Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/Wfjz4JOYzBVGYxcNso8Qgys84ac.roa
File: Wfjz4JOYzBVGYxcNso8Qgys84ac.roa (raw, json)
Hash identifier: V4aY2dKpEFCWi9N9RAMAfIxGoV+z0mZwiy3+GFyPNPI=
Subject key identifier: 59:F8:F3:E0:93:98:CC:15:46:63:17:0D:B2:8F:10:83:2B:3C:E1:A7
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 05AD
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/Wfjz4JOYzBVGYxcNso8Qgys84ac.roa
Signing time: Fri 19 Jul 2024 15:55:04 +0000
ROA not before: Fri 19 Jul 2024 15:55:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 19 Jul 2024 19:55:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1453 (0x5ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Jul 19 15:55:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=59F8F3E09398CC154663170DB28F10832B3CE1A7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:bf:ec:6d:82:cd:c1:70:bb:1e:1f:ac:3f:51:
51:83:e6:7e:e1:87:b2:6f:f2:04:b2:e2:66:eb:9e:
85:4f:1a:72:b4:7f:41:fd:60:31:08:f0:f3:b4:69:
db:df:30:df:57:28:c2:95:bb:31:b4:c3:58:66:f4:
bd:24:09:7c:d3:8b:ed:8a:0e:ae:58:90:99:5d:22:
68:0c:fd:c4:ba:d0:58:3c:71:47:8c:df:49:0c:ce:
2a:47:23:b0:07:13:fd:a0:4d:32:56:b2:c5:be:0c:
49:19:68:db:26:df:c7:70:f8:98:c6:02:0e:0b:6f:
a5:96:93:38:88:29:19:ac:ed:56:db:e4:b3:9c:b2:
d8:c5:f0:fc:ec:c8:c5:ef:12:fb:60:91:62:4b:73:
fe:37:68:d1:36:12:f2:7f:26:c7:5c:4e:83:47:b7:
44:46:8c:bb:26:e0:5e:63:ba:bd:c3:69:ee:0f:ab:
d5:11:c4:99:8e:f8:e7:72:20:15:35:13:ff:26:7e:
54:f9:7a:8f:65:c4:37:8d:6e:aa:d3:96:4d:8c:75:
02:a2:b7:73:d5:ba:f3:22:09:dd:0e:b8:23:eb:a0:
1d:e2:c1:5d:c7:2d:82:81:90:18:45:01:74:47:84:
5f:fb:95:e2:3c:0c:13:2d:54:31:49:1c:5f:54:22:
20:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:F8:F3:E0:93:98:CC:15:46:63:17:0D:B2:8F:10:83:2B:3C:E1:A7
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/Wfjz4JOYzBVGYxcNso8Qgys84ac.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:5f:37:e0:96:f2:e8:dc:9d:03:7f:c9:b0:f1:4c:d6:b5:85:
86:7a:2c:d8:ed:85:ea:a2:e6:af:52:b6:c6:c0:48:3f:be:0f:
2a:2b:15:b7:2d:e9:41:01:d4:3f:d8:ed:c7:f3:d4:30:61:96:
35:5c:3a:ba:7b:34:fc:cc:ec:39:5e:22:36:60:bf:ff:58:32:
a0:b1:b3:53:77:8e:72:2f:ad:21:fe:cd:59:32:33:d8:1d:c7:
28:70:61:6e:df:f6:21:ac:3e:ab:0c:bc:65:f6:3f:26:38:e1:
aa:3a:ac:55:75:4c:84:6b:23:5c:5f:8f:ac:82:0c:df:28:37:
fc:53:67:c6:3a:4e:21:4d:7a:aa:de:6f:69:ad:a9:76:57:3c:
1d:11:72:12:33:77:98:9b:b4:db:f5:e8:20:81:01:d2:47:72:
72:e1:ef:77:71:5b:a0:08:e8:ef:9d:6d:8e:5d:22:17:7c:b2:
36:ed:f7:6c:9f:8c:4b:b8:42:c3:34:50:ac:83:10:94:84:4e:
eb:d3:ba:bd:20:46:e2:b5:16:99:b9:72:21:39:a9:0e:0e:11:
6c:ab:07:97:9c:88:e1:76:a8:8e:f1:b3:b6:02:87:76:65:cd:
74:ae:fd:89:90:83:83:24:a2:77:15:cf:d1:85:08:0e:53:b7:
b6:9b:76:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 19 21:18:46 2024 by rpki-client on console-fra.rpki-client.org