Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/kX8RMpgqv1NUUntGGtN7fIaBg7A.roa
File: kX8RMpgqv1NUUntGGtN7fIaBg7A.roa (raw, json)
Hash identifier: Jiiye0tHnZGNEqkr4Bup6oQL7scUXlx+jns7d7S9grY=
Subject key identifier: 91:7F:11:32:98:2A:BF:53:54:52:7B:46:1A:D3:7B:7C:86:81:83:B0
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 077B
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/kX8RMpgqv1NUUntGGtN7fIaBg7A.roa
Signing time: Sun 08 Sep 2024 23:55:03 +0000
ROA not before: Sun 08 Sep 2024 23:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 09 Sep 2024 03:55:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1915 (0x77b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Sep 8 23:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=917F1132982ABF5354527B461AD37B7C868183B0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:7f:17:9e:c5:7b:ce:42:bc:5b:1e:04:de:80:
05:ae:88:07:70:78:21:72:a5:76:97:a3:3f:25:d5:
01:1d:8a:00:f5:e9:c0:56:a6:1b:0e:5c:ea:2a:4e:
27:d9:8d:57:7a:97:e5:b7:00:3a:ae:1b:5b:ee:d7:
4b:e8:2b:4f:18:b1:fb:b7:cc:65:c7:f2:15:49:6a:
ab:6b:19:97:a3:57:bc:07:1f:46:a8:9d:f9:d5:0e:
cf:6b:46:f3:68:cd:ec:e3:99:2c:2a:c2:80:5f:37:
c3:de:7c:f8:e1:3b:c5:e6:6b:88:d6:01:ee:f6:a2:
0f:b6:4a:90:e2:4b:d8:10:3c:31:a4:0c:3f:c8:2b:
f7:79:8f:0e:ca:9b:d8:8e:d5:b1:3c:46:34:6d:62:
e9:7d:14:72:ac:d3:65:0f:97:50:06:67:18:33:32:
f7:e6:36:84:2e:78:55:51:88:96:9e:cd:59:e2:49:
7e:7e:f6:f9:7a:1e:b2:17:bb:ed:db:dd:6a:0e:ea:
8f:6b:1a:b4:89:66:36:37:a5:ca:f2:3b:09:a4:6d:
74:fe:80:88:81:34:6d:e0:d4:7f:04:94:ce:06:b4:
8a:8a:8a:e1:b1:25:00:fb:cb:34:59:fa:a7:a4:f8:
3c:af:9c:94:fc:70:bf:89:6b:0f:31:e3:27:ed:db:
69:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:7F:11:32:98:2A:BF:53:54:52:7B:46:1A:D3:7B:7C:86:81:83:B0
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/kX8RMpgqv1NUUntGGtN7fIaBg7A.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
80:13:95:de:3e:1b:15:ee:73:dc:82:53:37:1d:9d:9b:b6:f5:
46:f3:5a:ed:92:0a:5d:2c:ff:13:17:8c:36:36:c7:37:fe:84:
bc:c3:74:68:ea:c0:e2:46:0a:03:04:97:93:7c:06:e8:5f:e8:
b2:f1:4a:8e:94:34:2e:97:43:ef:73:13:65:b6:97:25:2f:49:
3a:79:2a:6a:a3:a4:76:2a:93:49:2b:f2:59:f0:a8:02:3c:ec:
06:de:d4:90:d8:18:fd:36:c6:86:41:43:66:63:f1:37:5a:21:
84:5e:a5:55:be:b3:9d:5f:b0:cd:78:71:45:48:21:2f:d6:de:
a9:4b:6e:07:68:41:57:38:76:c4:8d:c6:0a:f6:0d:ad:22:89:
76:68:6f:b5:cc:b4:d2:da:27:86:fc:13:c4:df:eb:2b:ba:04:
6b:47:0f:67:8d:98:74:83:b0:d5:5c:7f:ca:f1:d3:0b:05:64:
bd:62:27:52:5f:a2:ba:25:92:cf:01:c8:63:0b:9a:fb:44:1e:
e7:51:75:a7:e3:c8:6c:be:16:61:bf:58:5a:7b:94:c1:28:5e:
87:cb:46:6b:b6:6b:42:05:7f:1d:8c:bd:17:e2:8f:cf:e8:ef:
8b:bd:87:78:7f:b7:cc:00:a7:d3:30:4a:a4:82:7f:28:1a:58:
37:2e:89:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 9 05:19:31 2024 by rpki-client on console-fra.rpki-client.org