Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/4OJEVI8wiASgwJFvugZjEVoJYpA.roa
File: 4OJEVI8wiASgwJFvugZjEVoJYpA.roa (raw, json)
Hash identifier: ++Q95uPYLielPeS6crww7R3mdrtjiALKwiC90CYtJw4=
Subject key identifier: E0:E2:44:54:8F:30:88:04:A0:C0:91:6F:BA:06:63:11:5A:09:62:90
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0232
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/4OJEVI8wiASgwJFvugZjEVoJYpA.roa
Signing time: Thu 11 Apr 2024 15:55:03 +0000
ROA not before: Thu 11 Apr 2024 15:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 11 Apr 2024 19:55:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 562 (0x232)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Apr 11 15:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=E0E244548F308804A0C0916FBA0663115A096290
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:a7:b2:57:8c:d4:7a:b3:88:d9:2b:9f:3b:a6:
12:1c:dd:16:cb:37:cf:d0:39:61:d1:d1:b3:bc:2b:
63:ac:13:b6:45:84:64:b3:0e:90:f6:72:8e:8b:d2:
09:4a:d7:b2:1a:16:ca:d7:2f:05:76:3b:27:6b:78:
76:84:49:79:b3:8a:bb:7b:f2:3f:fb:30:a9:ff:70:
1f:43:43:4f:0d:28:95:34:1c:13:ab:ed:4b:6e:2d:
e1:a4:a3:7c:b0:a2:43:3f:7d:ce:83:3f:04:0f:a3:
36:ce:61:96:6b:26:bf:7c:eb:e2:38:7c:51:9d:f0:
ee:dc:e5:1a:50:0e:0a:86:bb:ec:44:55:68:9b:ce:
fc:f6:37:58:f0:a5:f2:80:65:59:d8:ba:a6:ec:8a:
94:ad:34:ac:21:e6:3b:4a:98:ee:ac:59:c1:a8:87:
37:09:63:13:de:31:75:45:29:57:44:b6:ba:75:50:
23:30:bd:1d:fc:bc:f5:bb:45:4b:e9:19:d9:73:8e:
d6:2b:94:e0:6d:ca:f0:2d:c9:77:48:8b:12:1e:0f:
fe:3e:e9:af:14:f8:ae:ba:1e:2d:c4:a2:7d:69:f6:
16:99:e0:e3:81:d3:fc:2f:b6:1d:0e:42:f5:ef:d0:
29:c3:4e:76:c2:67:5a:d1:1c:22:0b:bb:4e:3c:22:
35:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:E2:44:54:8F:30:88:04:A0:C0:91:6F:BA:06:63:11:5A:09:62:90
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/4OJEVI8wiASgwJFvugZjEVoJYpA.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:72:ce:d2:30:0a:5e:38:06:34:75:b6:1c:42:f2:a5:19:93:
e1:08:6e:f9:45:60:73:d0:b0:22:28:bf:e7:c4:3e:8d:78:de:
3d:3a:58:f3:69:90:31:6e:72:00:21:15:6c:ec:da:4a:61:58:
42:06:b4:01:63:e4:72:8f:fa:fd:cf:20:a2:9c:f0:ad:92:c6:
e8:40:b3:00:01:92:93:c0:53:cb:83:f8:68:8a:14:17:ea:b0:
29:d5:eb:a6:5f:17:8f:c7:c7:80:c3:be:66:79:b3:55:e8:85:
f2:73:c2:e4:e6:4c:c0:05:46:a5:10:5e:22:99:93:ad:4e:d4:
b4:b3:d1:aa:75:7e:90:da:9c:36:e4:09:fe:fb:25:65:dd:75:
d3:6b:99:36:d8:da:5b:42:32:87:5e:2b:36:d4:4f:42:5f:95:
71:86:1f:8b:e5:97:82:13:85:3e:9d:fd:ef:11:db:c4:55:bb:
8d:ce:99:a1:dd:df:06:4c:50:64:5c:93:32:c4:b6:2f:56:79:
fe:c2:d2:5e:b8:83:95:ce:91:33:54:36:b4:4e:6f:c9:62:c7:
f9:a0:9b:19:7d:e1:0b:17:36:cb:c8:cb:8b:a8:2b:8e:21:dc:
5a:8b:84:a0:2c:a6:2d:8c:4e:b8:18:92:e5:0d:8d:70:f2:73:
21:f6:4c:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 12 00:09:26 2024 by rpki-client on console-ams.rpki-client.org