Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/ah_6yJ_EbzsPEPi7NiDfTL-zML4.roa
File: ah_6yJ_EbzsPEPi7NiDfTL-zML4.roa (raw, json)
Hash identifier: ne0n+6w2QEtG+2LKbs8ROhOtHaJ6Ghz63alzGvQ8Ths=
Subject key identifier: 6A:1F:FA:C8:9F:C4:6F:3B:0F:10:F8:BB:36:20:DF:4C:BF:B3:30:BE
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 01FF
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/ah_6yJ_EbzsPEPi7NiDfTL-zML4.roa
Signing time: Fri 05 Apr 2024 23:55:03 +0000
ROA not before: Fri 05 Apr 2024 23:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 06 Apr 2024 03:55:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 511 (0x1ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Apr 5 23:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6A1FFAC89FC46F3B0F10F8BB3620DF4CBFB330BE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:e8:42:65:6e:2b:f1:cf:f1:33:a2:98:a8:56:
77:24:6c:ea:46:b0:18:10:48:eb:7c:56:62:b7:e7:
0f:b7:1d:3e:4b:65:d3:d7:b3:61:fe:be:e4:06:f2:
a5:38:9f:89:47:25:d8:3d:8a:58:7f:1a:11:83:9f:
01:2f:b2:f6:66:58:42:a0:f6:4b:f3:8f:bd:31:79:
ad:f6:ec:bd:f0:48:d9:0a:3c:e2:a0:00:dc:6b:d8:
39:16:22:a1:e6:bc:15:90:c4:bb:7c:5e:3f:80:88:
01:ec:27:c2:a8:d6:56:0f:e6:29:3c:26:49:69:7d:
4f:6f:70:3a:f5:8d:82:ec:b7:9c:58:26:60:ef:6d:
6e:60:fc:7c:67:7a:d4:ab:bb:d9:65:a3:37:f7:95:
91:71:31:61:20:8e:16:94:19:ea:4a:67:67:db:c1:
6b:16:da:63:1a:53:f4:df:7c:43:d7:5e:1a:56:9c:
7e:ba:0f:81:1a:93:2c:96:77:f2:02:59:fb:63:ce:
1b:4f:95:c3:66:8c:a0:5f:a4:74:5d:6f:48:fd:a1:
48:68:b0:ba:7c:01:41:b2:a8:26:03:57:05:8c:78:
49:b3:8a:25:1e:b2:a2:90:9f:2a:78:50:3b:5f:7b:
51:11:cb:cf:66:0b:47:16:2f:df:60:76:25:68:ae:
8e:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:1F:FA:C8:9F:C4:6F:3B:0F:10:F8:BB:36:20:DF:4C:BF:B3:30:BE
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/ah_6yJ_EbzsPEPi7NiDfTL-zML4.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:38:90:35:3c:9c:c3:a6:35:83:c3:31:05:77:54:61:49:99:
f0:cc:30:32:47:1b:8a:c0:48:d4:f1:a9:99:0a:df:3c:1f:65:
cc:c7:4d:09:51:9a:3d:53:db:3f:2d:25:4e:3b:36:86:12:79:
b0:4e:8f:08:d4:69:49:d9:7a:e0:5b:92:61:cb:33:40:5b:49:
02:89:a6:cb:80:db:49:72:2c:d4:ab:5a:6c:26:55:03:09:c5:
2a:e5:2c:cf:cb:87:d0:2b:86:3e:6c:5a:4d:ed:03:33:25:37:
3c:31:a1:c6:85:72:2c:29:96:b6:f0:2d:16:87:90:ac:ac:19:
56:a6:7a:c6:66:4a:ee:b2:75:a2:39:bd:ca:4e:6b:c8:46:7d:
12:25:6f:d6:17:c2:0c:37:79:1f:41:aa:a0:2f:c6:4c:c3:a2:
c5:cc:15:75:a7:25:49:d3:03:28:71:0b:5f:bf:27:f0:14:c9:
5c:1b:d9:33:23:53:75:da:73:81:f7:01:6d:2b:48:50:e4:3a:
6b:ea:46:91:13:ad:3e:bd:bc:b1:c4:d7:b3:00:e2:70:f9:67:
b3:28:75:a2:8c:af:1c:2c:e8:d7:ec:79:ca:e8:33:1c:e3:f1:
6d:21:87:d4:0a:f5:8a:f3:bc:a5:4a:32:a0:f0:01:1b:ac:96:
31:09:5e:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 6 06:26:57 2024 by rpki-client on console-ams.rpki-client.org