Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/x6OOl7GQ_q9OSPRIeJ6ZLaOttx8.roa
File: x6OOl7GQ_q9OSPRIeJ6ZLaOttx8.roa (raw, json)
Hash identifier: F+NfGwU382AnYSDD6JUC8iTgv8K9205PN5vvfXjQn10=
Subject key identifier: C7:A3:8E:97:B1:90:FE:AF:4E:48:F4:48:78:9E:99:2D:A3:AD:B7:1F
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 064F
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/x6OOl7GQ_q9OSPRIeJ6ZLaOttx8.roa
Signing time: Tue 06 Aug 2024 15:55:03 +0000
ROA not before: Tue 06 Aug 2024 15:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 06 Aug 2024 19:55:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1615 (0x64f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Aug 6 15:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=C7A38E97B190FEAF4E48F448789E992DA3ADB71F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f9:50:bc:ba:52:13:bc:9e:9f:43:1b:a8:e0:
1d:37:96:ae:51:2e:d9:3b:10:19:4b:c1:45:44:3f:
25:e2:19:a1:4d:34:99:20:28:25:a1:e0:d6:4e:ac:
4c:e6:a1:49:50:4c:87:09:62:87:ee:36:90:40:3b:
a9:0e:0e:e0:7e:5e:c2:c6:28:54:69:10:c1:d0:70:
f3:68:01:c0:2d:fe:80:88:fd:62:3f:ae:8b:eb:8c:
cc:f4:6b:ae:4b:7c:18:13:39:9b:08:b3:33:95:bf:
2d:31:33:68:f8:02:5c:b5:ff:6e:f2:13:24:98:e9:
0f:ba:aa:00:b4:22:7c:e6:dc:9c:ac:3e:ec:73:68:
23:a5:bf:85:89:3d:62:2e:9f:f3:4a:7b:dc:3f:58:
07:d4:84:87:32:5e:e7:48:6d:3c:70:2d:c6:4a:25:
2d:e2:7b:82:27:fd:3e:d3:15:82:80:11:9f:48:da:
4e:38:7b:24:20:16:e6:5d:9f:92:2d:e0:98:b2:ae:
09:7c:f7:9d:1f:38:39:26:25:4a:09:f3:65:5d:45:
64:26:09:ef:e6:23:62:00:0f:65:4a:3e:44:ef:3f:
af:2d:8d:46:a4:ec:64:ef:da:93:bb:53:a3:6e:7a:
12:c2:9b:bf:c1:aa:ea:a6:b4:7a:c6:52:8f:7c:30:
95:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:A3:8E:97:B1:90:FE:AF:4E:48:F4:48:78:9E:99:2D:A3:AD:B7:1F
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/x6OOl7GQ_q9OSPRIeJ6ZLaOttx8.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:60:c9:91:7d:7f:28:58:bd:eb:99:42:0e:a4:a0:d0:3a:61:
fd:af:f8:ec:94:14:09:76:b6:f6:83:ba:e2:54:fe:79:3b:ce:
ba:1f:87:eb:97:38:f5:85:c9:ab:32:3a:15:fc:c6:26:52:9b:
59:b7:b9:48:f8:33:b6:7e:d9:6c:43:92:11:11:fe:20:ec:ca:
e3:c7:3c:a6:1c:11:dc:ea:5c:80:bc:70:2b:35:5e:f5:85:9c:
6f:07:ff:dc:7a:33:36:60:e8:d8:c7:da:ab:56:51:1a:8c:c0:
9b:20:cc:98:87:f1:69:f1:6d:d3:ab:0d:e6:42:c4:c6:66:e1:
dc:fd:65:3e:1b:9b:6b:1b:8b:53:9e:36:82:66:49:90:9a:69:
d3:6d:3b:8c:3e:d1:2b:06:9a:83:51:ce:38:bc:78:2a:44:c5:
4b:9c:9d:e2:6b:8e:36:67:d9:e8:d9:99:09:19:19:dd:5f:44:
59:6c:6d:74:4a:6f:61:09:d3:71:f0:95:2b:05:35:66:44:d5:
08:4c:9c:90:9d:10:c0:f6:d1:7d:17:21:40:14:7b:d5:50:6b:
69:02:6e:1e:47:79:46:22:9b:e6:8f:42:4c:2e:d5:7a:6c:fc:
d8:3f:3a:59:a4:08:ec:ff:84:ae:b4:0d:73:0c:e3:64:23:b1:
70:4d:c5:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 6 22:17:03 2024 by rpki-client on console-fra.rpki-client.org