Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/5ggHDvPcNFEfbTuUxEcJ-35Un8o.roa
File: 5ggHDvPcNFEfbTuUxEcJ-35Un8o.roa (raw, json)
Hash identifier: t2H+G70d15kJzTo2V8UvBGEglsDNCOLZJECRjYs0Qm4=
Subject key identifier: E6:08:07:0E:F3:DC:34:51:1F:6D:3B:94:C4:47:09:FB:7E:54:9F:CA
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 068B
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/5ggHDvPcNFEfbTuUxEcJ-35Un8o.roa
Signing time: Tue 13 Aug 2024 07:55:04 +0000
ROA not before: Tue 13 Aug 2024 07:55:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 13 Aug 2024 11:55:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1675 (0x68b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Aug 13 07:55:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=E608070EF3DC34511F6D3B94C44709FB7E549FCA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:68:0b:83:0b:05:3b:b6:1e:36:c5:60:9a:59:
42:df:d9:5e:df:22:e1:c3:bc:85:de:37:87:93:2d:
dd:75:be:89:35:13:14:c0:19:7e:3e:e7:09:35:77:
45:87:41:21:92:3a:1a:1d:60:22:af:dd:63:e8:91:
4d:9d:2c:d8:4d:25:86:24:2e:b6:8b:ec:db:c8:93:
27:47:21:94:c7:4e:df:ff:c1:81:a1:1b:14:e2:11:
4b:30:63:f6:c5:95:1c:74:e2:7e:87:60:58:f1:a1:
58:9d:12:6a:81:8a:7d:ca:20:f5:bf:79:88:7d:fb:
b5:11:b4:0d:33:ed:12:a2:65:ce:ef:0c:7a:f5:de:
64:41:10:67:17:5c:5a:bf:0d:98:fc:2d:a2:f7:de:
64:ef:de:00:0e:73:00:d4:cc:a2:cf:14:6a:72:2b:
75:15:39:1d:ab:6e:4f:41:81:8a:a4:c3:08:2c:1b:
dd:87:93:34:a2:70:b9:ae:e8:e0:2b:ab:10:4e:19:
2c:fd:fc:77:ad:a9:33:e9:01:a0:ee:19:1b:0f:71:
83:88:5b:29:81:b7:86:93:48:0f:60:4a:03:68:7f:
c2:2e:0c:a0:5a:ac:d1:d8:db:d9:09:bb:f9:20:5d:
f4:37:cb:88:53:d7:b8:c1:ca:d2:92:d6:23:a6:1d:
f4:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:08:07:0E:F3:DC:34:51:1F:6D:3B:94:C4:47:09:FB:7E:54:9F:CA
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/5ggHDvPcNFEfbTuUxEcJ-35Un8o.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
c1:8b:6e:9e:e0:0d:2e:13:1b:f1:0b:e5:5f:ba:e4:cc:4b:24:
30:fc:a1:d9:2e:e9:fe:81:97:3d:db:4c:35:89:fe:bb:33:95:
4a:e5:63:bc:98:05:10:fc:e5:0c:22:77:1e:ba:01:9e:7b:96:
19:c3:14:32:bc:53:c2:f9:b1:77:2a:f2:45:1a:dd:ba:61:e9:
f1:0b:6d:19:af:e0:62:94:11:42:84:aa:a3:9e:47:50:f4:43:
64:4f:af:ad:2b:78:c4:9e:ec:6a:12:29:e3:89:a5:79:8c:01:
4b:3d:79:b8:04:ab:d5:11:2b:16:a4:a9:d3:ec:b3:a0:32:84:
83:a2:c8:31:32:ac:b3:66:70:72:e4:83:b1:68:f0:dc:68:f1:
1e:37:63:64:59:3a:22:f2:6f:12:82:8a:f0:a4:b6:54:e1:99:
8f:e4:07:27:f7:0e:c6:b5:e3:db:16:1d:87:a0:21:e6:b8:23:
b1:5a:a4:c9:8c:81:de:f7:c2:a2:3f:26:54:da:ec:c0:37:a4:
2f:d7:da:e1:13:d5:2d:4f:3b:48:df:74:d2:f3:b5:9c:99:a1:
02:a4:05:6e:2d:b3:d2:6f:ad:7a:5f:de:2b:1a:f2:2c:8b:24:
98:3e:60:55:b1:b2:4d:99:5c:29:80:fc:b6:0e:7c:07:f7:a1:
bc:8b:4e:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 13 15:05:08 2024 by rpki-client on console-fra.rpki-client.org