Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/lqDXMaNgy-QV0Zw2OeIgXQuZCcY.roa
File: lqDXMaNgy-QV0Zw2OeIgXQuZCcY.roa (raw, json)
Hash identifier: w1u5thI/9YMwKcLqhgxGy9VFiMfNDiY15/aTcSauTB8=
Subject key identifier: 96:A0:D7:31:A3:60:CB:E4:15:D1:9C:36:39:E2:20:5D:0B:99:09:C6
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 08F2
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/lqDXMaNgy-QV0Zw2OeIgXQuZCcY.roa
Signing time: Sun 20 Oct 2024 15:55:02 +0000
ROA not before: Sun 20 Oct 2024 15:55:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 20 Oct 2024 19:55:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2290 (0x8f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Oct 20 15:55:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=96A0D731A360CBE415D19C3639E2205D0B9909C6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d8:ea:4e:80:8c:16:45:b4:0b:1a:83:c4:ad:
1d:52:45:47:45:c6:aa:18:26:54:01:af:ea:82:8c:
16:4d:20:84:89:e3:89:b5:1f:54:42:e0:08:90:94:
75:1c:17:4e:f7:91:f4:25:8b:ff:7b:83:83:8f:9f:
12:1a:a5:2a:43:87:72:1b:88:d5:b3:ce:27:30:59:
4e:ea:3a:ab:42:69:3f:b5:12:e9:b8:a9:31:d8:17:
5e:12:7c:fa:1b:54:0f:46:49:c3:1d:53:f8:cd:77:
30:bb:33:00:95:7f:22:e4:75:f8:61:9c:88:67:3c:
a2:ca:a4:cf:05:7f:5e:dd:46:1a:19:8c:d6:7e:e5:
6f:20:51:5c:79:a0:e7:4b:79:a8:05:85:04:4a:c8:
1c:75:5a:8f:da:9f:c9:7f:07:9d:28:b4:fb:8c:f9:
26:2d:23:7d:23:b9:f1:64:09:f8:92:99:f0:2b:81:
80:89:c3:f2:f7:33:12:9a:e2:7a:5f:72:f5:0c:66:
28:ae:b9:29:02:7f:4b:a9:fb:90:3c:3a:ff:59:6b:
29:3a:c7:81:4e:3b:21:37:57:da:e2:c9:4f:2c:85:
c3:d0:b7:9b:8b:03:a8:11:18:e9:ca:54:0c:63:11:
ce:e6:9a:83:e5:e9:7e:c1:20:8b:58:3e:15:9d:04:
cd:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:A0:D7:31:A3:60:CB:E4:15:D1:9C:36:39:E2:20:5D:0B:99:09:C6
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/lqDXMaNgy-QV0Zw2OeIgXQuZCcY.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
c1:b5:33:d3:a5:c4:92:88:cc:ad:94:e0:38:23:8c:3a:59:d9:
96:d8:a4:7f:b9:4d:02:19:88:a1:54:31:ec:2a:33:1e:ac:49:
8b:7e:79:e7:a4:73:4a:a5:6a:d2:c5:a6:a5:2e:74:b5:30:4b:
63:df:89:5d:75:ed:94:d0:dd:90:d9:bd:d8:d2:3d:da:72:26:
a4:dd:1b:b4:a8:79:69:2e:06:b5:d1:40:37:1d:6d:6c:92:05:
5f:5f:03:f0:af:95:85:74:c4:c8:c8:71:80:05:d9:d8:62:36:
b3:e1:d6:01:e5:d3:bc:ac:cd:b4:e3:c9:7d:21:d9:eb:9f:83:
e4:9d:09:54:54:96:f2:e1:b4:83:eb:8e:74:8f:71:bd:60:ac:
3c:32:7d:5c:75:d1:40:dc:ea:5d:51:7e:e5:7d:c7:57:1e:10:
14:4e:98:99:2c:d9:04:1e:f3:b3:c1:c7:8a:18:62:bf:f9:ab:
11:e0:70:56:97:9f:f8:1c:62:d1:3f:c7:d7:19:88:04:2b:99:
ef:52:a1:38:31:31:16:c7:34:d4:b9:ad:62:13:a7:9a:dc:c3:
7d:88:3a:e3:f9:98:00:23:62:a2:db:ae:1b:85:24:e6:b1:3c:
2c:a0:1b:24:f3:02:89:ca:93:91:a4:62:f8:1a:33:8e:9a:cd:
2b:55:d6:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 20 21:28:24 2024 by rpki-client on console-ams.rpki-client.org