Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/1wL6XyuudOrqeN-ghLi1JpqSfWg.roa
File: 1wL6XyuudOrqeN-ghLi1JpqSfWg.roa (raw, json)
Hash identifier: sL7CiIhfjFMh+jFCTB4Do0t+gK3ycey7hCAIuPtXx5g=
Subject key identifier: D7:02:FA:5F:2B:AE:74:EA:EA:78:DF:A0:84:B8:B5:26:9A:92:7D:68
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 01E7
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/1wL6XyuudOrqeN-ghLi1JpqSfWg.roa
Signing time: Wed 03 Apr 2024 07:55:04 +0000
ROA not before: Wed 03 Apr 2024 07:55:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 03 Apr 2024 11:55:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 487 (0x1e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Apr 3 07:55:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=D702FA5F2BAE74EAEA78DFA084B8B5269A927D68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:e4:83:dc:44:73:11:c9:a7:33:25:d5:67:47:
0e:23:2f:b1:9d:64:a5:e0:6c:01:5a:80:50:2d:68:
39:1e:04:5d:08:6d:96:48:a3:8d:51:44:36:3a:8a:
83:c5:cf:89:63:dd:8b:eb:5f:ce:fd:c4:ac:da:e3:
8b:00:70:8d:e5:01:0f:11:92:57:b2:35:93:0f:c9:
32:39:c7:a7:b0:32:09:8f:ca:16:93:e3:ea:a7:15:
9d:6a:a8:d1:2a:06:f6:ab:4d:eb:14:b1:2b:6a:bc:
00:0a:ba:84:0c:c0:fb:f2:88:25:77:b8:b2:51:66:
ac:e0:ca:0c:e1:70:0a:2b:6f:7e:df:d1:25:28:52:
cd:6e:a4:5e:a8:d7:9b:b4:3c:3c:fb:97:37:83:26:
01:54:e7:3c:82:21:9a:72:bd:e0:4f:05:b9:3b:c0:
35:a3:f9:df:ab:42:2b:dd:96:cd:59:0b:46:85:8c:
af:d4:43:10:ac:1e:2c:90:e1:a8:17:11:00:fd:05:
4c:08:02:9e:b2:4d:9d:c2:1f:5e:89:9d:73:96:5e:
df:b5:56:52:21:53:a6:08:d2:54:9f:2b:dc:58:a1:
b2:9d:d3:f6:c8:1b:7d:0d:3e:68:75:2e:e6:ed:cf:
40:6d:2f:c7:6a:f7:82:5c:70:6a:1b:09:51:34:30:
dd:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:02:FA:5F:2B:AE:74:EA:EA:78:DF:A0:84:B8:B5:26:9A:92:7D:68
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/1wL6XyuudOrqeN-ghLi1JpqSfWg.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
dc:a9:5e:b6:75:6f:c5:18:4e:91:36:75:e6:64:d7:f0:8a:65:
b8:6f:fe:4d:61:fd:1f:73:ce:e7:c4:18:ba:14:3c:22:2a:29:
14:82:71:b6:e3:70:1c:d4:c8:a8:eb:41:08:cb:b8:75:74:46:
63:f0:b5:b9:8c:54:65:91:ac:6f:bd:3b:69:17:0e:3f:1c:67:
36:f9:b4:62:7b:de:ec:61:25:7d:0f:e2:e6:39:89:72:a3:46:
a8:20:00:11:91:00:57:71:09:e7:2d:42:b3:34:fb:9e:45:55:
93:5e:d7:03:b2:9f:dc:ef:96:34:c5:ab:2f:df:59:08:5f:64:
84:07:e6:93:0b:fd:46:3f:19:3f:51:7b:4e:75:f3:2f:7d:a1:
c8:87:33:65:c5:13:34:63:23:cf:17:31:dc:ad:f5:60:12:09:
b4:70:5a:81:8a:68:aa:ad:81:8a:0e:77:13:51:e4:02:26:2c:
13:4f:4f:32:44:95:12:22:ca:70:45:01:d8:67:74:b6:8f:d6:
13:fd:6f:99:ec:f9:99:ce:ba:79:87:65:d9:e4:c8:55:b4:68:
5e:92:a5:71:52:8f:f3:ed:eb:1a:ec:91:e7:fb:c1:c2:3b:e8:
2e:09:8f:91:6c:12:77:ea:8d:59:cb:d8:01:65:05:d4:fa:88:
5c:22:7b:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:54 2024 by rpki-client on console-fra.rpki-client.org