Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/rJ6Y8wt_PI8W5ihWmIkUPhCHar0.roa
File: rJ6Y8wt_PI8W5ihWmIkUPhCHar0.roa (raw, json)
Hash identifier: OhfkNxra37WRkdmGg+926JtxcneJr0ZB/nLVlTp2mgo=
Subject key identifier: AC:9E:98:F3:0B:7F:3C:8F:16:E6:28:56:98:89:14:3E:10:87:6A:BD
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0880
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/rJ6Y8wt_PI8W5ihWmIkUPhCHar0.roa
Signing time: Mon 07 Oct 2024 23:55:03 +0000
ROA not before: Mon 07 Oct 2024 23:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 08 Oct 2024 03:55:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2176 (0x880)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Oct 7 23:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=AC9E98F30B7F3C8F16E628569889143E10876ABD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:9b:f5:9a:6a:7c:e4:ab:5b:9d:8e:c3:f3:c8:
c4:06:f1:bb:5a:a6:f6:f3:76:05:bf:19:76:e9:f0:
cf:b1:87:1e:30:b3:a3:4e:79:f8:38:a4:5b:46:bd:
ce:ef:92:05:0e:80:3e:94:26:88:a9:11:aa:5d:0a:
e3:00:b9:80:21:e1:37:a5:02:f0:89:dd:4a:16:4a:
58:61:75:47:95:61:a9:c7:13:1c:61:49:15:82:73:
db:1a:5f:e7:aa:f1:b0:4d:fe:f6:72:73:11:80:81:
04:bc:e0:c6:5f:fa:6b:b3:92:e8:98:80:78:b0:b9:
f4:94:57:87:35:2f:1f:5a:fb:d1:bb:ea:f0:47:cd:
52:7d:60:f7:c5:dc:e4:af:29:17:6a:02:ae:5a:22:
43:51:b9:1b:e6:6a:30:a1:f0:65:96:7f:23:27:4b:
69:22:94:9c:7e:d0:70:41:de:49:67:1f:66:38:16:
7a:97:f6:37:37:fd:11:27:c8:99:9f:c3:0a:4d:a9:
80:3b:a8:b0:ae:93:87:84:27:1f:5f:39:84:da:6c:
a7:4a:f3:f0:48:2d:21:3a:4a:4f:91:67:34:ac:1f:
06:a3:97:93:82:c8:9e:cf:ec:9b:5c:bf:4e:89:89:
67:6c:21:61:a7:c7:a8:c6:22:e1:26:63:b5:40:53:
0d:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:9E:98:F3:0B:7F:3C:8F:16:E6:28:56:98:89:14:3E:10:87:6A:BD
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/rJ6Y8wt_PI8W5ihWmIkUPhCHar0.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:49:d3:6a:e4:f5:45:ef:a9:c7:51:da:b7:cf:70:17:4e:bc:
c9:fe:f4:36:8e:52:e1:8d:4a:0a:e4:99:e5:67:e3:fe:63:b9:
da:46:29:48:81:66:35:d8:d1:88:4a:5e:cc:73:d5:a8:f5:cc:
60:4f:f5:9f:4c:71:db:77:03:b4:37:65:3c:a7:e0:1d:c3:52:
fc:f4:ed:04:d6:ae:73:6f:92:f7:76:d9:c3:a2:ee:a0:4e:18:
5a:29:50:22:95:09:74:b9:59:21:85:8e:55:23:11:cf:25:49:
f4:98:86:14:08:5e:15:9a:ef:a2:c5:0e:fa:fd:0f:e2:5c:5d:
dc:0f:f4:52:ba:d3:11:b6:4f:62:06:22:d1:42:d2:33:d2:2a:
b8:0e:b2:67:c8:c8:19:7c:b9:65:db:ce:23:d8:be:c0:e3:66:
5b:60:4d:4a:5d:53:a4:c6:19:b6:86:56:3b:52:c7:bc:b8:a8:
9c:ca:55:16:6a:3e:55:d2:2c:b0:d2:27:20:f9:b3:ce:4c:b8:
63:c9:84:b1:e2:c2:c5:31:1c:57:b7:03:07:54:2c:e7:37:54:
ef:e2:4d:9c:e4:4c:1e:3f:3b:41:14:54:ce:b4:4a:41:48:33:
69:99:01:ef:1b:51:02:82:6f:dc:5e:fb:db:7b:ed:65:b8:b5:
3f:7a:24:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 8 07:18:33 2024 by rpki-client on console-ams.rpki-client.org