Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/VZkZ0jWgX0JGv-jvFWsWaq3SRG8.roa
File: VZkZ0jWgX0JGv-jvFWsWaq3SRG8.roa (raw, json)
Hash identifier: XcMCIFfOXtDGZT6GeVoAbjFX3jTFebeNgVa2/3yLATE=
Subject key identifier: 55:99:19:D2:35:A0:5F:42:46:BF:E8:EF:15:6B:16:6A:AD:D2:44:6F
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0796
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/VZkZ0jWgX0JGv-jvFWsWaq3SRG8.roa
Signing time: Wed 11 Sep 2024 23:55:03 +0000
ROA not before: Wed 11 Sep 2024 23:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 12 Sep 2024 03:55:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1942 (0x796)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Sep 11 23:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=559919D235A05F4246BFE8EF156B166AADD2446F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:30:df:ae:49:83:4f:fa:85:93:94:d1:8d:2f:
de:fd:03:93:5c:a9:00:ee:c8:66:d3:f6:8b:ef:cb:
85:3c:4e:c2:40:69:5a:dd:4f:ae:65:ff:a4:d5:46:
0c:41:bc:34:c8:e0:ef:b7:00:66:41:d5:3b:41:f9:
54:f9:12:85:3d:3f:d9:02:c2:3b:34:86:a1:7b:dc:
6f:b3:37:33:d1:3f:4f:1a:c5:f3:47:57:19:84:b9:
72:10:2c:d0:99:11:07:0d:fa:7d:9d:85:96:f5:74:
58:ed:68:5c:d7:a8:d0:44:1a:85:18:41:cc:54:d0:
3f:42:a4:4a:8b:bd:ab:3d:47:8a:d0:74:09:07:0c:
c5:9c:7d:13:dc:a9:92:cc:22:f0:7e:66:bf:df:b7:
67:ff:c4:18:3a:43:07:0c:3c:40:40:2d:1a:c7:40:
14:00:d3:ef:f4:da:89:36:b6:63:da:0a:20:bf:15:
dc:b1:6b:c7:73:af:df:18:d4:9c:6f:39:b6:60:56:
61:63:be:69:31:b3:34:9d:bf:f5:1c:57:3e:3f:1a:
c3:72:92:c5:9a:88:fa:2a:0a:66:ff:d6:e5:85:4e:
0a:e3:b9:d7:89:3b:28:4b:54:f3:0a:04:71:e1:80:
a9:14:68:98:78:03:2b:b0:14:e8:1c:67:00:9d:93:
74:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:99:19:D2:35:A0:5F:42:46:BF:E8:EF:15:6B:16:6A:AD:D2:44:6F
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/VZkZ0jWgX0JGv-jvFWsWaq3SRG8.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
de:1f:70:d6:b5:fa:88:d6:33:00:62:8b:62:c3:b7:55:1b:da:
f9:81:57:0f:6d:57:61:cd:58:8e:47:8f:48:e3:aa:bb:ab:ae:
4f:af:8d:e7:9b:ab:1a:cb:dc:8a:41:9b:11:7b:31:3b:13:6c:
b0:47:aa:30:8b:5f:4d:1d:c9:f4:8a:e5:11:87:1d:d5:a3:f1:
6d:61:cf:17:0e:51:05:0c:1d:43:09:b2:5c:e4:72:44:d0:fe:
d6:b0:d8:e1:50:74:6d:90:98:52:fd:9b:af:b9:8e:25:49:d7:
b7:ef:4e:1a:fc:de:96:27:31:25:29:09:da:bd:34:80:31:21:
19:42:5f:e9:92:b6:b5:37:53:d2:1a:03:53:e3:2c:0d:33:ee:
35:9c:2d:10:82:f9:b3:72:ed:bd:a1:dd:bf:cc:52:dd:72:db:
27:40:84:d1:ff:a2:77:71:c8:c2:d9:94:41:61:9d:e6:45:7d:
ce:84:7b:4b:0f:3f:ff:71:52:7f:b9:2d:78:f8:79:fd:72:d9:
83:47:cb:2a:a5:4d:49:a9:2c:4e:b1:e8:a3:8c:ae:86:2e:30:
9a:c2:23:25:65:3e:3a:9a:96:32:b3:54:d3:77:fc:50:c4:ad:
5a:f8:8c:d1:aa:02:e8:e0:a7:3e:67:ae:a5:3f:ed:17:83:e1:
a8:b8:3e:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 12 06:20:32 2024 by rpki-client on console-fra.rpki-client.org