Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/0XfYB-vVi_tcSV__Uks3QvnPRrA.roa
File: 0XfYB-vVi_tcSV__Uks3QvnPRrA.roa (raw, json)
Hash identifier: VFLvTRHi7w/IGOOKeaNZOcZ332g9qiMgrPEr/0WwWKQ=
Subject key identifier: D1:77:D8:07:EB:D5:8B:FB:5C:49:5F:FF:52:4B:37:42:F9:CF:46:B0
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0463
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/0XfYB-vVi_tcSV__Uks3QvnPRrA.roa
Signing time: Wed 12 Jun 2024 23:55:04 +0000
ROA not before: Wed 12 Jun 2024 23:55:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 13 Jun 2024 03:55:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1123 (0x463)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Jun 12 23:55:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=D177D807EBD58BFB5C495FFF524B3742F9CF46B0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:09:0e:a5:e6:e0:c7:08:3e:90:49:56:df:c7:
8f:05:0e:d7:09:65:9b:2c:cc:c7:3a:10:b6:3a:d3:
8e:98:90:73:85:17:01:8f:91:3a:2c:72:36:bc:9f:
a8:b2:78:c3:b9:83:26:fb:7a:43:62:dc:01:b1:d3:
c5:aa:90:3f:8a:a9:d3:92:66:d0:e7:61:b7:d2:a4:
2c:f8:8b:24:bd:40:e0:66:12:ea:6b:4f:57:ec:a4:
59:20:6b:14:4d:58:24:28:c0:71:b1:c6:53:49:28:
30:d6:0a:3d:55:e6:f0:36:df:c3:34:d5:b8:0f:50:
8e:3b:24:7b:38:74:f1:b8:fe:d0:15:24:bd:f1:6c:
02:4c:9f:65:d9:74:68:9b:4a:be:47:a9:b8:a7:b7:
02:b7:cf:7f:25:cd:6a:f9:04:96:b1:5e:5b:62:e2:
2e:2c:57:c8:26:39:72:6c:bd:11:37:bb:24:8a:a9:
7d:00:4a:65:1b:ca:37:f6:a7:ae:13:27:7a:8d:48:
4b:67:5f:e2:c7:63:55:f1:d1:0b:5f:8e:d6:b8:a1:
0e:c4:6f:8a:2c:40:c8:d1:7b:6a:ba:07:a8:62:4e:
f3:42:35:ff:06:16:16:ac:15:3b:e6:ac:92:3e:bf:
b8:8b:43:b2:26:5c:c4:03:8e:8a:23:5b:e0:41:c3:
31:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:77:D8:07:EB:D5:8B:FB:5C:49:5F:FF:52:4B:37:42:F9:CF:46:B0
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/0XfYB-vVi_tcSV__Uks3QvnPRrA.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
80:e4:74:b6:61:29:95:b5:67:f7:5a:6d:c6:12:2d:02:bb:3c:
80:c4:ec:41:0a:3f:d5:04:e0:9a:2d:ec:74:d2:ca:4f:56:f9:
d7:00:bb:2a:25:7f:9a:66:ba:b5:a6:e0:f7:40:b7:f9:24:f7:
94:1f:0e:a0:4e:c0:3b:9b:10:05:1b:e1:c8:42:1d:ba:3d:85:
27:1e:9c:81:0e:e4:01:a4:8b:cb:9e:ab:40:b9:50:97:be:e0:
0e:89:ca:e8:a4:a3:de:c3:1b:64:33:77:e5:73:78:5b:62:6c:
14:eb:9b:1c:c9:ef:ce:3d:8c:c4:73:f8:4b:99:56:44:ab:07:
a7:60:fa:63:f8:12:19:92:21:f0:5d:4e:af:9c:2c:b5:a6:77:
b7:78:5a:2f:54:12:b9:f7:42:31:17:35:36:61:0f:76:e9:79:
16:88:e5:f6:94:ba:20:a5:3b:34:78:e3:10:b3:fa:0f:41:2e:
fd:af:3b:83:ed:84:aa:6c:d9:0c:eb:4b:f6:14:d2:f4:9a:97:
71:d5:5f:3c:9f:8e:94:8d:b0:77:21:e1:64:ef:53:97:f4:34:
eb:52:df:b1:51:fc:0c:3a:c8:52:08:cf:68:b7:16:d2:14:ae:
09:2d:db:2c:f7:81:8d:71:37:3a:de:1b:bb:87:24:1e:fa:19:
94:7d:54:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 13 07:06:58 2024 by rpki-client on console-ams.rpki-client.org