Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/S1vvnHOR2380-I8UJoboDec1KQo.roa
File: S1vvnHOR2380-I8UJoboDec1KQo.roa (raw, json)
Hash identifier: d71r7IqDuCS71edqu3cEb0LuYD7Rk90I0wYCVd3Fsn8=
Subject key identifier: 4B:5B:EF:9C:73:91:DB:7F:34:F8:8F:14:26:86:E8:0D:E7:35:29:0A
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0962
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/S1vvnHOR2380-I8UJoboDec1KQo.roa
Signing time: Fri 01 Nov 2024 23:55:02 +0000
ROA not before: Fri 01 Nov 2024 23:55:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 02 Nov 2024 03:55:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2402 (0x962)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Nov 1 23:55:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4B5BEF9C7391DB7F34F88F142686E80DE735290A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:eb:98:ae:b1:39:34:6f:01:53:19:a0:ce:13:
d5:34:d2:c4:1d:9b:60:13:8b:8d:20:27:25:9e:d0:
6b:99:85:99:76:23:60:f6:8a:2f:bd:35:46:b8:3a:
dd:55:ac:d4:a5:9e:08:58:76:96:75:1e:1d:89:cd:
20:d5:2a:d0:91:66:b9:aa:c4:66:aa:44:3b:fd:81:
81:ed:b1:b5:90:f0:3e:fb:ee:0d:4c:a1:bf:81:61:
1c:84:0d:c8:37:92:70:23:d9:82:fd:cd:0d:9a:8b:
ff:50:50:2b:03:95:6c:a1:13:2c:a8:4d:50:6d:02:
7a:7b:6c:15:98:03:49:8e:82:36:7c:82:8d:79:ee:
68:39:2c:6e:67:b9:9e:8d:22:e3:1e:bc:89:0b:97:
d5:02:52:1b:cd:60:d2:35:a6:47:6b:cd:52:49:18:
42:c7:de:1d:98:72:1c:2e:ff:64:6b:c6:8b:c8:35:
55:d5:04:bb:4e:5d:2b:4b:6f:49:97:5f:e6:33:db:
24:95:7d:82:82:31:6b:ff:3b:f8:09:0e:f3:88:39:
f5:4c:b1:e6:c1:4c:9c:b3:29:f6:b5:a9:87:ca:ed:
0a:2f:c7:c8:2e:29:fc:39:15:70:79:cc:66:56:3b:
c1:54:4e:d3:02:d2:26:f2:a4:e1:78:f9:c7:db:ab:
f7:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:5B:EF:9C:73:91:DB:7F:34:F8:8F:14:26:86:E8:0D:E7:35:29:0A
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/S1vvnHOR2380-I8UJoboDec1KQo.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
16:37:5f:b1:c4:ca:80:2b:44:4c:f5:15:ae:53:a1:c3:25:7c:
10:f2:98:12:a2:0d:01:da:f0:c2:2b:7c:83:06:4f:e1:17:71:
e4:76:97:7c:8c:3f:5c:28:e1:88:04:ba:35:5c:03:3e:84:1e:
d5:46:11:a2:e3:03:2b:9e:f8:30:c3:26:46:e9:32:99:e1:99:
50:1f:28:59:61:43:cb:80:3f:d1:47:86:5a:ac:d3:1a:38:b0:
2f:26:11:38:2f:05:ed:e4:4a:63:80:06:e2:a5:59:4b:cb:dd:
61:a9:17:ec:07:ac:d9:88:b2:4c:62:88:92:4d:75:08:9e:66:
de:66:b8:a6:f7:b4:05:5e:40:7d:11:04:2f:bb:11:cb:53:2b:
67:28:c6:18:f7:9d:3f:7a:a6:83:5a:30:ec:26:2a:fb:31:0c:
ba:bd:eb:44:1b:10:0d:9e:40:5f:9a:c8:90:ae:b4:5f:d3:29:
7b:46:4c:6a:3a:ef:76:4b:51:cd:78:0e:73:1f:37:85:c8:2d:
b3:49:87:51:fd:96:8a:47:94:c2:b4:6a:e9:25:8c:22:5b:b1:
1d:a1:17:ad:fc:b8:fd:66:db:4f:d5:a3:0e:53:bc:2d:fa:04:
ed:64:da:df:0f:43:76:21:99:de:9e:3a:ba:ea:d5:49:de:23:
6f:2f:37:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 2 04:50:54 2024 by rpki-client on console-fra.rpki-client.org