Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/E3AX9pseOyOJs-GzOK4ykQevWN0.roa
File: E3AX9pseOyOJs-GzOK4ykQevWN0.roa (raw, json)
Hash identifier: v5eKNvMS4z9Xre8a9VEeqrLGJrPykQcFQaYnlUYjdgo=
Subject key identifier: 13:70:17:F6:9B:1E:3B:23:89:B3:E1:B3:38:AE:32:91:07:AF:58:DD
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 08B3
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/E3AX9pseOyOJs-GzOK4ykQevWN0.roa
Signing time: Sun 13 Oct 2024 15:55:03 +0000
ROA not before: Sun 13 Oct 2024 15:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 13 Oct 2024 19:55:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2227 (0x8b3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Oct 13 15:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=137017F69B1E3B2389B3E1B338AE329107AF58DD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:56:79:30:92:39:b4:17:39:c6:d2:27:12:84:
89:61:e4:d0:0a:3c:b8:13:7d:fd:34:5d:c7:70:5e:
38:38:87:24:8a:2a:7d:28:6c:0f:78:2f:a1:af:a8:
c2:18:de:1b:28:b1:51:38:99:e5:f1:de:9e:d6:38:
d9:72:69:b4:ab:05:02:90:22:1d:d3:b7:b2:39:b3:
fc:ac:77:78:14:bb:be:50:46:df:c1:5d:41:91:d4:
b7:73:b5:ef:07:b2:0b:55:45:1e:41:c9:35:3a:a1:
d9:dc:ca:87:fb:e3:2d:2d:b7:bc:29:83:73:6a:3c:
35:28:3b:e1:3c:96:94:5a:69:99:df:6d:f1:05:51:
b7:17:53:5e:cb:8f:d1:81:ec:a1:01:3b:a9:fc:74:
a2:3b:61:0a:e2:52:c5:55:bc:56:89:81:29:de:79:
46:1b:82:3d:0d:bd:ae:8e:da:b3:4b:a3:62:62:3e:
45:9e:8e:f0:92:68:b3:84:a1:fe:54:ed:4a:37:1e:
92:57:93:c9:11:f0:cc:0c:ca:e1:55:9d:9e:2e:5a:
42:92:95:5f:54:ca:33:89:33:c5:81:6f:3a:39:c1:
51:b5:39:dd:8d:69:1a:21:b7:2e:ba:fa:1c:42:71:
4a:e5:6a:87:bb:37:80:a9:b1:ce:95:6e:17:c4:88:
4b:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:70:17:F6:9B:1E:3B:23:89:B3:E1:B3:38:AE:32:91:07:AF:58:DD
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/E3AX9pseOyOJs-GzOK4ykQevWN0.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:25:c8:19:fd:42:a6:ec:07:a9:40:69:b4:c4:77:53:25:ae:
61:82:b1:5e:40:f0:e9:e3:6e:4d:89:ae:45:62:9c:de:ae:14:
4c:83:75:b9:7a:a7:cc:e8:d2:f3:2e:86:f5:26:d9:7f:9b:97:
16:50:5d:d5:0f:b1:4f:3c:c7:2a:26:e8:50:70:56:4c:c6:89:
79:25:3c:87:cd:ee:bf:dd:ed:77:20:4a:07:25:e2:25:ec:a5:
17:ea:c5:a9:08:8d:1d:7a:ab:b1:12:16:22:c9:2c:75:c2:bc:
d3:5d:92:ff:6f:43:6b:c8:3c:95:b7:9c:b0:c8:a2:43:27:4e:
5e:10:59:8e:df:dd:d5:4b:9f:6e:7c:c8:03:c3:6b:92:6d:99:
23:a8:f2:c1:dd:74:8f:d9:40:c8:4a:48:e0:67:f6:15:87:1e:
9d:0a:4e:f3:89:29:2e:67:ca:08:aa:3b:d1:9f:b9:c4:cd:28:
b4:fa:c8:5d:e7:94:d6:50:02:70:5b:37:e6:db:f9:24:07:54:
df:d1:13:e1:d7:c6:b7:70:de:6f:3f:f5:b4:41:4a:ff:cd:2e:
31:08:bc:ba:db:1f:63:16:b4:dc:34:60:72:8c:20:03:58:be:
e7:45:a0:0b:a5:a7:45:66:97:10:b2:a7:25:1f:45:eb:36:d3:
1a:f8:63:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 13 23:18:44 2024 by rpki-client on console-fra.rpki-client.org