Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/ORpMPx9ehJ0OnQ73agNRgPUkDPk.roa
File: ORpMPx9ehJ0OnQ73agNRgPUkDPk.roa (raw, json)
Hash identifier: HsmAwYZMe9Lep+Yi0+E2CjR9ko2TCI6mU8CEWJmJA+A=
Subject key identifier: 39:1A:4C:3F:1F:5E:84:9D:0E:9D:0E:F7:6A:03:51:80:F5:24:0C:F9
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0118
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/ORpMPx9ehJ0OnQ73agNRgPUkDPk.roa
Signing time: Mon 11 Mar 2024 07:55:03 +0000
ROA not before: Mon 11 Mar 2024 07:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 11 Mar 2024 11:55:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 280 (0x118)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Mar 11 07:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=391A4C3F1F5E849D0E9D0EF76A035180F5240CF9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:dc:5a:48:0e:71:62:f7:5f:89:2d:6c:76:b0:
7a:7d:2e:91:5f:8d:a3:f6:12:e0:5b:9a:ae:ff:d3:
df:1f:36:4e:43:b1:fd:9e:d3:f9:18:5e:5c:75:85:
af:44:fe:13:04:f4:e8:ee:92:bf:ed:3a:fe:8b:4e:
46:d6:91:94:9a:3a:8e:46:75:11:3d:2c:5a:01:4b:
a7:63:a0:eb:1e:95:db:f8:0d:74:b0:9f:10:7d:e2:
c2:fa:61:25:ba:e3:7f:d5:35:5e:d6:98:53:81:bc:
1d:f2:06:b2:66:6e:31:50:a6:9f:da:78:5a:e2:7f:
28:1a:9d:2f:78:cb:68:42:7f:83:e9:34:6c:cd:a6:
77:bc:69:ee:95:94:3e:cf:92:a9:9d:de:cb:22:b6:
74:57:5a:9a:32:92:5f:ae:6a:e4:a1:52:c2:d7:fa:
ce:6b:52:4e:83:1a:a7:2a:06:62:9d:f0:c0:c6:85:
ae:2f:4f:4e:bc:3b:43:cb:7b:88:3d:e7:b9:2c:b1:
d4:b2:74:16:bf:5e:2e:1e:7f:6e:04:ee:fa:12:c1:
91:bd:ea:e4:ce:4c:f2:62:c1:2a:cf:b9:e8:7a:0e:
a6:2b:7e:4b:23:80:12:e6:2a:42:19:a4:d6:84:02:
ff:f7:a5:7a:f0:e8:98:43:2d:f9:30:04:00:5a:3b:
9b:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:1A:4C:3F:1F:5E:84:9D:0E:9D:0E:F7:6A:03:51:80:F5:24:0C:F9
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/ORpMPx9ehJ0OnQ73agNRgPUkDPk.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
af:5f:04:21:70:c5:18:38:6a:66:1f:c6:fc:cf:f2:f9:4c:51:
d9:11:50:7c:c9:ae:af:c2:5d:b5:04:3f:7d:12:2c:b7:ee:f6:
e1:33:8f:aa:2f:bd:ba:21:05:73:07:b0:3b:85:3a:5e:e3:a5:
a4:1c:22:3f:8c:14:c8:22:23:a0:91:62:3b:20:cf:4a:80:0a:
bc:ed:20:e1:38:a3:1d:78:cd:9b:b2:9a:12:32:7c:d4:38:c3:
5d:5e:aa:38:c9:b5:a0:cc:2d:eb:4f:69:b2:c4:b5:1b:ea:a6:
ed:16:06:b6:3d:ad:a3:14:f5:44:ad:47:6a:50:9f:db:b8:a3:
36:da:f1:87:f2:09:be:5f:1d:fb:98:56:5b:a1:be:73:b2:19:
25:62:ba:39:3a:c7:a7:74:97:01:70:b4:81:de:0f:9b:9f:ba:
84:90:43:8d:07:99:9e:06:c2:df:25:c9:20:48:0d:6e:57:3d:
fc:e0:9a:cf:eb:b6:97:38:3f:27:7c:6e:f3:3c:46:2f:90:d2:
65:e6:12:84:36:ce:c1:aa:73:f2:41:49:e0:3a:08:fe:14:9d:
78:55:93:6d:aa:04:81:04:14:87:45:07:5b:c1:2d:24:d4:cc:
4b:f4:e3:04:7d:27:fb:f0:14:7c:73:cb:fb:78:af:24:bc:ac:
c9:63:fa:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:55 2024 by rpki-client on console-fra.rpki-client.org