Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/lwuR-iSPtsJhMAESgvLalmVQ6HA.roa
File: lwuR-iSPtsJhMAESgvLalmVQ6HA.roa (raw, json)
Hash identifier: tAWkmzviqBDXjjWvpHVWqaGzuQZTUVx60Lqzfkt2hrE=
Subject key identifier: 97:0B:91:FA:24:8F:B6:C2:61:30:01:12:82:F2:DA:96:65:50:E8:70
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 084D
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/lwuR-iSPtsJhMAESgvLalmVQ6HA.roa
Signing time: Wed 02 Oct 2024 07:55:03 +0000
ROA not before: Wed 02 Oct 2024 07:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 02 Oct 2024 11:55:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2125 (0x84d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Oct 2 07:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=970B91FA248FB6C26130011282F2DA966550E870
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:08:2c:d6:7e:f0:6d:43:34:a3:9d:d3:28:a6:
07:06:a9:3c:dc:1d:45:a9:e4:45:cc:72:c1:a3:fd:
6a:e0:2b:95:99:1a:9e:b8:44:bf:73:27:79:68:1f:
bf:f4:f5:67:2f:5e:26:61:31:80:74:cd:d9:de:c9:
7e:11:0e:d7:04:b8:61:d7:fa:86:6b:60:29:b6:01:
35:9b:ba:c1:cf:19:ea:57:46:9e:4e:54:6d:e1:b6:
71:b3:0c:4b:c8:10:ce:45:c2:ca:9c:9d:60:60:a9:
b0:e7:02:ef:f6:83:fe:00:35:0c:01:02:b6:49:31:
9f:31:db:6b:41:af:46:12:a2:f0:cf:94:71:fb:94:
41:f6:1e:bc:fc:2b:5e:7a:a0:93:6a:a9:86:1f:6e:
de:51:ef:36:c9:f0:53:18:ca:2a:3d:ad:db:71:f2:
17:96:57:f6:f2:72:53:65:15:a2:90:4e:96:05:04:
31:f4:1c:48:14:d1:69:4f:3c:3e:95:02:eb:0e:1c:
46:5d:6b:a0:60:1c:92:ac:21:a7:dc:ec:35:41:02:
d1:e2:7e:b5:f3:7e:f4:b3:8b:35:e8:d8:b5:bf:c0:
d5:72:dc:ce:20:ab:a4:24:5b:71:fb:c0:5b:69:1d:
a8:a2:f8:81:e7:83:66:59:c9:6b:3f:32:2a:c4:d2:
76:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:0B:91:FA:24:8F:B6:C2:61:30:01:12:82:F2:DA:96:65:50:E8:70
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/lwuR-iSPtsJhMAESgvLalmVQ6HA.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:80:fc:93:4c:c3:c8:c1:64:26:9c:68:f4:5a:0a:1b:66:bb:
c1:06:2d:87:39:5b:d0:80:46:fa:28:f8:0f:a6:2b:0a:cd:70:
d1:5c:c4:cc:a7:e6:81:d9:f2:15:ca:a2:2e:ca:b8:aa:e6:f4:
38:1c:26:13:fc:29:eb:56:cc:67:2c:da:4b:63:71:9f:7d:b5:
00:0a:4b:26:d3:78:a3:8f:7f:f0:45:7e:7f:7d:ef:ae:81:e6:
06:84:73:72:39:dc:8d:bf:a3:51:c8:fc:32:73:60:d8:69:55:
44:a2:59:7d:1e:b5:7e:27:cf:f1:19:15:9a:b0:8e:9a:62:29:
c9:a2:cb:c3:d6:f6:02:83:53:27:53:f5:06:88:42:fb:c0:f9:
c0:e6:75:8e:1c:46:37:e5:c2:50:d3:e1:0c:dd:5b:b9:01:ab:
a2:d0:f3:e0:58:d3:96:96:4e:0e:68:bf:86:37:49:c9:97:82:
28:d1:41:5a:e2:a1:de:5c:3a:0e:7c:53:13:70:ab:75:5c:05:
af:2e:d2:25:8b:36:63:ed:0d:da:1b:73:27:18:c1:b2:91:da:
6a:de:77:ac:93:86:bb:67:77:2f:09:86:90:9b:90:fc:57:b4:
ef:b3:30:6b:d5:35:38:a5:43:8f:0a:0d:dc:c1:35:de:b1:82:
dc:f9:16:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 2 17:25:49 2024 by rpki-client on console-ams.rpki-client.org