Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/nrahOvloG1nTbNiTqO4NUgihg2U.roa
File: nrahOvloG1nTbNiTqO4NUgihg2U.roa (raw, json)
Hash identifier: iIGwl7iyir7O6fNMzZWDkEDf7sdqsr2MayGveW1IEcc=
Subject key identifier: 9E:B6:A1:3A:F9:68:1B:59:D3:6C:D8:93:A8:EE:0D:52:08:A1:83:65
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 04F0
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/nrahOvloG1nTbNiTqO4NUgihg2U.roa
Signing time: Fri 28 Jun 2024 15:55:03 +0000
ROA not before: Fri 28 Jun 2024 15:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 28 Jun 2024 19:55:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1264 (0x4f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Jun 28 15:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9EB6A13AF9681B59D36CD893A8EE0D5208A18365
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:45:95:1c:d4:a2:92:c8:82:21:38:31:25:64:
2d:c5:bb:c2:92:96:23:f9:e5:d1:3c:9d:83:ea:a2:
c3:df:6d:fb:9e:84:a0:e0:c4:66:6e:82:f8:8f:1c:
31:67:66:ed:ee:cf:19:98:4f:f6:68:c5:1e:72:22:
72:a9:00:22:01:0e:b7:53:62:d0:72:2d:67:6c:ee:
9f:bb:36:ba:12:a6:53:f0:2b:bf:dc:cc:50:f7:45:
27:48:71:5c:d6:e6:e8:4e:34:d7:2c:21:da:35:27:
de:b5:a6:ad:ff:4f:bc:f8:9c:1a:d3:74:ce:42:cd:
d9:62:7b:49:8a:5a:95:d3:fe:1f:57:5b:99:fa:a8:
5b:6c:50:59:3c:e8:b5:d6:01:68:99:4e:df:19:3e:
b7:87:94:e1:c6:d8:6e:4a:70:68:22:48:4e:9c:3c:
f8:07:90:83:37:c8:47:d1:ca:20:74:3f:1f:b1:10:
35:4d:a4:96:a4:df:9e:0a:f8:bd:89:b1:29:28:68:
55:24:b1:3a:92:1a:2f:26:a3:4f:c2:e4:ea:d9:8d:
ce:b5:82:12:49:04:9b:df:be:21:bf:6e:d2:cd:3c:
59:72:da:e5:65:81:23:43:1c:c9:c6:38:86:2f:90:
8b:41:db:f8:a0:de:f8:4e:03:58:e2:3f:b0:fb:f3:
cd:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:B6:A1:3A:F9:68:1B:59:D3:6C:D8:93:A8:EE:0D:52:08:A1:83:65
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/nrahOvloG1nTbNiTqO4NUgihg2U.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
13:b9:aa:99:45:c3:05:7f:b7:1b:ca:7b:9e:b9:db:a5:c1:a1:
00:89:a3:4b:84:93:f7:71:1f:03:b0:5b:49:3e:04:47:ec:f3:
0e:bf:bb:c0:41:cd:d4:35:78:13:4f:5a:f0:7e:9b:45:21:9b:
97:57:94:41:29:8b:30:52:c7:dd:73:64:23:10:5e:05:9e:b3:
c2:5a:62:c2:d6:5e:3f:7e:7b:05:24:f4:2c:e2:9b:5b:2c:b7:
50:17:28:68:fb:a7:8e:13:90:9e:e1:ee:4c:05:78:08:0f:ed:
00:f0:74:a6:c7:6b:73:ef:b5:62:51:52:bf:54:9d:82:7b:17:
ac:c0:9f:9f:62:91:aa:44:63:1b:37:1b:6c:e6:a8:11:16:20:
9b:52:51:dc:6e:c4:f3:28:f1:73:79:81:9e:99:8d:5d:21:84:
c2:af:a0:84:e4:7a:12:c9:a2:52:21:37:5a:80:ab:0b:88:58:
6d:62:b1:15:77:c8:e7:df:d9:89:6d:3d:03:48:e7:f8:99:bf:
1d:af:6e:3b:d4:a8:1d:d0:eb:ad:04:3b:58:9c:6a:86:39:e2:
28:29:99:a8:34:ac:d6:14:dd:2c:01:e5:ef:44:57:85:11:f0:
ee:05:5e:d6:90:cb:0a:b4:71:b3:84:bc:7f:8c:c8:c1:04:48:
58:5c:20:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 23:10:44 2024 by rpki-client on console-ams.rpki-client.org