Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/0viSNEOnuseYZu4anwY5lkT2rew.roa
File: 0viSNEOnuseYZu4anwY5lkT2rew.roa (raw, json)
Hash identifier: R+vCa/8mM7fHP1AERNC6akUuHC0vY5vQBCiLoGQGj90=
Subject key identifier: D2:F8:92:34:43:A7:BA:C7:98:66:EE:1A:9F:06:39:96:44:F6:AD:EC
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 050E
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/0viSNEOnuseYZu4anwY5lkT2rew.roa
Signing time: Mon 01 Jul 2024 23:55:03 +0000
ROA not before: Mon 01 Jul 2024 23:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jul 2024 03:55:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1294 (0x50e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Jul 1 23:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=D2F8923443A7BAC79866EE1A9F06399644F6ADEC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:2f:35:e0:b2:22:13:46:ae:69:1b:07:35:04:
3c:a2:21:52:e0:f9:6a:98:39:03:dd:17:9c:fd:66:
08:c0:a4:fc:d7:f9:36:61:b8:15:85:90:e6:74:4d:
97:78:b4:da:3f:2d:98:57:3b:c2:00:38:d9:cb:66:
f6:ca:85:c7:af:ca:7e:cc:08:85:bc:0d:22:28:e0:
39:12:36:6b:ac:b1:cb:b1:26:9b:4a:27:75:1f:c4:
0b:9a:d2:7e:2a:2b:ca:0a:da:48:3b:42:df:1d:68:
80:f1:8e:3e:52:be:d9:88:f7:91:99:20:3c:1d:82:
cb:89:67:9c:67:dc:b5:b6:87:eb:9a:7e:03:76:f1:
db:9b:c8:96:c7:e3:ad:70:7e:6e:00:93:9b:b0:a3:
ed:c2:a7:43:e7:50:fb:65:8b:58:a5:71:f9:c8:74:
65:38:b5:a9:5c:63:3d:88:d4:1e:38:20:83:4d:a5:
36:ed:e8:c5:a1:e4:ce:38:a6:ba:e3:26:5e:07:27:
73:c1:94:07:d4:7b:fc:c9:0d:92:9c:7d:1b:4d:82:
af:de:b3:53:f5:60:3c:0e:a0:99:42:bb:40:63:ff:
d4:a8:f7:3b:fc:c6:26:0d:cf:f2:63:21:1b:ff:ba:
0f:5f:24:4a:cd:5f:18:d2:f4:14:ba:eb:6f:0a:47:
fc:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:F8:92:34:43:A7:BA:C7:98:66:EE:1A:9F:06:39:96:44:F6:AD:EC
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/0viSNEOnuseYZu4anwY5lkT2rew.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
df:6b:63:13:a9:d6:51:54:27:b4:88:8e:b7:e1:1d:cc:cb:b4:
80:65:c9:eb:56:f4:59:a0:dd:6f:fa:c8:e5:b3:fd:1d:58:02:
17:41:d5:c4:01:5e:d3:87:49:d1:03:96:c1:e6:56:51:6c:22:
ea:8d:da:a6:b7:dc:dd:d1:b1:1d:af:35:f8:f7:b7:0c:69:f0:
e0:36:d4:b7:00:7f:b8:ae:69:5e:c0:6e:53:cc:b4:4f:c4:f5:
ea:08:47:10:af:97:08:0b:71:7e:9b:4e:aa:e1:b4:43:83:a3:
b7:05:f3:b5:d5:d2:10:ac:ce:de:26:50:0d:4f:ce:4f:a4:45:
37:53:e1:12:17:8b:23:57:1b:b4:95:58:59:3f:e0:79:8b:85:
c0:20:6b:1c:81:ca:29:35:40:d9:65:b3:06:d9:22:4e:33:2a:
4f:e7:91:f8:0e:0a:75:6e:81:d8:d7:7b:bb:63:b4:bd:19:2b:
7e:69:ca:36:06:0a:43:4c:88:0e:73:b4:14:95:d5:f8:f5:80:
c7:e0:35:84:b7:a2:e4:19:0d:15:e0:56:dc:f5:a2:cf:61:53:
1e:f8:96:ea:c0:e2:45:d8:3c:27:e7:79:f9:81:42:8f:03:55:
08:cb:82:55:4d:5c:6b:30:68:b7:46:0c:c1:8d:10:ba:bc:3e:
5e:22:65:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 2 04:52:19 2024 by rpki-client on console-fra.rpki-client.org