Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/42k7H9y4YZy249-GYpKb2f87Z-Y.roa
File: 42k7H9y4YZy249-GYpKb2f87Z-Y.roa (raw, json)
Hash identifier: wwNLBVIH3McE82o78XDi0vlA/0ez1fghRfKB3EYELhI=
Subject key identifier: E3:69:3B:1F:DC:B8:61:9C:B6:E3:DF:86:62:92:9B:D9:FF:3B:67:E6
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0160
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/42k7H9y4YZy249-GYpKb2f87Z-Y.roa
Signing time: Tue 19 Mar 2024 07:55:03 +0000
ROA not before: Tue 19 Mar 2024 07:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 19 Mar 2024 11:55:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 352 (0x160)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Mar 19 07:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=E3693B1FDCB8619CB6E3DF8662929BD9FF3B67E6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:b0:4d:71:e9:3b:f3:9a:04:e2:f4:e7:bf:6b:
a2:b0:92:6c:fa:c6:43:9d:74:9c:0b:aa:fe:9f:3a:
94:12:27:a3:bd:c0:e7:56:cf:21:89:ca:73:d7:c0:
e7:4e:d7:b3:30:85:23:18:2e:ec:8a:72:f3:53:e3:
41:a4:f7:9d:3f:12:43:e5:3d:1b:5c:95:90:67:3e:
52:6d:a8:21:41:ec:68:99:ec:26:d5:ee:ad:65:c1:
62:ff:2e:e0:67:bc:22:b4:24:2a:0d:db:e6:6d:d7:
88:0a:03:3a:fe:65:f2:a7:dd:5b:c2:01:91:51:f1:
66:3e:b9:99:57:16:2e:4d:5a:5c:a5:0a:3d:6e:c2:
e4:b1:77:22:99:8a:6e:a0:84:da:29:d4:47:3d:4b:
eb:81:c9:b0:8b:bf:32:50:9a:12:f5:ef:f7:f1:a5:
cb:f3:fe:77:07:c1:da:ab:b9:0d:5d:23:c2:bb:a7:
f2:aa:69:df:73:eb:68:70:60:7e:ca:8e:09:28:7a:
a1:58:e2:f9:e7:ba:7b:2c:01:04:ab:49:68:9d:c8:
cd:a4:0a:88:23:ca:5a:d4:d5:d0:be:c4:8b:31:fb:
4d:04:5a:c1:52:ee:18:6c:10:30:7c:a1:81:63:d0:
02:00:58:35:ea:94:44:77:6c:42:f7:ad:3c:68:a1:
7d:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:69:3B:1F:DC:B8:61:9C:B6:E3:DF:86:62:92:9B:D9:FF:3B:67:E6
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/42k7H9y4YZy249-GYpKb2f87Z-Y.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:83:d7:81:eb:52:ed:7d:b1:27:77:cd:08:59:c8:77:e7:02:
f3:83:95:6f:de:27:f5:ed:4e:d6:18:6b:d3:7b:f2:c5:6e:f7:
d6:60:bd:ec:9b:22:6a:6b:d0:0a:f6:6f:e1:eb:07:f3:98:23:
94:88:34:97:9d:24:5f:dd:0e:8e:45:53:74:18:d4:dd:51:d7:
c1:1b:34:ce:c7:56:55:9f:89:95:02:a4:88:5c:6a:77:89:2d:
ad:bc:0d:19:41:fc:be:6b:fb:a3:72:7d:26:b2:91:bf:2f:a6:
03:d3:34:5b:59:3b:31:0e:27:ef:05:76:9c:81:02:c5:89:37:
ae:2f:bd:37:b8:5f:ab:c3:b3:9e:40:c4:34:4c:9d:78:d8:43:
33:9b:f1:10:63:36:60:85:cb:3b:6a:3b:9b:42:ed:18:41:fa:
38:f4:96:d8:9c:56:bf:96:56:d4:71:b4:78:1c:f4:13:09:03:
63:64:59:b5:43:8e:51:ae:45:e0:97:71:cc:60:17:a8:04:fb:
4a:f2:54:65:fe:cb:73:46:c9:6e:44:ed:8a:b3:49:dc:e1:07:
69:1d:93:27:8f:fd:25:a9:1b:36:d2:f4:52:29:78:40:36:c0:
d2:7a:fe:8e:f4:81:93:a7:6e:31:f8:6f:74:c9:ae:6e:9b:74:
16:48:6f:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 19 15:17:38 2024 by rpki-client on console-ams.rpki-client.org