Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/akh1oJUTM-RrF3HGgx-RlOQNtAg.roa
File: akh1oJUTM-RrF3HGgx-RlOQNtAg.roa (raw, json)
Hash identifier: 3hg9H22DzRROMaTqfyaEHkkBMehNv0uRHjslTtOxc48=
Subject key identifier: 6A:48:75:A0:95:13:33:E4:6B:17:71:C6:83:1F:91:94:E4:0D:B4:08
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 07F0
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/akh1oJUTM-RrF3HGgx-RlOQNtAg.roa
Signing time: Sat 21 Sep 2024 23:55:02 +0000
ROA not before: Sat 21 Sep 2024 23:55:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 22 Sep 2024 03:55:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2032 (0x7f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Sep 21 23:55:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6A4875A0951333E46B1771C6831F9194E40DB408
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:10:1b:73:1a:64:cc:dd:1d:87:26:21:86:90:
27:cd:c2:a6:23:08:9c:4d:6e:75:3d:8b:3c:ac:aa:
19:13:b6:19:b2:64:54:a3:b3:0d:0c:cb:11:09:66:
69:33:17:b7:23:ef:f8:7d:43:d0:12:9f:62:79:00:
2c:ac:93:de:da:59:78:14:e0:66:02:c0:de:00:6e:
9c:99:83:2f:ce:bb:58:70:c6:60:e3:e2:0f:88:78:
a2:f9:de:71:a1:a8:c1:d4:60:ec:17:d5:9a:0d:53:
b8:bd:30:b6:6d:00:37:c2:22:bc:48:98:cf:10:f6:
2f:2b:2b:e0:98:52:9f:93:3d:67:b1:fb:07:34:85:
86:eb:b3:88:c9:33:3f:45:cf:3d:ed:2d:f2:31:fe:
ce:e1:84:5b:52:5c:2e:0a:a7:95:41:92:73:da:f8:
42:c2:f7:a4:08:60:73:4e:0a:96:75:d2:ab:e8:e4:
b8:b6:19:1e:33:4e:e8:2f:b8:c1:80:c1:36:82:ef:
71:85:50:63:29:6c:67:c1:92:32:96:e6:6c:f6:be:
42:c1:d1:06:0c:06:67:ec:9f:ae:e4:db:a6:0b:68:
42:04:20:c1:ea:2e:ff:6f:69:2e:39:88:0b:21:d6:
cd:cf:61:64:e2:e8:eb:86:52:a8:1c:62:da:a9:a6:
1a:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:48:75:A0:95:13:33:E4:6B:17:71:C6:83:1F:91:94:E4:0D:B4:08
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/akh1oJUTM-RrF3HGgx-RlOQNtAg.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
59:22:d4:ba:46:8e:38:e7:a4:db:7e:f2:e4:30:6b:52:73:df:
fb:45:ee:59:dc:42:a8:30:15:4b:d5:de:c1:95:f5:a3:35:90:
3a:31:f4:4d:a2:ab:63:34:a5:69:eb:6e:3c:4d:c3:de:d9:25:
b1:50:89:41:8e:d6:af:5d:a6:53:bb:40:30:7b:e1:64:03:90:
b1:8d:d2:8a:08:34:d5:6d:b7:9e:e3:e5:bd:47:53:a6:dd:74:
ad:0f:18:dc:ef:4a:24:a5:76:72:5f:78:a0:f5:85:ce:78:88:
d9:6a:de:8f:3f:8f:9f:56:40:3f:df:de:7e:07:e4:06:82:1c:
e5:8b:a2:36:a2:9f:e9:c4:eb:64:83:91:14:cc:51:ad:30:ca:
6c:f2:5e:20:7b:e6:f2:86:82:04:7e:64:20:49:3c:d3:dc:eb:
05:2a:5a:b7:33:59:2d:97:b4:09:c2:f6:04:34:f9:44:54:d2:
1a:06:e7:4f:4b:b2:4d:c4:0a:84:6a:b9:3f:d4:51:1c:1b:9d:
81:ba:6c:d5:5d:f4:7f:e0:f2:d8:27:7e:55:c4:20:55:c5:3d:
71:36:ef:da:1a:b9:c1:29:52:29:7b:c9:82:b0:eb:ae:76:5d:
70:92:7c:16:79:3d:2d:2b:c7:5f:11:86:eb:f1:b1:df:82:ec:
f3:b8:e6:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 22 08:53:09 2024 by rpki-client on console-ams.rpki-client.org