Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/ZaBW1pZaLdORWpa9-jqZFR7m4O4.roa
File: ZaBW1pZaLdORWpa9-jqZFR7m4O4.roa (raw, json)
Hash identifier: 1wfNDSSDhqhFd8p3UFg3LtXFVGi9y+MgsBv71sphIb8=
Subject key identifier: 65:A0:56:D6:96:5A:2D:D3:91:5A:96:BD:FA:3A:99:15:1E:E6:E0:EE
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0733
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/ZaBW1pZaLdORWpa9-jqZFR7m4O4.roa
Signing time: Sat 31 Aug 2024 23:55:03 +0000
ROA not before: Sat 31 Aug 2024 23:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 01 Sep 2024 03:55:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1843 (0x733)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Aug 31 23:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=65A056D6965A2DD3915A96BDFA3A99151EE6E0EE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:37:87:78:72:83:dd:d6:d4:b2:20:41:3e:3e:
2f:05:42:5d:01:2a:5d:e1:78:f9:44:3b:0a:8e:e6:
0f:6b:ce:fd:be:e6:bd:a0:7d:f2:ae:7d:79:00:a1:
56:cd:10:a8:e5:94:dc:5b:ec:a9:b0:2c:0d:f5:5e:
a7:05:2f:bf:3c:15:ba:44:8d:26:40:7c:65:ee:35:
52:87:6c:66:6e:c4:fa:26:89:72:8e:14:03:57:45:
e6:47:16:33:fe:c5:9d:ad:2c:29:38:df:a2:c3:ca:
db:81:14:d7:63:19:51:3e:41:46:c0:33:9f:ab:7f:
70:1f:31:41:5c:00:b2:88:bf:d7:6b:a7:bd:e3:10:
04:1c:c9:fd:10:84:a4:b8:e2:70:e8:85:a5:d2:5f:
26:12:aa:3f:2c:c8:5b:97:25:72:fd:12:fa:cd:90:
50:bb:bb:d2:2b:75:33:0b:74:b8:a4:be:97:73:fc:
98:c6:e7:01:5b:c9:ef:a4:9f:b6:b3:e9:30:21:c6:
e5:81:24:e5:f9:3e:ff:9d:fa:9a:e1:c0:b9:bf:ff:
66:04:b7:2e:dd:5a:98:78:57:67:f5:18:95:59:bf:
7a:6b:0c:42:72:fc:fa:bc:82:1e:c2:7d:88:36:30:
b4:f3:7b:d9:ff:2b:2d:22:d4:09:1e:18:fd:ef:75:
ff:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:A0:56:D6:96:5A:2D:D3:91:5A:96:BD:FA:3A:99:15:1E:E6:E0:EE
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/ZaBW1pZaLdORWpa9-jqZFR7m4O4.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
19:f8:1f:8d:d5:5c:ec:1b:b2:49:4a:0c:a7:3c:7a:58:66:61:
61:f9:71:68:35:b3:ae:51:99:47:8f:46:d5:82:5c:4b:32:ff:
f5:17:92:a8:7b:49:ca:85:b9:d6:d8:76:bb:f1:db:a9:d7:7c:
20:f2:f6:e2:2a:72:43:1d:b6:e2:e2:52:37:cb:db:2e:bf:de:
8e:11:35:b2:48:71:ca:58:e5:64:69:63:b4:8e:29:b5:48:81:
35:62:a4:93:d0:38:bc:2f:94:7a:5b:ae:e3:ad:19:f7:94:bc:
7e:ce:50:d9:24:49:b2:fe:df:55:dd:48:d2:4f:75:4a:c2:67:
83:17:58:8c:50:9c:ee:04:33:12:69:b3:29:65:e1:e2:ac:7f:
51:9f:5e:78:e9:32:b5:27:03:4c:ba:ae:d7:74:e8:7c:6b:d1:
69:99:a0:3f:77:ad:bb:15:31:b5:ec:c0:0e:7e:b0:9a:a3:4a:
ae:a5:ad:29:82:69:e5:44:ed:5b:fa:8e:42:5d:e1:2c:4e:02:
7b:0d:41:f8:ff:88:9a:30:f0:f9:75:2b:8c:83:1f:b9:b5:7a:
91:c6:5a:ab:2c:10:2d:4c:80:37:d1:1f:b0:f5:64:bf:c3:eb:
72:f8:87:da:32:fa:fb:a4:a8:43:a3:89:b0:aa:ba:f8:d9:9a:
9d:68:e8:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 1 04:58:22 2024 by rpki-client on console-ams.rpki-client.org