Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/lxV5bj2PH61L7F7NJczvrDUIIPQ.roa
File: lxV5bj2PH61L7F7NJczvrDUIIPQ.roa (raw, json)
Hash identifier: 6n+lfjr/diANcv+GtXTxvxYWfFNhhD5N4AjZMLMpizc=
Subject key identifier: 97:15:79:6E:3D:8F:1F:AD:4B:EC:5E:CD:25:CC:EF:AC:35:08:20:F4
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 06BE
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/lxV5bj2PH61L7F7NJczvrDUIIPQ.roa
Signing time: Sun 18 Aug 2024 23:55:03 +0000
ROA not before: Sun 18 Aug 2024 23:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 19 Aug 2024 03:55:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1726 (0x6be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Aug 18 23:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9715796E3D8F1FAD4BEC5ECD25CCEFAC350820F4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d0:8e:82:2d:bf:5d:1a:87:e2:9a:6a:5c:54:
65:51:32:55:08:ab:52:d6:41:f6:46:d3:c7:4f:81:
47:0d:9b:c8:74:dc:84:bb:aa:a4:c3:44:94:64:c9:
52:3e:7c:fe:e6:75:6e:f9:6b:37:1d:a4:d3:37:ed:
d7:88:ce:80:3f:11:14:6d:c6:96:a2:db:45:5e:a1:
79:16:cb:cf:ad:9e:4f:bb:45:5b:4a:df:35:39:53:
b3:b5:08:e5:71:79:a2:d2:b8:6c:ea:ae:52:cf:16:
83:d6:30:14:b2:2d:73:31:c3:98:c8:f2:69:d0:7a:
d0:40:ed:b4:95:54:13:c4:48:8b:dd:e8:55:7e:ca:
d5:d5:be:5d:6f:8a:23:89:64:6a:db:b3:49:c5:fc:
61:a2:9c:86:74:af:11:71:c4:65:d9:85:c5:61:0b:
28:58:77:e3:71:b6:b1:f0:8f:73:16:34:56:0e:d0:
46:56:83:c6:97:9b:fe:ac:64:ed:95:f8:af:62:b8:
8c:39:44:9b:fe:4a:7c:b1:ac:dd:9b:8c:56:89:0a:
6f:b7:41:0a:c2:46:5c:7f:c0:18:f2:2b:7f:d8:8e:
8a:21:f4:bf:08:fa:a3:9a:51:f3:98:80:29:8b:39:
43:fc:91:ae:97:e7:20:ce:d8:66:6c:23:9c:df:28:
1b:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:15:79:6E:3D:8F:1F:AD:4B:EC:5E:CD:25:CC:EF:AC:35:08:20:F4
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/lxV5bj2PH61L7F7NJczvrDUIIPQ.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:e6:c7:2c:f7:b2:5b:d4:c4:2a:4f:7f:77:58:e6:40:e1:48:
3a:e5:ee:30:58:a4:46:1c:00:65:94:5f:70:83:58:17:49:b4:
b2:67:70:ed:3d:a2:e9:a8:20:db:b6:a1:3a:50:7b:92:17:00:
54:a7:ec:a2:75:22:86:f1:57:08:e0:99:fb:8f:9b:1f:af:97:
40:23:6d:de:06:22:1b:74:b4:3a:88:39:b0:b9:1b:87:3a:05:
a8:26:20:90:1a:13:6e:62:d5:8a:d8:5a:a0:2f:c0:4a:1d:ae:
1c:f5:3b:9f:d7:45:8c:e6:24:0b:53:56:1d:83:67:88:df:7d:
cf:f5:55:6f:cf:e0:ff:7d:06:36:c3:69:70:72:c2:b4:e5:bc:
4f:d2:77:2b:57:76:e3:5c:de:a0:78:81:9f:2e:93:9a:1e:92:
b8:55:fc:6c:e9:a7:5b:ae:d9:1e:14:4c:fd:2a:8a:de:2b:f4:
03:91:e3:96:09:25:e8:ef:36:f5:ee:29:08:4d:e6:28:70:b3:
e4:01:69:29:6a:15:1e:dd:0a:fe:35:d8:3d:32:d9:6b:e2:cf:
02:87:0d:c8:43:96:c2:c2:73:92:da:35:c2:1f:0e:05:be:b0:
4c:dc:b4:ec:46:20:06:32:f7:ae:f2:c8:34:d3:4d:30:9d:b1:
cd:c6:1e:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 19 07:21:24 2024 by rpki-client on console-ams.rpki-client.org