Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/87byd1lyGX5kZyAwoAbXeA2FNd0.roa
File: 87byd1lyGX5kZyAwoAbXeA2FNd0.roa (raw, json)
Hash identifier: 0p6amlD+t93On1nXOxrQ98C5b0vNBBh/S6Fhpv9mNnk=
Subject key identifier: F3:B6:F2:77:59:72:19:7E:64:67:20:30:A0:06:D7:78:0D:85:35:DD
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 03C1
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/87byd1lyGX5kZyAwoAbXeA2FNd0.roa
Signing time: Sat 25 May 2024 23:55:02 +0000
ROA not before: Sat 25 May 2024 23:55:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 26 May 2024 03:55:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 961 (0x3c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: May 25 23:55:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=F3B6F2775972197E64672030A006D7780D8535DD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:bb:e4:c6:19:a1:9f:62:aa:61:38:9f:48:f6:
97:25:0f:98:87:1b:c0:e1:e4:56:ce:e4:67:82:2e:
eb:01:97:f4:45:ad:61:cc:2b:68:3c:70:b5:a5:a7:
d4:4f:bd:f9:73:54:f5:a5:03:dc:9d:e5:a3:41:23:
62:74:cd:fa:69:6b:1d:ce:33:26:7c:66:8e:c8:31:
4f:4b:f8:72:97:ed:34:6e:5d:84:ac:99:54:78:87:
2b:12:70:b5:42:de:8f:ee:93:98:18:56:8d:54:e1:
66:bf:16:ac:58:a9:00:71:fe:95:2c:8d:22:f9:df:
11:cd:74:48:c5:c7:95:46:b6:c8:cb:c9:7a:af:f8:
32:e0:59:46:97:1e:fb:ff:77:a6:92:50:0b:1d:f2:
13:52:a0:ba:f3:23:c6:03:e6:76:8b:2e:10:e7:2f:
31:70:ec:34:5d:e0:9d:73:3b:ec:e6:d8:bd:4a:c0:
ac:09:2c:ef:fd:43:0a:c2:20:36:53:35:f5:be:7c:
89:35:c1:82:6a:dc:b5:44:5e:0f:3c:03:74:ee:a0:
ed:35:68:cc:e6:bd:1c:ee:6b:47:59:fe:11:a1:67:
ec:bb:f7:f6:f2:2f:c4:7e:82:a4:a9:b9:b3:ea:b1:
b4:4b:5d:28:a7:05:0c:a8:da:19:36:60:84:ad:4e:
19:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:B6:F2:77:59:72:19:7E:64:67:20:30:A0:06:D7:78:0D:85:35:DD
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/87byd1lyGX5kZyAwoAbXeA2FNd0.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
01:1b:00:e3:9d:67:2e:e8:c4:a3:94:94:cc:06:45:87:14:10:
85:fe:a0:8c:1e:a6:23:2c:cf:3b:23:c7:40:81:ca:00:fc:ef:
76:da:72:38:3e:13:fe:c9:34:3b:a3:30:65:f8:8f:d4:3f:3b:
bd:bc:c2:cf:b5:fa:c7:51:fb:55:96:bf:2a:44:7d:b5:b0:99:
9f:a4:e8:83:86:66:be:23:57:be:04:03:15:91:72:d4:82:c5:
80:0b:ec:c6:8f:5a:3c:0d:3d:cf:d5:95:0e:6b:c2:2f:81:b4:
30:07:3a:91:94:18:d6:36:cd:f5:7b:41:08:79:08:4e:41:f0:
15:80:09:3c:cc:6b:73:b4:75:6e:49:68:79:5f:eb:73:e7:26:
ad:9a:29:1e:34:6c:0e:9b:a3:79:85:2f:94:29:88:78:47:8a:
da:c9:bb:de:ce:5f:ef:11:ab:16:3a:72:0d:3b:0f:6e:2a:ac:
80:20:c4:c8:6e:4a:fc:95:0e:5a:ed:b9:14:86:cc:14:42:d5:
9c:a3:d7:72:80:62:0a:fa:9d:43:54:77:03:4f:83:b2:a3:d2:
df:49:bb:c6:69:53:21:70:22:51:d5:b5:d5:77:b3:1d:07:ad:
86:2f:28:89:2a:48:28:db:95:2a:7d:37:21:79:44:b0:99:6e:
4e:d1:4b:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:54 2024 by rpki-client on console-fra.rpki-client.org