Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/RnaW_oSIIMAzi09LAQhv3qFLJHw.roa
File: RnaW_oSIIMAzi09LAQhv3qFLJHw.roa (raw, json)
Hash identifier: RCAileUjIICAfq5gYFUoaUSJNQBd/1eISHhGqPy6RS8=
Subject key identifier: 46:76:96:FE:84:88:20:C0:33:8B:4F:4B:01:08:6F:DE:A1:4B:24:7C
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 039A
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/RnaW_oSIIMAzi09LAQhv3qFLJHw.roa
Signing time: Tue 21 May 2024 15:55:04 +0000
ROA not before: Tue 21 May 2024 15:55:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 21 May 2024 19:55:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 922 (0x39a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: May 21 15:55:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=467696FE848820C0338B4F4B01086FDEA14B247C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:77:48:f9:49:96:33:88:7f:85:05:2d:c1:d0:
c4:43:13:21:40:22:c3:6b:b2:b0:94:cd:85:03:c4:
4c:83:99:8f:fe:4b:2f:46:86:92:93:2a:a2:1b:06:
ae:9c:f4:c2:c3:4e:2a:5f:72:2f:3d:3b:17:af:5a:
f3:42:51:59:34:79:ea:5b:66:23:7c:b5:d2:a6:31:
0c:3d:3e:af:ec:7e:fe:fe:3d:86:9e:de:dc:6c:25:
5e:18:6e:d4:d4:27:50:e8:89:fe:08:e7:95:7f:98:
0a:95:9b:92:b9:89:85:bb:b3:80:09:a6:f8:46:42:
36:5e:dc:b2:62:c6:e7:c7:91:c7:f1:09:b6:10:db:
22:4d:e6:8b:58:9a:a1:bf:2e:e8:ae:a8:9e:83:30:
8b:68:8f:f5:f5:0f:2d:c1:39:77:bf:a6:00:4d:ad:
88:e8:d9:91:b8:2a:a5:e6:65:ec:98:68:45:18:04:
cb:3c:4f:cd:b4:f7:87:a8:54:20:8c:50:e2:a8:0c:
51:14:c5:f1:8f:d1:dc:47:68:87:77:f1:c8:56:1d:
87:03:05:08:37:6b:2e:b9:2d:bf:af:ea:3a:0a:5b:
38:c7:86:c7:62:ea:e4:71:27:ec:9f:9a:f7:9a:b1:
28:49:b2:8b:29:ec:db:39:cf:78:f3:3f:1b:27:78:
ca:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:76:96:FE:84:88:20:C0:33:8B:4F:4B:01:08:6F:DE:A1:4B:24:7C
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/RnaW_oSIIMAzi09LAQhv3qFLJHw.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
e1:4f:b3:f8:a7:ad:a8:ca:78:10:3a:6f:0b:c9:dd:a3:5f:67:
e4:24:92:33:6d:e6:72:33:9c:22:da:3d:2f:65:67:71:65:72:
82:d1:41:70:0c:c0:8f:2d:37:3f:d1:0b:12:3a:93:4d:77:55:
00:18:36:29:b3:b2:60:4e:74:10:76:4d:84:e4:1b:30:71:08:
13:74:91:05:b7:42:91:7e:4e:68:3e:82:9b:36:55:58:e0:ac:
df:29:d5:ee:ce:e7:19:4e:c8:ed:c3:0e:e1:1c:f9:35:fa:76:
e5:a1:49:34:85:41:00:90:94:8e:8c:b9:99:cf:6f:65:c6:04:
16:bb:8e:bf:c0:c0:b1:df:99:f2:1a:e3:16:d7:cb:02:94:51:
91:0a:3d:31:96:b7:ff:10:75:f0:29:dc:04:08:72:61:2d:cc:
d6:86:50:46:96:45:bb:9f:5e:05:6b:d1:62:24:17:97:e6:03:
b2:2e:ee:d1:12:ba:30:34:db:de:e7:00:4c:40:13:95:78:9d:
7c:2b:fa:fd:43:cc:cd:d7:86:2f:58:90:38:3f:89:30:52:96:
f9:6d:2c:94:80:dd:74:b9:77:ba:30:dd:91:68:33:6d:55:48:
f4:d6:17:b0:5b:fb:54:a1:99:51:e5:68:df:ee:37:35:3c:07:
10:5b:18:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:55 2024 by rpki-client on console-fra.rpki-client.org