Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nljobsnijders/hmvCviqsnoOAjrp2IjBwV5VNLvI.roa
File: hmvCviqsnoOAjrp2IjBwV5VNLvI.roa (raw, json)
Hash identifier: 0j45XxcIw+FbO7zAj6jjnky91Lqhn/U9xJnb3FU4Vs4=
Subject key identifier: 86:6B:C2:BE:2A:AC:9E:83:80:8E:BA:76:22:30:70:57:95:4D:2E:F2
Certificate issuer: /CN=caa805dbac364749b9b115590ab6ef0f970cdbd8
Certificate serial: 011094
Authority key identifier: CA:A8:05:DB:AC:36:47:49:B9:B1:15:59:0A:B6:EF:0F:97:0C:DB:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yqgF26w2R0m5sRVZCrbvD5cM29g.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nljobsnijders/hmvCviqsnoOAjrp2IjBwV5VNLvI.roa
Signing time: Sat 17 Jun 2023 00:00:37 +0000
ROA not before: Sat 17 Jun 2023 00:00:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206238
IP address blocks: 45.138.228.0/22 maxlen: 24
Validation: Failed, certificate revoked on Thu 15 Feb 2024 16:55:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69780 (0x11094)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=caa805dbac364749b9b115590ab6ef0f970cdbd8
Validity
Not Before: Jun 17 00:00:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=866BC2BE2AAC9E83808EBA7622307057954D2EF2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:f4:47:5d:d4:0c:0f:e0:cf:7b:a3:ef:4d:7c:
b7:f5:ec:3a:a2:a3:75:5d:3b:fb:5e:23:4a:5f:f2:
21:fd:b8:9b:32:41:c9:e9:91:01:7a:ee:12:40:f1:
f6:3c:35:4f:30:3a:96:39:40:a1:ea:22:78:b6:e0:
a7:e9:25:c7:24:37:ed:ba:6e:c7:fa:c1:74:f8:f6:
bf:eb:8c:83:59:91:b9:43:b7:44:7e:36:84:fd:5f:
49:ab:be:42:07:7e:2d:18:9e:a2:d6:d8:d6:b4:ee:
8f:e7:a8:ce:61:a2:28:95:bc:1f:c5:55:32:28:ad:
0d:00:36:9a:be:de:dc:d2:3e:e2:87:77:bb:66:1b:
52:bc:ee:76:8c:c5:45:f0:0e:68:87:08:b0:1e:78:
f9:4f:f5:12:4e:db:fc:09:54:d6:76:85:2c:50:a3:
1d:0d:c1:df:82:3a:32:9f:c7:e4:b5:46:91:88:c5:
83:bb:85:00:80:93:8e:b8:72:5e:e6:f6:03:5c:63:
37:50:97:24:0b:e1:99:e2:32:74:88:c0:23:76:05:
24:6e:08:22:c7:bd:24:30:51:a6:76:ea:c0:6f:c5:
b0:94:5c:05:95:b0:79:25:eb:53:15:5b:e8:b3:1b:
d6:43:4d:81:c1:04:66:97:94:07:4a:fe:e5:e2:c6:
3a:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:6B:C2:BE:2A:AC:9E:83:80:8E:BA:76:22:30:70:57:95:4D:2E:F2
X509v3 Authority Key Identifier:
keyid:CA:A8:05:DB:AC:36:47:49:B9:B1:15:59:0A:B6:EF:0F:97:0C:DB:D8
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nljobsnijders/yqgF26w2R0m5sRVZCrbvD5cM29g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yqgF26w2R0m5sRVZCrbvD5cM29g.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nljobsnijders/hmvCviqsnoOAjrp2IjBwV5VNLvI.roa
sbgp-ipAddrBlock: critical
IPv4:
45.138.228.0/22
Signature Algorithm: sha256WithRSAEncryption
02:85:a4:f4:54:69:8c:c4:2b:79:c7:45:b8:af:a8:f7:55:e2:
54:d4:47:9f:5c:97:f5:7c:be:52:fc:02:ad:d1:a6:2c:d5:36:
57:5a:c8:b3:f3:38:52:9d:61:be:0a:5b:a2:5d:0a:91:a4:51:
a2:95:a9:f3:d8:1c:90:0c:a9:94:4b:13:ef:2a:47:8b:e9:82:
2e:6f:30:25:a4:c6:c1:3f:12:5f:69:9d:c3:b6:92:f7:38:c1:
b4:59:1d:ec:d2:85:85:a1:2c:7d:dc:61:91:24:51:92:5d:51:
b2:03:4b:72:21:43:95:f8:80:a4:00:3b:5f:73:50:59:f2:bb:
53:88:ce:72:06:ed:fb:74:31:c0:5a:02:3b:c1:43:5b:64:02:
4e:eb:94:d8:6f:31:3a:71:23:47:00:07:79:a4:b6:35:e5:62:
90:c3:ef:7a:0d:5f:87:5a:f3:80:17:3d:7e:0f:58:a6:9c:9d:
83:b9:e2:0f:7d:3b:6e:6f:db:98:8b:df:95:79:6b:84:dd:1c:
02:97:de:b2:66:6d:36:58:95:78:27:e9:03:e5:4b:b6:75:93:
97:13:83:32:41:b7:9f:a6:23:a6:61:37:ab:c6:e6:68:4b:a6:
fe:36:e1:ae:35:83:0b:06:97:44:e5:ae:b9:17:87:2d:39:32:
cb:8d:d5:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:54 2024 by rpki-client on console-fra.rpki-client.org