Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/ILquf28tKXsZlZMcMypn8xZvkUY.roa
File: ILquf28tKXsZlZMcMypn8xZvkUY.roa (raw, json)
Hash identifier: 3JlQGsMZ0m/huCUADL2ltEkfrU41MScslqhNGqQ7zxI=
Subject key identifier: 20:BA:AE:7F:6F:2D:29:7B:19:95:93:1C:33:2A:67:F3:16:6F:91:46
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 04BD
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/ILquf28tKXsZlZMcMypn8xZvkUY.roa
Signing time: Sat 22 Jun 2024 23:55:03 +0000
ROA not before: Sat 22 Jun 2024 23:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 23 Jun 2024 03:55:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1213 (0x4bd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Jun 22 23:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=20BAAE7F6F2D297B1995931C332A67F3166F9146
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:63:99:e9:f5:82:d9:01:8d:d1:91:14:91:bd:
ba:fc:4f:16:53:f1:72:ca:d6:1f:c7:93:6a:59:e1:
f5:d6:51:4b:19:5b:b4:48:49:b7:24:65:d0:91:34:
14:64:9d:68:c6:be:cc:00:13:bc:ad:1a:f5:87:f2:
66:32:8d:3b:41:48:2f:45:a4:d9:fe:d7:c3:ef:e6:
f2:b5:26:4e:3e:fe:7d:02:64:e7:a8:8d:8f:a9:09:
c4:b6:db:fe:eb:95:9c:f4:98:73:5e:d4:83:8f:ba:
fa:db:d6:4b:e2:80:7c:0e:4c:0c:66:e9:62:9b:f3:
39:93:9a:cd:a7:c4:54:cb:89:83:b5:bd:39:7b:07:
78:1f:a1:66:09:54:19:61:aa:fa:28:fb:48:48:12:
9d:d6:24:a3:6c:b4:ae:1a:ee:85:89:00:2c:8f:cf:
82:29:7a:85:6c:26:88:e5:af:21:11:4f:11:71:ca:
e4:92:c2:2e:f8:86:52:f1:f4:06:fb:cf:a0:59:08:
9e:c3:c4:35:3f:d2:e2:83:06:a7:4a:18:bf:71:e3:
62:3d:35:f3:60:99:2b:c3:23:92:c6:e9:0a:89:ac:
48:93:0b:b6:e0:b4:31:56:fe:7b:fa:03:a3:f3:83:
af:6a:88:b8:65:ca:4d:ed:98:77:c9:9d:17:fa:a0:
83:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:BA:AE:7F:6F:2D:29:7B:19:95:93:1C:33:2A:67:F3:16:6F:91:46
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/ILquf28tKXsZlZMcMypn8xZvkUY.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:e3:82:de:9a:59:f4:16:1b:88:ed:a7:d6:79:4e:10:90:dd:
6f:fe:31:67:9d:56:ce:c7:e2:4f:a2:93:05:7e:bc:ba:b4:3b:
da:1c:73:ec:7b:ad:d0:e0:cb:5d:98:c3:02:d9:58:a6:52:4c:
17:7a:17:51:d4:ed:ee:b7:d0:0d:61:dc:f4:4d:fa:99:ae:d8:
f0:0d:38:d7:5c:73:bb:16:03:87:71:ce:d0:49:26:0a:e8:3b:
43:5a:9c:78:01:6d:3b:35:31:8e:3d:0a:e8:a6:6a:68:37:49:
f2:db:eb:06:5c:d8:58:8e:8b:52:77:14:0e:93:f5:4e:1e:1a:
79:ca:dc:bf:17:4b:54:ec:9c:8a:5d:96:b0:a2:57:81:37:80:
48:94:54:f1:2b:78:0e:49:30:09:57:19:11:a4:7e:fb:2a:6c:
6b:9a:f7:85:7c:47:41:d5:1d:42:07:94:4e:af:60:28:b2:44:
f7:8a:6f:b9:1c:58:3b:08:96:b4:63:6f:3d:bd:a4:70:3b:5a:
99:9d:5d:54:e1:3b:5b:bb:46:ac:90:10:fa:61:84:61:b3:83:
59:c1:24:b0:64:84:f5:9d:ce:0f:08:b8:e2:e8:4e:0c:d7:25:
99:80:3c:1b:db:62:f3:8d:c1:d6:7c:d7:ac:d3:ea:5a:35:37:
e6:d6:1b:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 06:12:52 2024 by rpki-client on console-ams.rpki-client.org