Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/QgsiCw4PY-rRWBHm7Xq_MVPUKhs.roa
File: QgsiCw4PY-rRWBHm7Xq_MVPUKhs.roa (raw, json)
Hash identifier: 14YbGLVQv7PXyEEAuDT3SJLeg7J4DzJtqicpToq33c8=
Subject key identifier: 42:0B:22:0B:0E:0F:63:EA:D1:58:11:E6:ED:7A:BF:31:53:D4:2A:1B
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 09A7
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/QgsiCw4PY-rRWBHm7Xq_MVPUKhs.roa
Signing time: Sat 09 Nov 2024 15:55:03 +0000
ROA not before: Sat 09 Nov 2024 15:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 09 Nov 2024 19:55:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2471 (0x9a7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Nov 9 15:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=420B220B0E0F63EAD15811E6ED7ABF3153D42A1B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:48:a1:92:f0:84:27:b5:92:57:c1:a7:ac:b0:
b5:1f:d6:22:3e:2e:2d:ae:6a:34:bf:ef:a2:20:25:
85:d8:90:81:f4:80:5c:fd:5c:d5:28:fe:0f:c5:23:
95:74:0c:b7:21:62:84:90:81:9c:d1:89:4d:f0:06:
9c:76:e6:e0:17:d1:48:32:e4:05:b7:c1:c0:fc:f6:
b8:4f:ff:32:ca:aa:72:ac:2a:bf:19:e1:4d:04:32:
c7:bc:32:e1:b4:fa:50:f2:1b:43:65:c1:70:32:46:
29:af:70:cc:89:0e:7b:10:41:84:9b:bd:b2:ec:dc:
ef:93:45:29:6a:2c:4d:e8:98:45:d0:5d:9f:91:3f:
d4:6e:0d:d2:10:43:28:a4:13:d1:35:22:72:94:c0:
f3:e4:59:d7:0f:5e:1d:52:50:2b:27:9a:51:36:48:
ee:22:f9:09:7c:a4:8e:74:89:85:af:87:3f:15:9f:
0b:3f:83:94:23:28:cc:e0:97:53:a3:7d:f9:41:c3:
be:af:cf:25:fc:75:b2:29:29:60:b2:1f:9e:26:e8:
c3:c6:f7:15:1f:76:05:3b:d5:e0:e4:98:15:69:97:
a4:62:f5:e7:6a:e6:71:70:68:3c:80:f8:3c:e4:1a:
85:ee:c4:dc:7c:b4:3e:a8:85:08:0e:82:3c:e2:e1:
8f:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:0B:22:0B:0E:0F:63:EA:D1:58:11:E6:ED:7A:BF:31:53:D4:2A:1B
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/QgsiCw4PY-rRWBHm7Xq_MVPUKhs.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
66:ac:05:a2:91:5f:b3:2a:5a:5e:f6:a6:75:25:52:69:e6:58:
bc:c1:f7:f8:47:30:d8:c2:a4:a3:e8:25:3d:c4:86:b2:2b:a1:
56:5b:e1:35:fe:f8:9d:ff:eb:24:a7:4d:e9:5b:2b:cd:e1:a9:
79:77:a6:c4:7d:04:44:d2:35:94:2e:41:68:d6:40:fb:03:f4:
84:5c:9d:8d:3f:50:5f:07:59:4b:bd:9e:e2:b4:1b:fb:51:30:
4c:0f:fc:c2:d6:47:9b:6d:f2:b1:6c:70:ce:4c:6d:fc:94:06:
67:d0:37:b0:40:dc:22:3d:f2:de:c8:fb:5e:81:2e:05:f9:76:
01:dd:c3:92:07:c7:21:ae:b0:80:66:ba:f9:9e:61:bf:09:5f:
f3:36:fe:9e:37:91:f6:f2:bb:b8:d9:3f:fa:c5:1e:6f:53:87:
f7:c3:7a:10:94:03:be:a9:1a:67:8f:32:a7:2c:0a:46:95:3b:
45:3b:77:7c:61:4b:97:bf:f3:95:f5:3f:b7:ca:db:74:e1:1a:
23:9d:53:22:5a:52:9b:ed:d3:9f:4c:15:28:53:42:56:d4:e0:
53:a3:1c:b8:38:86:c1:17:87:82:35:18:5d:a2:82:26:b6:16:
b3:42:fa:c5:db:bf:f7:09:8c:2f:3b:94:98:4e:db:40:0f:c2:
fa:b3:dc:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 9 22:51:59 2024 by rpki-client on console-ams.rpki-client.org