Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/zo9G97USBSWmxpOcfr1Xw5-oYYE.roa
File: zo9G97USBSWmxpOcfr1Xw5-oYYE.roa (raw, json)
Hash identifier: JvfFSee0wuMzmxBUEMxOY9lxIqp47+fcBXgjLF9JdaU=
Subject key identifier: CE:8F:46:F7:B5:12:05:25:A6:C6:93:9C:7E:BD:57:C3:9F:A8:61:81
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 04C0
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/zo9G97USBSWmxpOcfr1Xw5-oYYE.roa
Signing time: Sun 23 Jun 2024 07:55:03 +0000
ROA not before: Sun 23 Jun 2024 07:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 23 Jun 2024 11:55:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1216 (0x4c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Jun 23 07:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=CE8F46F7B5120525A6C6939C7EBD57C39FA86181
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:cf:a6:5b:7c:82:b0:f0:c4:b9:21:26:7b:1b:
fb:0f:28:7b:23:1f:15:b5:e9:db:4b:7e:80:b0:12:
b3:1a:db:22:a5:41:b3:e8:39:5a:a1:13:28:8c:7c:
6c:77:41:b6:f7:63:96:4f:b7:3c:25:74:9f:1d:f4:
f6:90:2d:8d:51:73:01:2d:7a:0a:69:50:8e:5a:3e:
97:44:55:53:dd:7e:34:ad:e7:48:d6:9b:7a:3b:49:
69:8b:0c:bd:7e:7d:e0:17:6d:43:84:ae:74:ae:44:
1f:5f:2c:5c:32:de:42:59:83:53:fb:8c:33:7a:85:
e7:b0:64:a9:08:6e:54:e0:2d:0b:28:9b:1b:13:78:
39:dc:3f:4f:1c:d9:fb:1c:5b:10:71:a2:2a:14:73:
89:e2:e6:92:9c:09:9c:23:1a:b4:f4:42:aa:27:28:
a0:f3:96:00:e1:58:7b:e2:d8:f7:48:57:c2:a9:13:
3d:d2:96:e5:73:4f:2f:cb:e5:2e:29:a0:97:ca:40:
75:39:9c:35:30:e0:58:a6:a8:65:f0:c6:e8:bc:bf:
ee:a1:42:93:8e:90:67:c7:85:06:d3:19:03:94:b3:
7c:4b:82:ad:c4:98:9a:08:88:87:91:60:31:97:bc:
f6:ae:45:31:38:96:33:70:d8:c1:2f:54:8c:0b:f4:
7a:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:8F:46:F7:B5:12:05:25:A6:C6:93:9C:7E:BD:57:C3:9F:A8:61:81
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/zo9G97USBSWmxpOcfr1Xw5-oYYE.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:12:60:94:f3:be:5d:35:a9:5c:82:42:ef:45:dc:1e:a5:9a:
c0:26:45:79:58:0b:f2:55:9c:01:f0:43:66:1e:25:7e:cf:81:
af:a2:eb:8a:7b:7b:90:fa:10:a5:80:96:24:f4:76:58:e8:eb:
a6:6f:78:2e:f0:30:dd:47:c9:04:25:e3:c3:4f:33:d4:d0:a2:
c9:58:ac:3b:4e:9b:2c:07:67:70:8e:a6:f3:4a:07:5d:80:11:
ea:8b:c4:5d:0d:9e:d3:06:e5:85:0d:8d:2c:ee:d9:c2:3f:4e:
16:02:e4:95:3e:cf:24:07:90:41:2c:fb:b3:ed:a9:70:e9:a5:
33:c3:5d:04:f4:38:6e:92:9f:42:25:73:b2:ac:29:1a:81:9f:
2d:d9:49:4b:d9:97:fe:c1:5f:22:ff:24:45:93:83:d5:25:a1:
9d:f6:89:6b:39:2c:db:f5:e8:d0:1f:8b:16:b1:0a:4d:ff:9d:
78:2a:ba:25:ef:b1:f6:9a:c3:2b:f4:e7:2d:4c:1f:0a:6a:c2:
86:0e:06:d3:2b:bd:e7:5d:48:c1:4e:28:81:df:bd:34:b0:cd:
ba:0f:9c:d9:60:e8:07:db:a5:e3:89:6f:40:28:19:11:40:f1:
95:63:4e:21:90:70:6c:21:e4:bd:96:26:fc:62:d3:94:8a:86:
32:06:f9:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 15:32:45 2024 by rpki-client on console-ams.rpki-client.org