Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nljobsnijders/svFKEXXTMG4BBeYZKmmAkM_T3gU.roa
File: svFKEXXTMG4BBeYZKmmAkM_T3gU.roa (raw, json)
Hash identifier: q/O3jAJZB/brRHvuhWWArfvmmJQEFBQFlxxfYNO/urk=
Subject key identifier: B2:F1:4A:11:75:D3:30:6E:01:05:E6:19:2A:69:80:90:CF:D3:DE:05
Certificate issuer: /CN=caa805dbac364749b9b115590ab6ef0f970cdbd8
Certificate serial: 011094
Authority key identifier: CA:A8:05:DB:AC:36:47:49:B9:B1:15:59:0A:B6:EF:0F:97:0C:DB:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yqgF26w2R0m5sRVZCrbvD5cM29g.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nljobsnijders/svFKEXXTMG4BBeYZKmmAkM_T3gU.roa
Signing time: Sat 17 Jun 2023 00:00:38 +0000
ROA not before: Sat 17 Jun 2023 00:00:38 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 0
IP address blocks: 2a0e:b240::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 15 Feb 2024 17:03:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69780 (0x11094)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=caa805dbac364749b9b115590ab6ef0f970cdbd8
Validity
Not Before: Jun 17 00:00:38 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=B2F14A1175D3306E0105E6192A698090CFD3DE05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f1:7e:81:03:f4:8f:93:5a:f6:1e:28:40:ca:
db:4c:3f:de:a8:a0:da:82:47:04:73:f2:2d:71:d1:
01:1a:21:cd:ee:43:d5:a9:10:26:87:ac:fa:c7:cd:
4b:90:02:6c:97:d0:21:49:4d:eb:a1:11:41:bb:c1:
a6:13:06:ca:73:2c:51:00:49:40:d0:3d:4d:fa:c7:
b8:d0:4c:ca:ce:3a:6f:bf:b4:dd:24:84:fe:ae:95:
f8:f5:8d:fa:1a:63:4a:1b:26:2d:37:89:6e:9b:a7:
06:f4:20:0e:0c:44:0e:1b:47:98:67:c5:44:2d:bf:
3b:73:4b:b6:d8:41:dd:0f:39:d2:58:45:92:0d:c2:
11:9b:97:93:19:86:b7:ce:2b:e9:0d:a1:e9:25:83:
38:00:ad:57:65:36:3a:be:db:d6:de:31:b5:c4:79:
88:5c:71:e0:8c:e1:cd:81:25:5e:ae:cb:b4:d0:10:
ac:40:4d:9b:6f:5a:be:ce:fc:2c:e6:7e:c2:d9:55:
0e:6d:51:1f:6f:4f:59:17:e7:2a:ca:cc:3a:00:6b:
e9:09:03:00:2a:08:07:af:16:02:94:37:2d:a7:e1:
1e:2c:82:4f:4c:0f:f6:f4:63:e2:90:65:e1:92:80:
c0:5b:a2:49:af:3a:4a:92:ce:57:96:16:26:73:c5:
64:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:F1:4A:11:75:D3:30:6E:01:05:E6:19:2A:69:80:90:CF:D3:DE:05
X509v3 Authority Key Identifier:
keyid:CA:A8:05:DB:AC:36:47:49:B9:B1:15:59:0A:B6:EF:0F:97:0C:DB:D8
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nljobsnijders/yqgF26w2R0m5sRVZCrbvD5cM29g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yqgF26w2R0m5sRVZCrbvD5cM29g.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nljobsnijders/svFKEXXTMG4BBeYZKmmAkM_T3gU.roa
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b240::/48
Signature Algorithm: sha256WithRSAEncryption
6e:c4:bc:bd:31:73:4b:1e:70:db:6f:42:90:47:94:ba:c4:7c:
dc:a8:34:97:b5:c2:6a:41:6a:62:1b:72:0e:39:68:aa:eb:1f:
0f:83:31:d4:9b:3d:18:62:f5:0b:51:55:b2:d1:53:8c:37:e6:
9a:4c:de:6b:82:2b:e8:9d:54:cf:c3:b2:af:f9:f1:24:33:49:
40:37:a2:98:88:2f:0b:a7:20:3c:b8:27:55:5a:e8:85:04:57:
d6:e2:d7:14:c2:b1:a3:27:ca:71:59:a6:95:9c:a5:e6:26:c2:
d0:fc:63:d6:50:e4:4b:f3:71:fc:ac:df:1d:15:87:f9:22:31:
d2:4b:6c:30:c8:3a:29:0b:d4:91:ab:1e:31:c5:ad:16:92:f8:
05:7f:eb:47:08:09:a3:e0:70:7b:d9:ad:4d:9d:39:54:f6:6a:
6a:23:f5:0b:23:29:fc:b4:25:7d:bf:cb:f8:dc:1c:08:d2:fc:
6c:0c:8b:1e:e7:d6:b8:76:f3:cb:de:69:e4:04:bb:11:c2:23:
b3:dc:d8:48:e0:cb:6b:4b:ac:32:d7:14:75:c7:a9:af:13:17:
a2:47:cf:98:d4:0a:29:94:ef:a3:94:26:a7:a4:e5:15:ac:e2:
a5:69:35:cc:ee:3c:96:f7:f1:d5:6f:a1:dd:9c:36:8c:95:c5:
b2:e6:c1:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 15 20:37:04 2024 by rpki-client on console-ams.rpki-client.org