Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/no13K-ggcTSYf4YH9e_Bx8gYuIM.roa
File: no13K-ggcTSYf4YH9e_Bx8gYuIM.roa (raw, json)
Hash identifier: EstV8PTQJJnfpWYkLKaVBW14fPUlcfd/XYUE7ytWXhE=
Subject key identifier: 9E:8D:77:2B:E8:20:71:34:98:7F:86:07:F5:EF:C1:C7:C8:18:B8:83
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0445
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/no13K-ggcTSYf4YH9e_Bx8gYuIM.roa
Signing time: Sun 09 Jun 2024 15:55:03 +0000
ROA not before: Sun 09 Jun 2024 15:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 09 Jun 2024 19:55:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1093 (0x445)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Jun 9 15:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9E8D772BE8207134987F8607F5EFC1C7C818B883
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a7:82:b6:d2:43:2f:9b:9b:8f:34:da:43:b5:
1a:9f:50:01:11:b9:b0:7c:c4:2c:9b:9f:42:6a:c1:
7d:05:6e:06:44:88:a0:c0:e9:f7:46:a5:ca:df:0e:
1f:87:33:5d:80:3c:92:f2:01:06:e6:11:16:c7:31:
f8:39:cc:65:e9:d4:81:f8:10:3b:2f:f2:6b:fc:f3:
c6:1b:cd:53:46:2a:d7:c5:48:9b:30:f6:c2:0f:fb:
5f:bb:e1:ce:cf:b8:f6:11:db:2a:c2:63:b8:2d:bf:
29:d1:f8:14:c5:03:b5:e1:96:6c:d1:78:22:b7:be:
ad:a6:0b:51:a5:b4:ec:40:b7:7b:f4:e0:65:90:2b:
e2:c1:72:ad:36:19:ae:2e:04:d6:6d:48:2e:c4:8b:
9f:cb:50:b4:a8:f4:6d:36:7d:f5:62:22:82:60:26:
2e:40:18:92:a0:a5:90:f0:8f:93:d0:5f:c8:4a:6d:
dd:55:d3:41:82:ef:92:bc:c6:94:8d:76:7f:8f:e3:
67:22:34:2f:88:b0:21:fb:6e:ed:10:10:4a:7c:69:
60:34:e0:34:c2:3a:d1:b4:7a:75:c7:a4:4d:d3:b6:
bd:6e:af:6b:d0:38:80:6a:62:1a:64:c8:b1:fc:e2:
4c:1c:f9:91:c2:de:14:92:61:a6:0e:76:7f:e3:e0:
b7:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:8D:77:2B:E8:20:71:34:98:7F:86:07:F5:EF:C1:C7:C8:18:B8:83
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/no13K-ggcTSYf4YH9e_Bx8gYuIM.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:93:fb:21:9e:3c:50:83:5c:28:84:51:a0:80:31:08:47:78:
e5:f2:c6:91:dc:27:c9:b6:f5:5c:5a:f4:2f:94:f2:32:24:1a:
b3:79:23:e9:37:78:9b:3b:d7:4b:b0:cd:be:8a:48:dd:aa:95:
02:b7:b4:b8:3e:40:38:d5:ae:5a:b2:c9:8b:07:37:c1:d2:a0:
3d:18:ea:a9:51:df:d0:84:07:59:52:87:6d:b0:35:c0:e4:96:
99:b4:9b:3f:db:ba:75:ee:ce:6b:e8:a0:37:b6:59:69:20:1b:
99:84:1f:ad:b1:5c:69:d8:b6:a6:53:5d:dc:0f:43:8c:1b:6e:
11:49:c9:29:7f:34:ec:ae:c4:e8:2f:ab:cb:36:d3:d1:30:64:
2b:6b:37:4e:43:28:ca:68:25:ec:56:fb:58:4c:4d:1b:40:76:
c9:d0:2c:4a:dd:a9:ac:a5:07:d9:21:ce:c9:32:f6:2a:18:e7:
16:7c:43:12:96:ca:ca:09:a6:86:50:59:3e:a3:a0:fe:10:ab:
21:5f:d9:97:d5:e6:29:08:ce:67:74:31:80:8e:09:5c:c1:ed:
50:52:aa:2c:35:c4:7e:73:dd:28:5c:0b:14:72:75:6c:03:6a:
af:9f:ac:15:b7:60:65:4e:15:85:e7:b5:c1:7b:c6:93:f1:53:
4f:6a:86:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 9 20:36:25 2024 by rpki-client on console-fra.rpki-client.org