Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/JYEUPnFhYQLF30UEqybe40LLwTc.roa
File: JYEUPnFhYQLF30UEqybe40LLwTc.roa (raw, json)
Hash identifier: uTgY2jexyztnjM+G2hOj1WfxAEjywcJui38ALtjiK2w=
Subject key identifier: 25:81:14:3E:71:61:61:02:C5:DF:45:04:AB:26:DE:E3:42:CB:C1:37
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 06EB
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/JYEUPnFhYQLF30UEqybe40LLwTc.roa
Signing time: Fri 23 Aug 2024 23:55:04 +0000
ROA not before: Fri 23 Aug 2024 23:55:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 24 Aug 2024 03:55:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1771 (0x6eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Aug 23 23:55:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2581143E71616102C5DF4504AB26DEE342CBC137
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:4d:c0:e8:d4:1c:c7:2d:c9:ce:e6:24:00:a6:
16:3d:48:bb:1f:4f:be:51:53:21:a4:73:4e:c6:63:
d3:fd:55:a2:f3:e6:a4:ee:1d:c1:4d:2c:10:1e:fd:
12:38:30:3f:f4:9b:46:48:37:a2:3b:6e:2c:4f:1a:
73:0a:ca:3e:78:56:a8:01:6b:5a:04:e2:1a:9f:14:
60:9c:eb:17:98:84:ba:1d:14:9e:6f:e8:d4:6d:f5:
a0:ce:63:93:8c:14:f1:49:ee:5c:d3:79:ae:c7:f1:
d3:ca:9a:16:86:cc:45:0b:95:f3:ca:b6:2e:ff:b6:
db:15:ad:8a:58:eb:1c:f2:73:bb:ab:51:01:29:c3:
41:c8:ad:50:13:db:f8:64:84:76:a1:a7:6f:0b:33:
d2:bc:c2:86:90:c2:b1:35:c1:5b:cd:c9:91:bb:97:
6d:14:d1:37:d5:fa:cf:59:2e:10:72:c3:0c:ba:af:
1f:89:df:5b:54:b7:c7:c8:9f:9a:1b:9d:b0:fe:f3:
f6:03:1b:11:c5:84:0c:7e:68:f3:66:63:31:06:06:
18:33:9b:4f:61:93:ac:e8:c6:68:06:ff:12:2f:64:
28:c6:06:60:92:c1:0b:db:ea:eb:db:d0:73:57:7e:
97:4e:06:bd:06:af:a3:49:fe:56:af:c2:86:77:c7:
a2:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:81:14:3E:71:61:61:02:C5:DF:45:04:AB:26:DE:E3:42:CB:C1:37
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/JYEUPnFhYQLF30UEqybe40LLwTc.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:8a:74:35:83:35:d4:06:e1:fe:09:e2:bf:ca:eb:af:12:29:
4b:cf:af:be:52:ff:0c:2d:fe:38:7e:57:05:43:92:b7:76:a0:
f2:a9:80:a0:d9:4f:8c:c6:80:80:dc:6f:dd:3f:cd:6c:d1:97:
f8:bd:0b:bb:cf:44:3d:72:a0:a9:77:7a:a6:51:b5:2f:fd:cf:
38:bd:7b:d4:58:bf:0b:3d:a7:d7:e4:c5:9d:4b:ad:b0:5a:17:
42:49:f6:a4:39:db:37:f6:60:55:73:8a:73:7a:ce:dd:e3:ce:
a1:f9:28:e1:42:49:d2:5c:d7:52:00:70:d2:05:1e:47:00:8e:
97:78:64:91:89:4a:c7:f1:cd:ad:81:5e:5a:9c:4b:33:c7:07:
b8:55:b5:4c:b5:ae:31:1e:11:fd:eb:91:74:19:94:44:af:a0:
70:38:6c:57:3e:29:a5:bd:e9:24:5a:81:b7:dd:3e:4d:c3:81:
87:26:af:ca:a5:21:3c:fa:6c:7d:2f:46:94:1e:39:b6:50:35:
38:53:6d:6a:5d:19:c9:c3:da:d1:a0:e0:d9:bd:0c:73:b3:e6:
4d:4a:5e:f6:9f:f2:65:13:e5:c5:64:31:aa:ab:ee:06:06:fe:
e1:05:fe:0d:55:2d:ad:35:8c:d5:58:8a:60:fb:06:b5:de:2b:
3e:0a:e6:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 24 08:01:10 2024 by rpki-client on console-fra.rpki-client.org