Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/cWCy3ILA-gBCHaDb1EM2PGYoIWY.roa
File: cWCy3ILA-gBCHaDb1EM2PGYoIWY.roa (raw, json)
Hash identifier: k7dlI9AygQcwHauUgrvGSSp/8VVNlXOreIr8FFjal/o=
Subject key identifier: 71:60:B2:DC:82:C0:FA:00:42:1D:A0:DB:D4:43:36:3C:66:28:21:66
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 07C3
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cWCy3ILA-gBCHaDb1EM2PGYoIWY.roa
Signing time: Mon 16 Sep 2024 23:55:02 +0000
ROA not before: Mon 16 Sep 2024 23:55:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 17 Sep 2024 03:55:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1987 (0x7c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Sep 16 23:55:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7160B2DC82C0FA00421DA0DBD443363C66282166
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:53:6f:da:06:40:5a:b8:df:5f:fa:68:ac:4d:
8b:16:83:82:1f:d5:e6:b5:67:cc:c1:b7:09:29:1c:
ac:fb:cb:02:5c:46:bc:fa:5e:1a:04:e7:3d:ab:3e:
4e:37:1c:b5:7c:0c:38:54:6c:1b:13:61:a9:da:cd:
1e:7d:58:c3:b9:d3:46:1a:72:29:be:69:0c:85:ab:
c7:7b:6f:14:cd:ed:be:8a:ab:96:24:31:e5:81:a4:
51:a4:6a:b2:41:7d:05:66:11:04:33:68:30:53:bd:
91:19:04:72:29:a3:d8:ba:2e:ab:c6:21:5d:f1:71:
15:f0:5d:b6:3c:c5:f9:5f:ff:98:c1:fd:ac:77:ae:
3b:d6:0a:05:02:b6:6d:90:5f:2a:ef:4e:4f:cd:0b:
d9:2e:c1:ce:c9:93:8d:d8:78:51:73:8f:04:bf:ef:
dd:85:9e:db:13:3d:70:55:2f:9c:b4:1a:54:b8:d3:
8e:48:dd:25:bd:36:0d:18:83:7c:c2:10:e7:96:1d:
bc:c8:9e:83:09:c7:f1:76:31:5b:ac:6f:d8:4b:2b:
5b:57:9c:1c:7f:71:37:48:32:8a:d9:50:1e:f9:f8:
66:6a:8e:54:60:ac:47:4a:80:5d:b1:39:3d:fd:d7:
3d:15:d4:01:43:e3:79:7e:9e:27:cd:69:4f:34:2d:
77:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:60:B2:DC:82:C0:FA:00:42:1D:A0:DB:D4:43:36:3C:66:28:21:66
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cWCy3ILA-gBCHaDb1EM2PGYoIWY.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
c5:ce:1e:e7:33:1d:b7:06:2c:b6:0b:7b:11:3e:e1:76:21:a6:
b7:9d:8b:1f:aa:a7:01:24:8b:cf:a0:ec:a2:a8:50:1a:ba:9f:
dc:eb:42:d3:db:1c:f6:2e:37:c7:dd:fa:d5:5a:a8:ed:6f:a1:
3e:cd:bf:a7:a4:39:63:16:62:38:b8:b9:2d:f4:ec:bb:c8:6b:
71:c1:7d:dc:b6:88:ba:31:a9:3d:95:ce:5a:54:ff:45:f2:94:
a0:48:62:1e:0a:bd:c5:4c:d8:b3:41:29:ee:66:e0:93:ad:8f:
bc:5b:71:6e:ff:f9:1d:03:25:a5:9f:dc:da:31:e5:f4:c4:d5:
40:c8:90:90:77:19:c4:92:37:e3:cb:00:09:14:3b:d5:22:7f:
8f:ce:c1:9f:e2:c2:77:b3:d8:fe:0a:cf:3f:31:4d:bb:ab:75:
18:5e:7f:51:24:84:fd:26:ff:fd:d8:f4:7b:b8:72:5f:00:ca:
a8:3d:f7:d9:c0:34:83:17:57:79:81:44:c1:76:94:d6:c8:e6:
f4:3d:43:54:e2:61:6f:e9:22:8b:4d:9a:66:af:2c:5c:84:03:
66:6c:7f:bb:15:be:b5:e1:68:6b:1e:83:37:92:fe:4b:b6:ec:
13:bb:e7:ac:f5:9e:9a:45:78:6b:31:e1:e6:7b:ca:68:04:09:
16:e9:f6:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 17 05:04:34 2024 by rpki-client on console-fra.rpki-client.org