Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/7gpmkTloN3XE6YvNLj7Pfr6oHsU.roa
File: 7gpmkTloN3XE6YvNLj7Pfr6oHsU.roa (raw, json)
Hash identifier: iwSi0PnOAo2qSQ7GFQg6p26V+1Uti10wxSdOiTzqrsI=
Subject key identifier: EE:0A:66:91:39:68:37:75:C4:E9:8B:CD:2E:3E:CF:7E:BE:A8:1E:C5
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0304
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/7gpmkTloN3XE6YvNLj7Pfr6oHsU.roa
Signing time: Sat 04 May 2024 23:55:03 +0000
ROA not before: Sat 04 May 2024 23:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 05 May 2024 03:55:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 772 (0x304)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: May 4 23:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=EE0A669139683775C4E98BCD2E3ECF7EBEA81EC5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:08:62:90:5d:80:fd:ae:ac:a3:ed:08:f2:8c:
dc:a2:25:63:28:b8:de:a5:3f:e1:a4:60:94:05:ad:
65:ef:27:fe:98:ab:15:c0:0d:70:1b:27:09:ca:18:
ec:6d:bf:11:3f:76:4e:a6:b7:92:c5:6b:7d:0a:25:
b6:b9:fb:e7:94:e9:41:d3:cf:fd:e4:0c:49:7b:70:
da:76:97:02:c6:b3:33:c2:66:3f:fa:4d:cd:0a:e3:
66:fb:a8:47:03:78:90:54:1a:d2:05:bd:86:7e:ba:
f4:de:d5:6c:18:ee:0a:c4:7d:1b:7a:59:17:6b:0b:
aa:90:d2:ed:46:e1:ba:9c:89:c3:af:9f:1c:cb:25:
02:31:88:ee:a0:23:1c:c8:79:31:75:e9:88:fc:6c:
1f:89:fe:0c:4c:b8:23:5b:49:1d:a3:c3:84:a4:85:
3a:c3:eb:f9:bb:6f:ee:57:f8:06:5f:c8:a2:6a:ed:
2c:32:d1:39:8a:ab:d1:75:a1:9c:dc:5e:7a:28:b7:
53:8a:4d:e1:1f:c7:ad:d9:92:8c:7b:58:27:4b:39:
01:b7:59:77:ac:5c:80:ce:94:10:e4:f7:37:a0:74:
d2:2e:2a:46:81:fe:9f:9c:16:77:bb:00:70:ea:5e:
2d:89:e0:4e:62:ea:8b:6b:42:d3:bb:2d:e1:72:c7:
07:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:0A:66:91:39:68:37:75:C4:E9:8B:CD:2E:3E:CF:7E:BE:A8:1E:C5
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/7gpmkTloN3XE6YvNLj7Pfr6oHsU.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:2c:d9:82:13:d2:42:11:b3:58:21:4a:6f:de:8b:a2:63:7b:
04:03:ac:02:79:40:6c:23:ab:3b:0b:7c:6c:bd:be:a8:75:c6:
87:fd:01:af:9f:31:3a:7f:e7:91:54:21:1f:f1:27:f6:27:27:
c1:0d:03:a1:0c:99:99:ef:ea:48:a1:98:0c:d7:37:0f:8f:17:
e8:87:52:ac:fd:2e:18:e7:5c:58:71:27:cb:1e:43:28:27:c2:
bf:06:1e:2f:6c:55:b4:f4:ef:84:30:47:80:88:54:d2:b3:e7:
3a:ae:f1:24:33:e2:57:0c:7a:53:c9:bf:1f:fa:8e:98:66:27:
dc:5f:20:4c:af:a4:e6:79:d5:1e:f5:96:cf:a1:3a:38:9a:b2:
dd:a3:39:bc:49:45:f4:a1:a9:43:bf:cd:de:ca:d9:93:fd:b8:
70:2f:58:6c:16:75:e9:0f:d0:e5:94:f5:7f:03:11:8d:06:83:
0a:35:a6:dc:bd:c8:bc:42:4c:f3:eb:d1:e6:2f:13:fc:87:d1:
fa:4c:d1:1e:e0:12:c7:7d:f7:c5:ec:2e:04:cd:93:c5:63:64:
b9:69:9a:03:7f:6e:1d:3c:4c:e0:5c:e5:de:51:22:60:d2:41:
9a:a4:4d:28:92:ea:b5:c1:1d:6b:6b:75:e9:0e:08:7e:ba:d7:
33:b9:ce:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 04:45:09 2024 by rpki-client on console-ams.rpki-client.org