:75:d9:77:
4c:d8:a7:23:48:e9:ed:d6:65:ff:b4:04:a5:e4:b1:
d0:71:ea:a0:05:44:d3:6e:21:91:cc:71:ff:4c:c5:
72:91:96:69:36:cd:c7:61:8e:ed:f2:ac:dd:e8:1a:
9a:81:20:86:f4:91:0e:b6:76:d7:ad:cc:8e:a1:bd:
fd:4e:1e:f9:a3:ac:d3:eb:cd:09:9b:8f:ce:cb:9d:
ea:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:CF:BC:37:28:4A:F1:07:D3:CE:87:F5:79:C5:B3:3E:FA:47:26:A6
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/Ns-8NyhK8QfTzof1ecWzPvpHJqY.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
57:68:a2:d4:8c:21:46:f3:fb:d5:a1:75:61:e1:a7:9e:d2:39:
1b:f7:34:1d:e1:9d:f1:26:33:be:21:04:61:b2:33:28:e3:0b:
c0:e9:56:86:f3:81:1a:06:6e:f5:ad:05:de:6f:46:b5:3f:00:
5b:1f:fc:38:cf:5d:df:be:d0:f7:2e:a6:69:e4:f0:83:0d:67:
5d:9c:0c:91:6e:46:67:b1:31:1a:00:c3:43:f4:99:95:db:fe:
ef:b0:b2:ad:87:d1:18:91:83:ca:b3:89:3f:ea:1d:8e:39:e6:
18:d9:fa:03:be:27:b8:63:7f:cc:75:22:aa:4f:b3:de:a6:3c:
6b:7d:fa:ba:c9:07:53:8c:59:30:56:4d:e3:c1:00:b6:e6:a8:
d9:cb:f4:46:9f:d4:da:ef:65:47:3e:11:19:25:6e:5b:b9:7c:
0d:1f:2b:4e:4c:2e:37:7d:55:e3:ac:08:7d:79:ee:5f:9f:19:
3b:b1:aa:89:b1:f4:36:b1:ad:18:2c:b4:ae:18:53:a6:b5:67:
6b:d9:cf:30:f6:85:4f:e9:c8:18:ba:e8:f6:9a:3a:7e:9b:c6:
3b:43:c9:5b:39:8f:15:63:1b:53:9b:dc:83:e9:4b:c8:80:7e:
eb:de:3e:99:b6:fe:11:19:5b:be:76:a2:f6:1a:8e:e1:b6:a3:
52:11:13:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 18 05:29:01 2024 by rpki-client on console-fra.rpki-client.org