Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/dtJ4F7YPNVFGboDQYsRp-SIjdNc.roa
File: dtJ4F7YPNVFGboDQYsRp-SIjdNc.roa (raw, json)
Hash identifier: HL2dG5MZJRI3E5WlauN3cpZ4QiDsNvY6p0omKGsG3Rc=
Subject key identifier: 76:D2:78:17:B6:0F:35:51:46:6E:80:D0:62:C4:69:F9:22:23:74:D7
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0914
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/dtJ4F7YPNVFGboDQYsRp-SIjdNc.roa
Signing time: Thu 24 Oct 2024 07:55:02 +0000
ROA not before: Thu 24 Oct 2024 07:55:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 24 Oct 2024 11:55:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2324 (0x914)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Oct 24 07:55:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=76D27817B60F3551466E80D062C469F9222374D7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:f7:87:f7:78:fc:c4:57:27:55:90:ba:52:94:
cd:1c:48:5d:5f:e6:63:37:20:cf:1f:98:7a:45:8a:
29:fb:71:ea:31:19:8b:6c:c1:91:bc:7f:f6:2c:dd:
e4:35:4b:68:38:d3:bc:4b:b0:6b:1f:7d:0f:df:29:
9d:d1:44:52:ba:b2:fa:16:bd:6a:22:8a:57:de:e8:
e9:ed:5f:ca:c8:f3:56:39:99:72:15:24:57:78:29:
60:da:9f:b9:3d:b1:25:1b:91:ab:5d:46:eb:fb:af:
a8:a1:70:64:17:5e:ad:f0:74:e2:d3:42:b9:02:e9:
6a:04:19:77:af:52:66:3e:a3:ef:d6:b5:ed:d1:9d:
1c:96:0b:6e:34:6c:a1:b2:4f:fc:61:3c:66:5c:b7:
56:4b:46:eb:b9:da:ec:8c:bc:64:58:a0:f4:d1:61:
f1:10:e3:7c:7f:9b:0a:1a:6f:07:c7:98:03:cf:58:
c1:8d:34:15:48:11:05:84:f5:f7:0c:cb:db:b2:5a:
77:20:bb:fe:c5:b6:1f:f2:57:f4:84:af:23:47:7f:
9a:bf:77:b7:41:51:e3:5b:16:8d:68:cd:e9:af:aa:
b6:f7:06:0e:65:09:17:b3:37:91:a1:dc:10:d9:cf:
99:3a:61:88:5f:e3:a9:1d:c5:ab:e6:0f:c6:dc:7b:
b5:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:D2:78:17:B6:0F:35:51:46:6E:80:D0:62:C4:69:F9:22:23:74:D7
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/dtJ4F7YPNVFGboDQYsRp-SIjdNc.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
68:74:6a:c4:57:b6:40:72:04:f7:1f:5e:af:7f:3c:4a:cd:5e:
06:6f:54:4e:74:52:bf:a4:fd:4d:78:04:36:20:b5:71:a9:a7:
20:08:b7:96:36:7e:ae:b7:da:df:79:00:ef:bc:5b:a6:a9:4d:
3f:7f:9e:c3:ac:d2:68:83:db:ee:85:28:60:c6:6e:c5:0a:0c:
f1:17:4f:59:40:2b:80:b6:26:11:70:20:58:a0:ef:fb:45:86:
38:16:a4:38:28:bf:31:df:fe:54:3b:cd:d0:cb:fb:1b:3c:f0:
71:15:51:19:82:78:18:03:6a:ff:f5:a4:c7:6f:7e:7c:61:cf:
97:4f:d4:2e:e8:5d:d4:e8:f3:f9:40:22:d2:d7:ec:e2:c0:71:
02:2e:a1:8a:35:f7:15:61:58:2a:13:de:c3:51:20:fa:29:4a:
66:25:d9:45:4b:ad:7c:fa:99:51:19:e9:9b:38:86:2c:9b:3b:
5d:9a:c8:f9:dc:fa:08:52:e6:25:77:5b:72:75:c1:99:9b:4b:
ba:54:8e:45:13:a4:37:6f:54:05:92:0a:07:4d:da:e8:15:29:
a6:dd:46:d5:db:e5:35:ec:63:70:60:5c:fe:5f:05:bc:2f:b1:
b0:ae:76:46:0c:75:c5:4f:81:65:33:c0:86:26:33:8d:d6:06:
71:99:bd:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 24 16:00:43 2024 by rpki-client on console-ams.rpki-client.org