Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/TYnuGakQMYPmydTW4oWZXhLhgGs.roa
File: TYnuGakQMYPmydTW4oWZXhLhgGs.roa (raw, json)
Hash identifier: nqwaJW6JqtkZO8o5efJW6YQJppolWZqeSJ6bem4eLn0=
Subject key identifier: 4D:89:EE:19:A9:10:31:83:E6:C9:D4:D6:E2:85:99:5E:12:E1:80:6B
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 081A
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/TYnuGakQMYPmydTW4oWZXhLhgGs.roa
Signing time: Thu 26 Sep 2024 15:55:03 +0000
ROA not before: Thu 26 Sep 2024 15:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 26 Sep 2024 19:55:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2074 (0x81a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Sep 26 15:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4D89EE19A9103183E6C9D4D6E285995E12E1806B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:45:b4:a7:ef:4f:60:0f:07:f2:14:50:0b:82:
da:0b:5c:56:17:8f:f4:aa:8c:6f:17:ce:c6:7e:e3:
27:ee:5e:ec:78:d9:d4:7a:a7:52:b7:14:1d:23:33:
63:e9:59:f9:e0:fb:61:ee:09:10:0b:d1:80:cc:c1:
e2:33:e7:34:f0:63:68:71:d9:7a:e5:0e:32:a4:55:
7a:db:b9:aa:dd:fc:13:bb:b4:66:67:55:32:8d:25:
46:ed:ff:b6:1f:9c:2c:96:93:33:60:79:6e:1a:c0:
11:18:38:15:7d:b5:51:df:d8:b3:8e:eb:88:7e:cd:
48:74:8c:da:c4:30:79:af:a9:87:ee:77:90:de:2d:
3f:83:b5:f9:59:5a:53:76:7c:59:6e:dd:06:55:22:
e7:cf:56:56:9e:c5:51:57:7d:93:99:71:a7:7e:be:
49:42:15:30:e7:85:08:a2:ad:85:1f:2f:36:4e:39:
ea:5d:b7:9b:89:cd:6e:a2:ec:31:39:19:1c:f9:5b:
62:62:f2:f1:0c:42:06:92:87:0c:35:2a:2b:9c:5e:
14:42:f1:ab:f9:f8:e7:ec:1d:ab:1d:8a:ca:31:53:
10:74:ac:79:d5:67:85:e8:ed:7c:4f:3e:9e:67:d1:
f0:c7:a4:bf:ff:ce:79:9c:07:a8:fa:54:4e:ad:70:
be:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:89:EE:19:A9:10:31:83:E6:C9:D4:D6:E2:85:99:5E:12:E1:80:6B
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/TYnuGakQMYPmydTW4oWZXhLhgGs.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:9a:be:b1:fc:19:1f:66:18:66:f4:e9:e9:74:99:c9:04:97:
dc:1f:03:f1:ff:c1:c3:38:69:73:a4:ac:55:09:b0:f2:7a:dd:
b5:6f:74:c1:28:31:c7:b4:36:13:6f:8e:21:b1:13:fa:51:cc:
e2:69:15:e2:7f:e4:18:86:ae:11:00:a9:a4:b6:02:ff:eb:cf:
8a:22:94:c8:26:3b:71:5c:ca:f3:9e:a3:9d:23:3d:78:a0:4a:
b5:a0:d2:6a:e9:1b:aa:30:40:37:cd:62:72:99:fd:f2:69:e6:
df:cc:51:5b:ea:22:54:ba:36:af:fa:a6:00:b1:ab:ff:49:45:
4b:9b:ee:a1:bc:74:1e:16:b8:8e:37:72:23:1f:80:61:d1:bb:
6c:0a:5e:23:54:74:f3:d7:bb:0a:b1:e1:52:68:d5:d3:db:bf:
66:8d:ef:f3:0c:05:cb:55:91:0c:1d:38:17:f6:82:aa:20:f2:
8f:b0:86:9a:19:e5:db:3c:3c:9b:ca:ca:f5:dc:c8:58:07:d7:
0d:16:49:d2:4f:f5:65:c7:5c:47:14:b2:74:24:74:6c:87:49:
d6:c3:c6:00:35:bd:88:5f:ee:eb:1c:1d:fe:db:28:ae:d2:10:
15:3e:35:5d:5c:c2:b1:ff:34:06:5e:75:a0:4e:8c:aa:c5:7e:
54:4d:67:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 26 22:07:58 2024 by rpki-client on console-fra.rpki-client.org