Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/FRCUJxv25MXUHX7Qf1UWuUc6OGc.roa
File: FRCUJxv25MXUHX7Qf1UWuUc6OGc.roa (raw, json)
Hash identifier: SpqWpUHH+kYo5MsKldSsn1kTo5TqWrOwEzab1qpI7Zw=
Subject key identifier: 15:10:94:27:1B:F6:E4:C5:D4:1D:7E:D0:7F:55:16:B9:47:3A:38:67
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 03FA
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/FRCUJxv25MXUHX7Qf1UWuUc6OGc.roa
Signing time: Sat 01 Jun 2024 07:55:03 +0000
ROA not before: Sat 01 Jun 2024 07:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 01 Jun 2024 11:55:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1018 (0x3fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Jun 1 07:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=151094271BF6E4C5D41D7ED07F5516B9473A3867
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:65:48:f1:37:23:17:c7:a0:b5:b2:ef:a6:0d:
96:0f:15:86:e1:fc:67:7e:d0:2c:76:ba:a0:6e:4e:
e5:a8:9e:db:29:4c:e1:ed:70:7f:07:c6:f4:69:d5:
c6:9c:25:96:a6:65:01:ab:b7:ae:f0:a5:37:df:0a:
20:1e:83:a6:2e:75:96:9c:33:2e:50:7d:28:7f:8e:
3b:7b:8c:9b:8f:9f:07:0b:19:16:df:73:c2:08:ba:
cb:9b:47:c2:45:c3:95:d7:53:26:d4:d1:d1:4e:f5:
bd:ce:fe:f6:d5:ed:16:9f:c0:8b:e8:49:6d:94:f1:
95:db:db:16:ee:85:7c:18:71:a2:8f:f7:6f:67:61:
8d:b8:31:a9:20:c6:16:c6:cc:e5:89:64:f4:e0:bd:
d5:a3:71:2f:f7:39:d7:09:79:b0:b8:9c:bb:13:88:
d4:f8:a2:ee:a8:0f:43:c4:68:30:33:bc:bc:09:e1:
7c:12:1f:f7:c5:15:40:7f:5d:31:8a:93:4f:f1:19:
b5:d6:34:90:fe:9e:c7:7d:12:1f:60:74:4d:22:bf:
9b:e0:60:d9:08:63:4d:b4:b1:eb:7c:c1:ae:b7:be:
40:88:95:48:14:f3:09:ea:f0:2f:ea:6e:aa:48:18:
1f:88:67:f9:05:6e:8b:d4:77:7c:fd:d7:f1:ee:b4:
96:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:10:94:27:1B:F6:E4:C5:D4:1D:7E:D0:7F:55:16:B9:47:3A:38:67
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/FRCUJxv25MXUHX7Qf1UWuUc6OGc.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
72:19:70:d5:85:a9:07:74:fe:22:58:1d:42:1c:4f:36:fb:15:
7d:72:e0:2c:23:64:9b:c8:4f:79:07:73:a8:fc:66:c2:04:23:
8b:19:0d:f3:48:e9:e4:fa:05:b2:c1:12:d3:26:22:fa:04:16:
80:25:aa:76:a2:ae:17:0e:e2:c2:10:5c:cf:9f:30:c8:70:5a:
c9:a1:af:83:6a:ad:1d:ba:48:42:b6:8f:c4:01:a2:3f:a5:92:
61:e6:f0:b6:c3:1c:a4:cb:40:c6:5e:ba:a3:7a:45:eb:aa:c8:
b6:d4:85:bd:df:cf:0e:34:5e:f7:f9:11:ce:37:e7:44:fa:ef:
7a:3d:10:57:f9:86:a3:55:dc:1e:4e:db:1c:e2:d2:e3:84:e3:
9d:c1:2c:0f:24:1b:de:b3:83:97:45:71:18:53:67:da:e8:d2:
9d:92:08:e6:31:5f:c6:d6:1c:22:e0:1a:73:c4:42:2d:9e:62:
f3:cb:7b:5f:a3:d3:fc:ae:47:c9:45:51:d9:31:6a:28:ff:06:
19:df:09:29:cf:8a:3c:6a:47:01:27:b3:b8:41:a3:fd:6e:de:
5a:b5:f9:65:dd:c1:8b:c0:78:6e:f5:5e:bf:0b:df:a2:5e:d3:
08:11:4c:83:bd:a2:4d:5e:50:fa:33:2a:44:41:8e:73:a4:21:
62:2b:ca:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 17:05:32 2024 by rpki-client on console-ams.rpki-client.org