Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/fk8V6vL1D_g4SFYmkLCeWIVOhPc.roa
File: fk8V6vL1D_g4SFYmkLCeWIVOhPc.roa (raw, json)
Hash identifier: rIqnEieJsHt0ypqzXIJgoxlyT8/OR3imnIIxXIEf6UM=
Subject key identifier: 7E:4F:15:EA:F2:F5:0F:F8:38:48:56:26:90:B0:9E:58:85:4E:84:F7
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 099B
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/fk8V6vL1D_g4SFYmkLCeWIVOhPc.roa
Signing time: Fri 08 Nov 2024 07:55:02 +0000
ROA not before: Fri 08 Nov 2024 07:55:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 08 Nov 2024 11:55:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2459 (0x99b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Nov 8 07:55:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7E4F15EAF2F50FF83848562690B09E58854E84F7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:9f:bb:fb:26:36:7e:71:43:40:db:0f:ea:1a:
78:41:1a:87:47:bd:fe:68:c7:3f:0e:4b:a8:2c:d7:
84:09:d4:dc:a5:42:9b:4a:97:40:1c:5b:c1:7e:2c:
22:fc:29:f8:75:87:c0:1f:64:1f:79:1c:65:b9:f6:
cd:c4:e5:81:9b:3d:af:cc:03:b3:a5:6f:9d:05:1a:
f2:31:24:d1:1a:4e:af:30:a0:3c:34:eb:11:84:57:
41:4a:50:2f:bb:2f:5e:fa:91:77:40:f7:50:ad:15:
f6:fc:ef:72:ef:d9:80:7f:c3:da:26:7c:92:de:1b:
df:e7:dd:86:a5:78:48:b4:75:3a:9c:d7:67:70:c7:
5b:ea:00:c0:76:e4:a7:d4:44:3c:a9:b6:06:6b:fb:
06:9a:60:b9:4b:5b:08:09:65:06:ae:a7:c2:91:f7:
c1:d2:bc:bf:d0:f1:8d:3a:be:06:89:69:7e:ab:35:
04:a8:9c:fd:99:0f:f0:4b:3f:4d:42:53:7e:a5:fc:
1e:ef:f1:74:09:e9:55:d7:7f:61:68:e3:86:34:d6:
2f:71:ce:00:43:b4:f5:35:d5:57:81:28:cd:7f:b0:
81:7b:23:4f:6b:6a:72:b0:d3:38:55:31:83:6f:ca:
15:3b:50:51:3a:4e:9a:df:9b:1a:ac:da:dd:55:3d:
d4:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:4F:15:EA:F2:F5:0F:F8:38:48:56:26:90:B0:9E:58:85:4E:84:F7
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/fk8V6vL1D_g4SFYmkLCeWIVOhPc.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
26:d9:e7:50:75:e0:f4:6c:4d:8e:36:1c:e2:6a:48:09:a5:1c:
f1:cd:9c:27:4a:a9:f2:35:4d:3a:07:2f:16:86:c9:50:f7:fd:
0a:77:7f:20:03:1c:ab:92:1e:db:30:f9:ee:1f:c1:56:a8:78:
18:a7:a1:45:a3:e3:4b:13:ca:22:44:d5:9b:c9:7a:c6:f3:6d:
aa:5d:06:1f:c0:6b:cf:a5:53:e0:3d:1e:88:71:1c:7f:8f:8f:
02:19:26:5f:74:03:58:01:c2:0b:2d:eb:99:23:72:5b:db:ad:
6a:54:66:bf:b3:22:dd:c6:0a:41:c3:07:42:64:50:96:ad:78:
bd:a1:93:7e:c9:78:d5:37:79:e1:cc:f7:f1:5e:c5:73:c7:4c:
84:f7:0a:11:66:3f:2b:b0:f3:fe:66:e6:5a:82:9d:5e:bf:c8:
d3:7f:ae:21:c6:57:a8:bb:17:48:5e:f4:d5:6a:f7:57:63:9c:
88:c4:e5:0b:56:12:5c:a6:d1:a7:ff:ec:d6:26:bf:a8:b7:a8:
aa:89:84:86:53:7f:7e:22:4a:43:88:65:19:ae:49:b3:92:84:
7b:5d:79:93:38:09:a5:80:4f:fc:e1:5c:af:ab:e2:4a:8a:bb:
e4:b4:11:01:2f:7d:07:d6:d7:99:ca:62:4c:94:d7:ae:26:56:
d0:91:3c:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 8 14:54:57 2024 by rpki-client on console-fra.rpki-client.org