Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/1RailuE1GmsytbSngxrMm8fyxOE.roa
File: 1RailuE1GmsytbSngxrMm8fyxOE.roa (raw, json)
Hash identifier: arjPabTPD2k9tSAcYLqmDdpwF9fyaJtfIIK5FaLiSBs=
Subject key identifier: D5:16:A2:96:E1:35:1A:6B:32:B5:B4:A7:83:1A:CC:9B:C7:F2:C4:E1
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: AC
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/1RailuE1GmsytbSngxrMm8fyxOE.roa
Signing time: Wed 28 Feb 2024 07:55:03 +0000
ROA not before: Wed 28 Feb 2024 07:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 28 Feb 2024 11:55:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 172 (0xac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Feb 28 07:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=D516A296E1351A6B32B5B4A7831ACC9BC7F2C4E1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ee:3a:58:b7:de:db:63:f0:0b:f4:2f:e7:6c:
51:16:dd:2b:45:7c:64:64:e0:6d:00:dd:49:1a:e2:
9e:b3:4a:b9:62:16:ed:b4:2a:0f:fb:22:f3:8b:f5:
67:48:3d:58:66:8f:bc:f3:fa:0c:96:c5:fa:03:d6:
e0:c3:3b:ea:8e:9c:15:ac:50:0a:4b:75:5d:a0:e8:
80:99:64:3e:d8:13:23:f1:b0:36:cf:44:9d:6b:53:
b8:60:4b:52:a5:fb:97:87:a1:08:fb:d5:81:87:d8:
3c:5f:4b:29:4a:04:b5:a5:f3:2f:3c:c1:be:6b:ed:
3e:7e:a1:ca:be:4d:c1:b5:66:ea:1e:6d:ca:bc:da:
9c:57:b0:24:d3:79:86:0f:be:30:18:74:65:3e:da:
63:66:3e:4a:1a:de:20:10:e7:e5:92:77:55:8a:43:
6f:d0:aa:aa:8f:18:95:48:c2:39:af:f3:b8:a4:9c:
6f:6f:62:66:47:4f:6e:e9:54:4d:5a:33:09:dc:a5:
a0:d8:7b:df:87:0a:f6:6a:81:37:e7:36:86:dc:da:
61:92:aa:7c:99:60:ad:c5:f1:b4:cf:fa:51:73:ae:
15:e9:ee:f6:ea:61:b0:d5:b2:29:cf:fc:ab:5b:9f:
9b:6d:0c:19:9d:d3:f5:c7:76:31:ca:2e:9b:51:a8:
f4:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:16:A2:96:E1:35:1A:6B:32:B5:B4:A7:83:1A:CC:9B:C7:F2:C4:E1
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/1RailuE1GmsytbSngxrMm8fyxOE.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
61:c1:69:00:c4:5e:62:f2:6f:c6:c7:dd:aa:e0:72:ce:2d:05:
4a:82:f8:45:18:58:b3:b2:18:7a:53:a4:71:10:de:20:a9:08:
02:de:1b:97:99:c2:cf:73:9d:55:99:13:7f:72:b3:25:41:21:
10:2c:ed:2b:72:17:39:33:fa:74:cf:5f:cb:af:a2:8f:c4:d0:
94:58:9c:fd:d1:8f:79:c7:4d:bb:b1:5f:9b:4f:2c:ef:f1:1b:
b0:7c:0b:b7:33:83:c1:45:bc:3d:86:6e:82:e9:07:70:d1:78:
23:03:ea:90:08:8b:aa:99:42:e4:4a:3d:a3:67:4e:0a:52:a7:
07:cb:48:5f:69:0a:67:b8:89:eb:60:a1:14:40:db:06:9f:54:
fe:65:20:52:dd:83:54:62:fe:98:98:48:72:28:c5:a9:85:84:
cd:97:46:ef:3a:1f:0d:02:7b:64:c8:94:5f:e7:56:07:42:be:
3e:fd:49:19:cb:62:f4:3b:d9:a2:bd:df:0e:af:4a:e5:d7:97:
bb:c3:4e:4b:57:46:10:d5:08:78:22:53:fe:df:64:97:fa:cc:
b9:89:36:6f:66:18:2e:90:1f:46:7e:e1:22:f1:77:1c:d7:b5:
59:e6:89:5b:85:36:44:54:5a:49:95:f8:6b:c4:fb:a6:13:46:
d3:c2:18:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:54 2024 by rpki-client on console-fra.rpki-client.org