Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/8pjCT3s3SCp4pRscuAFp3U1nslY.roa
File: 8pjCT3s3SCp4pRscuAFp3U1nslY.roa (raw, json)
Hash identifier: pf9mHLcNvMmN3dbGVe+yrHVy2EPAcj4XU6z2dsI1sow=
Subject key identifier: F2:98:C2:4F:7B:37:48:2A:78:A5:1B:1C:B8:01:69:DD:4D:67:B2:56
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 13
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/8pjCT3s3SCp4pRscuAFp3U1nslY.roa
Signing time: Sun 11 Feb 2024 07:55:03 +0000
ROA not before: Sun 11 Feb 2024 07:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 11 Feb 2024 11:55:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19 (0x13)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Feb 11 07:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=F298C24F7B37482A78A51B1CB80169DD4D67B256
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:bb:32:0e:f1:5c:35:57:77:82:d3:1d:86:6c:
53:3c:74:9e:be:3e:28:ec:d5:7f:17:ce:29:f5:22:
4c:72:6d:8b:12:8b:15:27:37:62:ad:71:68:24:3f:
e2:7e:02:d4:1e:13:9a:64:a3:af:ff:d4:4c:b6:cf:
aa:2e:11:5a:9c:2e:f3:ed:b5:3b:de:7f:68:67:a4:
48:29:2f:9f:60:83:44:29:d7:c2:48:cc:04:ec:64:
eb:47:a0:38:a5:a7:c8:b5:3f:a2:cc:c6:4a:3b:7b:
0e:ca:3c:ea:50:38:55:4a:bd:6f:66:76:f5:ad:6e:
bf:09:14:ec:8d:59:a1:71:96:1c:4c:10:19:84:2e:
ed:9d:0a:a8:ac:c6:7d:be:54:2a:ee:de:0b:34:8f:
08:a9:76:fc:39:76:5d:65:0b:c8:38:75:8a:b3:85:
69:41:69:91:0e:4c:9f:49:8e:aa:a7:09:e4:59:d3:
e5:5e:c9:0e:1e:24:cb:9c:aa:bb:5d:9f:4f:f9:56:
5a:31:d8:e7:e4:9e:14:c6:79:8f:ba:aa:1a:da:82:
01:30:e9:9d:c1:3b:41:63:0d:05:81:4e:62:93:82:
c5:e1:13:a2:eb:f2:f9:1f:71:0d:23:b6:08:3f:58:
01:c3:ea:b1:df:c1:7b:5d:36:12:5f:99:74:a4:aa:
d4:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:98:C2:4F:7B:37:48:2A:78:A5:1B:1C:B8:01:69:DD:4D:67:B2:56
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/8pjCT3s3SCp4pRscuAFp3U1nslY.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
00:e2:5a:00:09:95:03:74:81:8c:06:63:c0:62:ab:76:c9:25:
74:be:aa:2b:c9:89:d2:cb:8a:65:63:65:51:46:a9:39:0e:b7:
c1:b9:26:7a:10:50:7e:28:d5:35:27:24:5d:e1:2d:f4:f5:62:
a6:31:45:93:b8:31:d8:3d:54:63:b3:18:47:45:fd:19:75:42:
4d:b2:be:0a:c5:b2:22:b9:52:f1:34:13:cf:43:8c:4b:76:92:
5b:32:72:75:55:23:e3:c3:03:33:12:68:0e:05:bc:90:4f:ee:
72:af:ae:8f:e4:09:22:10:6e:cc:94:bd:38:36:64:3e:96:7a:
d7:db:c6:f9:43:aa:22:4c:45:fc:dd:1a:41:c2:bd:16:04:0d:
b6:1d:31:d2:94:5d:c3:8c:13:9a:67:79:0a:11:65:95:e4:13:
23:1c:6d:82:d2:5e:f7:3f:60:c6:49:d3:5d:7c:12:2d:7b:f2:
df:ac:8d:dc:e2:4e:ad:06:75:47:42:e6:97:1a:2f:fc:fc:f5:
88:02:25:5e:14:4c:f7:5f:dd:1d:3e:ce:82:31:9a:3c:c4:2d:
08:8a:99:60:56:e4:fc:6d:5d:be:fc:6f:40:17:18:dc:44:40:
14:0e:fe:6b:29:23:9f:3d:9e:99:7c:e9:3b:38:e2:6f:3d:93:
fc:ea:cf:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:54 2024 by rpki-client on console-fra.rpki-client.org