Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/mVvsnYJ9oCnyUmYBhl-2MnExPgY.roa
File: mVvsnYJ9oCnyUmYBhl-2MnExPgY.roa (raw, json)
Hash identifier: s9HsYDvxn1loNcJZh5uN+XKwbE3IdFpB60gutxjw614=
Subject key identifier: 99:5B:EC:9D:82:7D:A0:29:F2:52:66:01:86:5F:B6:32:71:31:3E:06
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0889
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/mVvsnYJ9oCnyUmYBhl-2MnExPgY.roa
Signing time: Tue 08 Oct 2024 23:55:02 +0000
ROA not before: Tue 08 Oct 2024 23:55:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 09 Oct 2024 03:55:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2185 (0x889)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Oct 8 23:55:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=995BEC9D827DA029F2526601865FB63271313E06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d8:e7:bd:27:98:7e:af:39:05:7e:42:78:26:
7f:28:f6:5a:70:0d:32:91:4d:e3:65:ae:29:c2:e7:
11:b6:e1:e5:c5:91:fe:ba:8b:8a:f0:dc:0e:8b:29:
2c:db:cc:79:9a:f3:c0:5d:dc:ff:7e:74:3a:4a:97:
bb:8c:23:16:09:b0:19:a7:87:8b:b0:21:10:e3:b2:
8e:7e:06:45:d1:b1:3a:a8:97:d7:1a:7d:1b:84:ed:
7b:ff:a9:37:90:4a:81:e2:2c:e2:59:47:cf:25:30:
b0:eb:f5:0c:6c:fc:ba:c4:b3:51:20:7b:63:f5:97:
5e:17:d5:b6:8a:f3:12:74:61:2f:5d:f1:c2:b6:b5:
d8:29:fd:7f:12:5f:26:66:19:bb:20:d2:21:34:15:
a9:cc:65:2e:56:51:03:a0:d1:ef:5f:ee:ca:0d:fe:
1a:b8:a5:5a:d4:8b:8f:ce:bc:c4:f6:a0:3c:55:f2:
ba:d4:a1:d2:37:97:86:44:56:e1:19:91:56:e0:95:
d0:b4:3f:92:56:c3:bd:44:de:71:a6:fe:f0:a3:27:
01:be:c6:29:5c:6e:16:a6:c1:f9:cd:2e:ef:ea:14:
c4:a9:ff:c8:21:3c:e6:d9:12:c4:07:fd:bb:cf:79:
ee:0a:bf:97:51:74:8d:89:56:cf:c6:8b:e8:01:33:
51:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:5B:EC:9D:82:7D:A0:29:F2:52:66:01:86:5F:B6:32:71:31:3E:06
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/mVvsnYJ9oCnyUmYBhl-2MnExPgY.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
47:56:9b:9f:f7:19:b6:1d:b4:94:ca:74:76:53:aa:98:26:d1:
3e:54:8b:c1:03:b2:67:f6:29:7b:4c:70:42:79:5a:13:77:59:
3a:c7:74:de:1d:fb:c7:da:a0:77:50:dd:29:73:ce:d7:6e:2d:
e7:b1:5c:bd:49:d7:80:b4:38:c5:2f:34:8d:13:7b:58:ff:ae:
03:b9:88:2f:10:03:a5:b6:05:5f:6a:35:73:fd:fa:8e:ae:3b:
e0:d2:83:33:d0:9d:12:a9:3f:71:47:79:0f:fa:e6:88:86:36:
14:cf:58:f4:3e:36:8d:31:95:d0:78:d4:29:02:00:69:95:3f:
da:fe:39:80:61:03:03:5a:6d:49:d8:f0:c8:0f:13:0f:cd:25:
71:08:15:5e:38:ff:a8:8f:10:91:bb:ed:f5:f0:c7:bf:c4:c6:
62:e4:1b:a4:a9:e1:fc:d4:cf:44:49:51:f6:26:7a:a3:b5:a6:
5d:4b:aa:c4:03:17:10:69:83:b4:72:dd:cb:8b:10:d0:28:e5:
a2:d9:f7:8f:da:fa:ee:de:c2:fb:7a:4d:0f:ef:c5:44:42:b7:
6c:7d:54:6c:5e:cc:0b:84:a8:dc:30:5a:ca:bb:84:9c:76:95:
0c:3c:aa:dc:8f:59:c1:f6:84:f8:06:b3:02:cc:be:88:b6:5e:
c5:e3:52:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 9 06:17:45 2024 by rpki-client on console-ams.rpki-client.org