Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/TSSkUuaaRoRxmc2wsGROl5SXMwc.roa
File: TSSkUuaaRoRxmc2wsGROl5SXMwc.roa (raw, json)
Hash identifier: yFtz+J2AMi1LjHuBFux9pGdApLwSUWzJrA4jyr3OSmY=
Subject key identifier: 4D:24:A4:52:E6:9A:46:84:71:99:CD:B0:B0:64:4E:97:94:97:33:07
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 09DA
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/TSSkUuaaRoRxmc2wsGROl5SXMwc.roa
Signing time: Fri 15 Nov 2024 07:55:03 +0000
ROA not before: Fri 15 Nov 2024 07:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 15 Nov 2024 11:55:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2522 (0x9da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Nov 15 07:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4D24A452E69A46847199CDB0B0644E9794973307
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:b9:5b:a5:be:92:12:d9:b5:6a:58:81:e1:ed:
29:b7:bf:82:8d:b8:56:17:97:cd:cc:15:a5:08:07:
9d:4f:a6:d1:86:41:19:a7:51:29:2f:5b:d3:04:1a:
ff:66:07:5b:0a:ec:a2:95:ad:4c:bc:fc:23:4f:88:
9b:f4:f8:67:a5:d7:d9:ee:64:1c:e4:32:49:08:88:
dd:12:37:46:44:69:17:6c:51:89:84:15:92:aa:65:
70:bc:65:0e:fd:b6:2d:9e:2c:a0:1c:f4:19:27:cc:
2e:2a:bc:2f:40:85:a1:b2:da:dc:23:49:7e:17:cc:
44:36:e0:7d:e3:72:2e:4b:a7:f7:14:ab:06:66:8f:
25:a5:49:e4:c2:91:c0:dd:b2:0a:a1:a0:a4:b7:21:
b3:14:25:79:ea:cd:e2:b2:51:86:e0:e8:c4:3b:df:
b1:47:1b:c8:d0:13:4a:0b:fb:67:76:bc:05:1c:36:
1c:f5:c1:34:67:bc:82:d1:53:87:b8:c1:b4:c8:f6:
d7:3f:39:1a:e4:1e:9a:ae:54:7f:de:0e:df:a0:b1:
52:68:39:1c:90:d2:3e:26:04:15:68:52:be:1f:bc:
93:9c:4e:51:ee:23:02:7b:9b:21:07:dc:c4:9b:a1:
f4:04:5a:7e:01:1f:be:f3:f3:3b:7b:e3:52:c5:ca:
1d:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:24:A4:52:E6:9A:46:84:71:99:CD:B0:B0:64:4E:97:94:97:33:07
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/TSSkUuaaRoRxmc2wsGROl5SXMwc.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
46:67:be:6a:19:7a:41:52:90:61:68:da:69:27:40:e6:e6:c8:
26:e0:71:54:21:e9:28:23:2f:20:45:83:a7:e0:74:04:ae:0f:
8b:ae:26:ff:f9:30:f5:69:f9:82:1a:de:57:a8:c6:64:87:84:
2a:f7:66:24:1a:22:3a:e4:d9:74:a0:00:b5:67:fe:42:ce:2b:
19:47:b5:7e:09:0c:da:5f:03:7e:74:75:e6:71:d2:b9:15:7a:
83:c2:42:93:d6:74:ba:f9:c9:50:3d:4e:bd:ac:26:e3:bd:3e:
87:85:07:ab:f6:ba:7f:12:b6:4f:a6:ba:65:49:f4:e5:c4:50:
62:a8:17:88:10:06:63:7a:fd:69:da:1a:16:6f:2f:33:8b:31:
bf:77:c3:cc:42:89:7c:58:50:78:75:c1:0c:8e:cd:f7:ee:35:
c3:03:61:c8:f0:fb:ac:50:30:e8:0d:94:a9:dd:6f:30:20:bc:
54:ae:3b:6b:40:e5:e3:1c:dc:e6:34:c9:b0:b5:dd:83:9d:49:
e2:e9:80:86:31:f1:4c:e1:f1:41:29:bf:6a:62:0a:3e:36:48:
52:36:1a:74:2c:98:31:64:13:54:91:8a:4e:15:b1:bb:d9:f8:
b1:1b:8d:d6:b8:13:90:0e:a7:61:a5:c7:36:3c:ea:02:6f:2e:
d1:56:f7:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 15 14:01:48 2024 by rpki-client on console-fra.rpki-client.org