Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/ivO5euTUilFYxOxMlAB6QWgrzLg.roa
File: ivO5euTUilFYxOxMlAB6QWgrzLg.roa (raw, json)
Hash identifier: hyVJ8RQlZYjLbwGBQGifUJLYH6lWX5tPTCFlNs8Tvzw=
Subject key identifier: 8A:F3:B9:7A:E4:D4:8A:51:58:C4:EC:4C:94:00:7A:41:68:2B:CC:B8
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0748
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/ivO5euTUilFYxOxMlAB6QWgrzLg.roa
Signing time: Tue 03 Sep 2024 07:55:03 +0000
ROA not before: Tue 03 Sep 2024 07:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 03 Sep 2024 11:55:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1864 (0x748)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Sep 3 07:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8AF3B97AE4D48A5158C4EC4C94007A41682BCCB8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:35:78:7f:b2:04:fb:a3:f2:d6:46:bb:54:f5:
99:22:96:3b:60:ea:64:d1:41:ef:68:34:31:b5:f9:
67:47:d2:3d:bc:87:36:ac:2c:9a:7b:5f:06:f2:1d:
c0:24:f9:fb:29:d4:b5:d3:66:87:af:49:02:96:09:
47:50:05:f4:09:98:57:76:69:51:af:2e:ef:0a:c0:
c0:b7:7f:f6:0b:9a:7a:6b:59:4c:2d:c5:1a:e7:21:
9f:f7:44:79:7f:36:d4:8d:96:70:c7:05:98:16:c9:
3f:ce:31:aa:8f:59:12:b9:04:44:b5:2f:a2:97:76:
26:6d:2a:94:62:f1:c5:e2:83:a1:9f:60:7b:66:97:
04:8e:58:d7:71:a5:04:29:9b:8a:6c:c3:b8:a1:d6:
aa:91:3c:77:a4:bf:87:72:c4:b9:84:8d:6a:f7:e1:
e5:f8:aa:5a:f8:81:63:d7:75:37:2f:cc:bf:b3:72:
76:e8:17:bf:18:55:cc:61:f1:12:81:74:7c:cc:35:
b6:74:57:56:0b:d3:39:9d:ae:f6:43:22:12:54:54:
94:9e:1e:6e:51:51:a5:5f:5f:1d:53:8f:5a:49:9c:
01:8f:19:8b:8e:bb:74:b3:56:78:15:93:cd:48:3f:
2f:88:6a:86:ea:e0:a0:a5:d2:12:ee:33:29:42:36:
bb:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:F3:B9:7A:E4:D4:8A:51:58:C4:EC:4C:94:00:7A:41:68:2B:CC:B8
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/ivO5euTUilFYxOxMlAB6QWgrzLg.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:b6:c1:f2:c6:24:3f:26:10:02:ee:37:22:12:79:c8:04:d6:
87:52:28:f5:41:95:1c:e9:c8:51:bd:dd:af:34:f6:0b:db:3d:
47:01:7d:9a:78:e7:37:06:ad:ff:2b:cb:d1:fb:03:2b:a3:d7:
a9:fb:5f:57:c8:86:3d:b9:88:36:16:03:bd:bd:bc:7a:ae:f0:
0d:fe:f4:3d:5e:1b:53:86:bb:50:c1:90:8f:28:43:2d:96:7a:
60:94:e5:83:29:b9:f1:fe:b3:47:5b:8a:11:5f:59:ab:fc:82:
23:90:8e:64:b4:71:41:17:98:f4:bd:25:b6:b4:c6:ea:71:92:
73:34:8a:11:e0:cf:a2:d4:ff:52:57:28:57:96:5c:af:f8:ba:
49:4c:c8:08:aa:b6:cf:0f:b6:d4:1b:9d:36:f5:3b:01:b7:c2:
9d:e4:15:90:05:56:93:96:b7:41:77:d3:85:3c:85:e2:02:f3:
fd:c7:9a:6f:79:8b:55:38:60:6b:b7:3b:cb:9c:ee:8b:b6:42:
51:7b:ef:0b:c8:94:b2:60:2a:86:3e:bf:a6:33:01:fc:ac:4f:
47:fd:2e:ed:13:3e:ff:75:3d:3b:af:7a:64:4e:88:a7:15:0a:
1e:51:c5:3a:af:c7:95:f1:ad:f7:29:df:72:ff:1d:a6:b6:64:
51:b4:b1:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 3 14:51:05 2024 by rpki-client on console-ams.rpki-client.org