Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/t61JvqmljRpPvGOuwfDWmpwAfsk.roa
File: t61JvqmljRpPvGOuwfDWmpwAfsk.roa (raw, json)
Hash identifier: jLTTqQj4MyM3LazpDSii9Wrf/NfsXhtr5NxpauFMaMc=
Subject key identifier: B7:AD:49:BE:A9:A5:8D:1A:4F:BC:63:AE:C1:F0:D6:9A:9C:00:7E:C9
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 095F
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/t61JvqmljRpPvGOuwfDWmpwAfsk.roa
Signing time: Fri 01 Nov 2024 15:55:03 +0000
ROA not before: Fri 01 Nov 2024 15:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 01 Nov 2024 19:55:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2399 (0x95f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Nov 1 15:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=B7AD49BEA9A58D1A4FBC63AEC1F0D69A9C007EC9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:1f:1f:f4:30:a6:0a:fa:fa:ff:e5:ee:c0:25:
28:03:0d:b4:0c:00:2a:15:30:32:f6:05:4a:c9:43:
cc:96:3b:6c:fd:bc:db:2e:a8:1a:8d:d8:1b:16:79:
48:21:56:dd:5a:7f:01:9a:41:f7:68:23:c3:c9:71:
ab:0b:d4:44:bc:37:2d:b3:69:8f:52:32:29:66:03:
41:74:8a:20:e6:8b:19:a1:21:18:f7:30:8d:db:6c:
f6:9d:69:c7:c8:de:bf:7f:ca:f4:65:34:9d:2c:68:
c3:8f:89:a4:6d:b0:22:cf:2c:49:7b:6e:22:fd:ba:
8d:3b:5d:f6:ff:c4:cd:db:25:e4:e6:9b:6d:2f:84:
dc:d1:58:e0:d8:19:7c:39:31:d7:2f:e8:c5:a8:db:
43:af:54:fc:0d:70:dd:4d:a6:b2:e5:e3:26:bf:8f:
f7:58:ed:4f:cb:ba:ea:31:ef:a5:33:ee:46:9b:f5:
d8:ee:6a:ea:34:74:07:ab:c5:bf:35:1d:38:7b:66:
0a:6e:e1:55:d2:b6:6b:06:6a:99:5c:ec:8b:c3:39:
f7:9f:48:f4:b0:40:1c:be:51:04:31:1d:e7:07:8b:
6c:6e:10:34:a0:cf:5f:d0:d6:ac:d2:85:99:b9:4b:
45:a2:44:94:90:00:73:ed:53:b7:d6:e4:10:63:1f:
63:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:AD:49:BE:A9:A5:8D:1A:4F:BC:63:AE:C1:F0:D6:9A:9C:00:7E:C9
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/t61JvqmljRpPvGOuwfDWmpwAfsk.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
47:47:88:44:72:93:a2:c3:f3:b9:79:90:53:b5:f6:4c:d0:7c:
b2:3d:ae:e8:78:f8:72:16:24:d2:c1:92:d2:8c:dd:99:4c:eb:
1a:be:fd:14:60:83:0f:62:fc:bc:9a:d6:6c:d6:4e:8d:6d:36:
3b:04:16:5c:9e:74:7c:fe:ea:57:3e:75:69:05:b6:37:a8:ab:
21:d4:80:f1:d2:a2:40:4b:35:e9:de:b9:41:9a:34:b1:6d:a1:
45:0c:ef:cb:2d:65:f0:1d:c5:7b:64:c5:21:d0:3d:4c:48:3e:
19:70:ee:4a:43:f0:2b:4f:96:37:e2:2c:d9:16:d9:3b:3f:e4:
e2:57:5e:ea:db:7e:e1:24:b5:8d:0b:df:e4:7d:ae:61:89:5f:
4e:fd:6f:99:a8:b8:0a:ba:52:b7:4f:a2:60:e9:94:91:7a:33:
3e:ad:9c:c6:91:0c:ac:aa:6b:57:cc:1e:c4:11:2f:33:91:92:
fc:ee:43:8b:f2:16:bd:69:c5:07:af:6b:a2:e0:7a:d6:0f:7b:
f1:8f:91:9c:d3:11:d8:d1:2e:aa:b4:9c:39:29:49:01:05:6f:
83:b4:32:b3:5c:30:03:58:ce:cb:3f:f2:a1:2b:25:f1:33:6d:
7b:7d:46:70:a4:9f:26:c1:45:13:8a:0b:cc:18:7a:f1:9b:6e:
bd:c1:c9:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 1 20:52:34 2024 by rpki-client on console-fra.rpki-client.org