Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/RHICnd6DqY1evx4tZe2AmObP39E.roa
File: RHICnd6DqY1evx4tZe2AmObP39E.roa (raw, json)
Hash identifier: xEXGETX8oSb5pg7SoGZqqptjWIZGjgaZGP+O4+yFNuQ=
Subject key identifier: 44:72:02:9D:DE:83:A9:8D:5E:BF:1E:2D:65:ED:80:98:E6:CF:DF:D1
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0460
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/RHICnd6DqY1evx4tZe2AmObP39E.roa
Signing time: Wed 12 Jun 2024 15:55:04 +0000
ROA not before: Wed 12 Jun 2024 15:55:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 12 Jun 2024 19:55:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1120 (0x460)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Jun 12 15:55:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4472029DDE83A98D5EBF1E2D65ED8098E6CFDFD1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:6e:15:69:79:e7:43:22:c9:49:74:59:e1:b3:
89:98:de:8c:23:57:b9:0a:62:bd:2d:26:6d:62:be:
69:4b:c4:64:0e:b9:db:d5:75:d6:2c:5f:ea:a5:2b:
df:20:ce:8b:b9:7b:6c:2f:00:8d:b1:0e:a0:1d:22:
97:f1:e1:6d:e6:2f:54:ae:74:38:2a:e9:b2:34:01:
43:bd:c5:8e:86:82:81:1e:36:15:63:d1:1b:5e:de:
ff:73:ca:c5:e4:ba:9b:3d:c3:db:d2:88:6b:13:10:
4a:5a:86:5d:00:dc:c9:61:7a:0c:f6:8d:3e:34:73:
a6:e4:2f:87:f1:55:8e:02:4b:f8:96:d0:45:1c:47:
70:c2:76:12:ec:f0:15:35:4a:1b:4b:bd:51:e5:cc:
5d:a1:1a:5e:2f:db:81:b7:09:8d:2f:39:b1:68:9a:
5d:51:92:ea:c9:f7:d5:8d:c2:16:f3:f7:c6:87:cd:
c8:f1:32:b2:9d:43:4d:a0:c8:0b:6c:41:5d:08:01:
5e:1d:af:f8:a8:f1:e6:06:b1:0d:0b:d6:a9:41:ba:
96:19:75:d1:b3:09:2f:a9:d6:f2:98:f3:80:b4:0d:
9e:d5:73:1e:7b:ff:28:e1:4e:54:41:ce:61:a6:28:
94:eb:2e:94:36:ae:e5:d0:7c:c7:a3:72:77:f9:6c:
2c:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:72:02:9D:DE:83:A9:8D:5E:BF:1E:2D:65:ED:80:98:E6:CF:DF:D1
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/RHICnd6DqY1evx4tZe2AmObP39E.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
d8:94:8c:92:14:09:1e:de:7c:b6:a2:11:7b:30:e7:63:79:1e:
9d:3a:a6:31:b4:4b:2d:68:a0:0a:48:05:47:46:f8:99:4f:5e:
a9:4b:a5:84:71:fa:3d:8b:48:ed:5e:09:dd:0b:59:eb:b3:9d:
3f:16:21:7a:ba:79:28:2f:f4:5a:7c:ee:f6:16:6b:eb:f1:7f:
6c:22:63:1d:b0:53:64:76:30:65:e8:e4:25:f2:5d:99:5b:26:
0e:73:2b:41:e3:9d:50:1c:3a:b7:99:ba:0f:24:7c:f2:de:ce:
b6:38:9b:17:c9:ab:2a:05:47:38:31:a8:01:13:a1:7a:d6:36:
09:61:d9:ba:af:c9:d7:24:d9:22:3c:a8:96:53:67:50:34:04:
76:5f:54:10:c9:f7:7e:7f:e6:32:0f:11:67:54:94:25:6e:e4:
50:97:8a:6d:27:5d:ce:09:8b:20:72:7d:6e:d9:ba:86:29:58:
18:37:e4:2b:59:fa:1b:2b:90:ae:53:30:e2:a1:ef:51:ba:66:
0f:28:54:66:4a:49:05:be:ab:f4:9e:d7:e1:0a:ac:a6:25:84:
a6:45:5c:12:2c:a7:3c:03:6b:c8:65:a5:c6:01:7c:36:5e:ba:
aa:e8:fb:6d:18:91:1a:d4:6a:42:9f:73:3a:0f:3e:be:0f:2f:
2c:8a:70:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 12 21:56:40 2024 by rpki-client on console-fra.rpki-client.org