Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/mROWS6KKRhU8vhodwV-nlFj8Un8.roa
File: mROWS6KKRhU8vhodwV-nlFj8Un8.roa (raw, json)
Hash identifier: u3e834FSFiPrXG8MXkCSCuuMR0GLvRUIN8/ZAwZk7iU=
Subject key identifier: 99:13:96:4B:A2:8A:46:15:3C:BE:1A:1D:C1:5F:A7:94:58:FC:52:7F
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0664
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/mROWS6KKRhU8vhodwV-nlFj8Un8.roa
Signing time: Thu 08 Aug 2024 23:55:03 +0000
ROA not before: Thu 08 Aug 2024 23:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 09 Aug 2024 03:55:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1636 (0x664)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Aug 8 23:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9913964BA28A46153CBE1A1DC15FA79458FC527F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:23:c2:5a:92:18:44:25:cd:ee:c2:6a:5a:62:
5b:66:65:7f:24:b3:24:c2:c7:8a:ec:74:66:3c:ab:
46:e5:d7:67:7e:8a:31:66:8c:5c:10:9f:18:b3:e3:
62:b9:38:6e:7f:f0:3d:cc:8c:eb:e2:16:68:de:82:
83:7e:b8:93:f3:67:74:3e:d6:c4:f4:3c:88:c7:b5:
28:74:75:d2:83:6f:7f:19:0b:5a:e0:e0:13:7a:ab:
d2:47:91:ba:04:df:83:18:96:70:a9:76:7d:b9:c0:
5f:84:24:ea:74:8f:bf:8c:9e:88:10:cb:7e:09:38:
50:1f:aa:e1:e0:45:f6:9d:29:6e:6e:3e:24:e9:3b:
44:d8:43:38:27:f2:e3:61:2a:e4:12:7c:cf:22:08:
2b:4c:21:4b:6d:af:20:53:c3:e8:25:f4:2a:4d:2b:
c4:da:22:fb:c0:07:36:68:5f:b3:80:15:77:5d:5d:
86:d7:07:df:78:8b:ae:53:f5:14:a8:c4:7c:8c:d8:
80:37:25:b3:40:f4:40:c8:aa:fa:6f:c8:07:92:35:
95:9b:e3:b7:8f:b4:ae:fd:75:77:8e:39:ec:6c:3e:
2a:b3:71:27:f9:e0:35:82:9a:25:f5:81:92:7b:25:
ac:61:6e:17:7d:2f:16:4d:ee:f3:82:0c:89:8f:ca:
fa:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:13:96:4B:A2:8A:46:15:3C:BE:1A:1D:C1:5F:A7:94:58:FC:52:7F
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/mROWS6KKRhU8vhodwV-nlFj8Un8.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
c0:b0:2c:fa:ea:d9:7d:7d:ef:a2:f8:aa:ab:fb:a8:15:a0:a7:
bd:d7:4e:67:61:a6:08:9e:0d:8c:80:e7:1f:83:bc:66:ef:0f:
1b:96:dc:46:25:32:4e:4c:17:7b:15:53:de:0d:b5:36:5c:97:
ef:08:3b:95:aa:f3:b7:19:01:7d:a5:f0:37:a6:3e:1c:42:9c:
c2:88:54:e0:13:d1:aa:f7:23:35:09:54:dd:fe:49:0c:3c:77:
d7:92:e7:04:8d:bb:77:6a:54:70:10:74:97:f5:68:c3:11:f9:
31:55:76:c4:17:34:10:f2:bf:eb:16:09:35:b8:dd:2c:70:40:
d3:30:dc:93:4b:46:1a:40:23:9e:1e:4e:91:1f:97:4f:d3:29:
d7:76:f0:e7:18:ec:ec:9f:03:ae:9f:5c:dd:b2:24:44:a0:18:
58:5a:27:3b:62:1e:eb:55:4a:b7:db:01:8e:91:60:da:6a:bc:
58:2b:df:9b:24:6a:2e:d3:b2:a4:7b:7d:47:fe:03:5e:6a:fa:
58:21:52:ec:f6:ee:e2:35:69:1e:ee:6a:54:0f:9e:17:72:d6:
1c:a3:26:d6:12:ba:10:c7:81:e0:02:e9:61:e4:8a:01:84:52:
8b:9a:d3:90:b7:47:dd:de:b5:b7:0c:85:88:bc:30:31:1b:20:
dc:56:ff:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 9 05:55:27 2024 by rpki-client on console-ams.rpki-client.org