Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/N3mJl0GtFUwSBqrPN5-37KBap3U.roa
File: N3mJl0GtFUwSBqrPN5-37KBap3U.roa (raw, json)
Hash identifier: F5PJtMG3+lVRvCrqMzDNrTqcdsVXGsw4ZaDzM7s8Jzs=
Subject key identifier: 37:79:89:97:41:AD:15:4C:12:06:AA:CF:37:9F:B7:EC:A0:5A:A7:75
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 011B
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/N3mJl0GtFUwSBqrPN5-37KBap3U.roa
Signing time: Mon 11 Mar 2024 15:55:03 +0000
ROA not before: Mon 11 Mar 2024 15:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 11 Mar 2024 19:55:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 283 (0x11b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Mar 11 15:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3779899741AD154C1206AACF379FB7ECA05AA775
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:04:6c:fa:dd:20:cf:03:18:32:cb:49:de:e9:
b6:e3:80:a2:5c:c7:f5:f9:3c:59:c1:fc:e2:42:b5:
28:ab:3a:96:f8:df:19:22:62:15:f4:6d:8a:88:1f:
24:09:25:ba:0b:b2:64:4c:75:36:94:01:01:5b:a5:
65:d4:4c:ae:f3:73:62:51:4f:aa:f9:c7:7f:bd:99:
70:68:04:23:cb:d1:c8:ce:86:42:09:45:ec:11:94:
94:b2:a2:c0:01:2f:6e:43:89:8e:7b:43:b5:9c:53:
18:74:0d:0e:5d:2b:24:05:71:1b:c9:49:52:eb:32:
33:e6:c2:21:8f:85:5f:e0:c3:ce:19:c5:31:01:31:
bf:f9:04:e1:4d:68:b1:46:1a:96:45:35:da:62:2a:
3e:7d:0d:02:b5:8f:a0:ec:4a:fd:b6:f2:30:48:19:
0b:89:84:9b:48:32:21:6d:be:d3:95:50:cb:79:0d:
53:ae:09:99:6e:69:4a:da:a7:94:b3:8d:c1:6c:c6:
5a:2a:96:ff:06:a9:eb:74:37:6c:f9:8b:8b:7b:e7:
de:a5:bb:d5:dd:53:da:bb:c4:f6:14:ef:95:b5:80:
05:e2:7d:35:20:97:2d:3c:28:97:fa:59:40:ef:ef:
f1:92:a6:0a:d2:55:90:13:e8:15:67:eb:f9:1c:fd:
65:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:79:89:97:41:AD:15:4C:12:06:AA:CF:37:9F:B7:EC:A0:5A:A7:75
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/N3mJl0GtFUwSBqrPN5-37KBap3U.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
93:84:1c:81:e5:28:be:91:bc:30:74:7b:7c:15:e1:b4:98:52:
e3:47:d0:0c:f6:0c:a4:35:aa:14:cd:31:ac:c5:e8:1c:41:c1:
8f:8b:76:f6:ba:51:ca:68:38:56:dd:07:79:52:11:ed:64:df:
67:22:71:6a:6f:17:b7:91:61:1b:81:1c:8d:ed:92:2d:7f:b0:
bd:45:fc:46:55:93:49:a6:88:8f:e4:8a:3d:a7:a4:6e:21:f1:
21:25:07:90:04:f3:6a:e6:a6:38:7d:00:8e:f4:af:f4:6d:a7:
ac:17:4a:63:77:11:ed:15:e0:10:60:fe:f9:ac:8d:85:c8:28:
57:ec:44:d2:0c:00:73:50:ec:95:b1:e2:9c:c8:08:12:73:0b:
99:24:71:9b:59:be:83:a9:a6:23:d0:e1:67:10:04:3d:1e:c8:
d8:1d:5f:ed:a0:52:93:b2:be:71:b6:fc:f6:c8:bd:a8:86:94:
57:eb:80:04:46:fd:bb:ec:67:28:b6:a5:a5:e0:a9:11:5d:f4:
fd:2a:fc:2d:35:2e:03:27:f1:e9:ae:c2:33:10:f6:04:a0:9b:
12:17:fb:af:56:62:17:c9:cb:a0:76:cf:9b:8a:35:cd:38:2c:
7a:4f:25:b5:1c:79:06:4a:f1:a7:5e:d9:ba:83:9e:71:d2:2a:
af:05:1b:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:55 2024 by rpki-client on console-fra.rpki-client.org