Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/mOFTC85oG5CUiaR15y0Qb9FFwvY.roa
File: mOFTC85oG5CUiaR15y0Qb9FFwvY.roa (raw, json)
Hash identifier: HUeRdmk9kpEM+Z5jDay83mUUq5gkBcLqJZy3PLS/lHU=
Subject key identifier: 98:E1:53:0B:CE:68:1B:90:94:89:A4:75:E7:2D:10:6F:D1:45:C2:F6
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 047B
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/mOFTC85oG5CUiaR15y0Qb9FFwvY.roa
Signing time: Sat 15 Jun 2024 15:55:03 +0000
ROA not before: Sat 15 Jun 2024 15:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 15 Jun 2024 19:55:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1147 (0x47b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Jun 15 15:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=98E1530BCE681B909489A475E72D106FD145C2F6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:f8:ce:b2:33:ff:21:1c:10:a8:ee:3b:45:be:
53:2e:b4:e1:f8:0e:4a:ac:34:9e:2f:9e:96:ac:be:
7a:ef:5b:94:db:36:57:89:b5:ca:39:43:66:c0:21:
4c:78:b6:45:20:61:cb:02:ac:a2:01:55:41:94:93:
1b:36:59:58:89:c6:bc:9c:a6:ac:25:55:36:7d:dc:
84:9f:df:0c:de:af:25:cc:78:3d:da:5b:c1:bb:f9:
b1:c5:9d:81:52:2c:01:f1:d9:cc:4a:10:6e:d7:b1:
a6:b0:83:55:d5:a7:6d:9e:19:c8:1b:5b:3c:dc:1e:
72:8c:4e:de:b8:83:c5:a1:07:15:b8:3c:e5:a4:39:
00:b8:a2:b9:ae:b6:81:16:85:3d:0d:43:b1:a8:8c:
34:e7:73:6f:b4:6b:0c:cc:66:38:2d:de:6e:79:ac:
53:94:4f:79:c0:55:6d:c1:b7:38:d7:9f:40:6d:4c:
fd:f7:9b:86:07:29:14:8a:e0:ec:db:e6:6e:f2:14:
54:d6:ca:5d:e5:51:33:d6:54:db:69:63:f7:39:38:
c7:e8:f1:7c:81:37:51:a4:97:20:5e:fe:0e:0f:37:
a7:70:08:be:92:07:4f:4a:dc:36:85:13:50:7d:0c:
aa:ee:b3:39:ba:21:c7:2d:08:92:c4:7d:c5:85:d3:
00:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:E1:53:0B:CE:68:1B:90:94:89:A4:75:E7:2D:10:6F:D1:45:C2:F6
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/mOFTC85oG5CUiaR15y0Qb9FFwvY.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
c4:42:2f:2e:b3:27:2f:8d:6a:bc:2d:a4:1d:90:fd:53:db:e8:
bd:2a:9e:34:18:92:a8:5b:e1:10:06:5d:8a:e8:ad:4d:6c:79:
ac:ed:18:97:14:e0:08:70:28:fa:bf:7d:26:b5:fb:0a:26:80:
23:c8:33:74:95:45:11:41:05:cf:c0:d0:9d:33:71:5d:ec:96:
05:dd:e5:ed:fa:f9:87:a1:2a:5f:59:ba:4e:37:a3:c5:78:f3:
6a:61:03:7c:c9:35:43:4a:fe:15:b2:7d:a4:d7:cc:2b:e4:39:
86:82:79:a7:25:20:36:71:3b:db:33:53:09:6f:0a:75:eb:d6:
c7:f3:17:ef:68:99:19:43:75:08:2c:07:2b:68:70:a8:dc:55:
72:7d:92:25:82:f0:66:f1:f7:88:39:d6:ce:62:49:f1:1a:20:
5d:e8:dc:ba:0e:20:48:97:28:e7:c7:a6:f1:4f:c0:01:ac:fa:
4c:8e:ea:24:83:04:2f:75:52:bb:bc:09:ab:09:27:35:f2:c1:
3b:3c:7b:81:be:8e:0d:df:3d:62:21:4d:45:27:42:91:34:fe:
89:21:41:f9:6c:02:aa:39:11:38:52:6b:63:9b:b8:ed:0d:cc:
25:fb:ce:be:bd:e6:f9:50:62:3a:0a:59:d8:e0:26:c0:cf:61:
aa:2c:67:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 22:37:47 2024 by rpki-client on console-ams.rpki-client.org