Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/U65MptghfgIX9jnT_YVIVYM-PjA.roa
File: U65MptghfgIX9jnT_YVIVYM-PjA.roa (raw, json)
Hash identifier: ymGkiaCV9UUvRiWeC+zge7j+bBVUc5hQw80EAkVvZPE=
Subject key identifier: 53:AE:4C:A6:D8:21:7E:02:17:F6:39:D3:FD:85:48:55:83:3E:3E:30
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 06B2
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/U65MptghfgIX9jnT_YVIVYM-PjA.roa
Signing time: Sat 17 Aug 2024 15:55:03 +0000
ROA not before: Sat 17 Aug 2024 15:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 17 Aug 2024 19:55:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1714 (0x6b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Aug 17 15:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=53AE4CA6D8217E0217F639D3FD854855833E3E30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:fb:54:67:90:15:72:66:af:67:e7:92:53:68:
42:05:bb:72:ab:85:dc:b1:b9:29:e3:92:a7:fa:34:
20:70:3d:2d:8d:5e:39:79:29:3b:89:bc:84:8b:98:
61:a6:9d:42:9c:cf:36:4e:05:b9:54:bd:35:a0:35:
43:37:9d:a5:cf:2d:a0:5b:f8:5a:6b:8d:9a:66:8b:
52:13:4e:84:0d:f0:33:f1:fa:4e:e3:fc:3c:45:6d:
16:42:83:ac:02:0a:08:2f:bd:a5:c0:3e:8c:49:c6:
93:d1:05:e0:ad:5e:7b:af:aa:f3:19:46:a4:61:55:
dd:2d:40:8c:e8:7e:f1:d6:22:6d:26:e7:37:6f:d7:
f6:6c:80:f8:04:5c:91:21:f7:f1:65:7d:0d:99:f8:
0a:cb:98:ad:49:17:20:3e:0d:ae:47:cc:a6:db:7c:
30:af:b5:6d:a7:82:36:49:07:0b:7c:86:75:5c:ff:
da:5b:88:45:80:95:df:12:16:67:cd:a2:fe:9d:08:
c8:a3:71:46:b3:aa:b0:09:08:5e:6d:ed:96:de:e1:
d3:b3:af:52:31:31:a7:a6:1c:c7:d9:11:9c:d8:94:
e8:fb:a9:49:97:3f:9d:52:7b:b8:9b:94:1b:67:9f:
86:e7:95:c5:c2:cb:b7:c4:54:b1:a3:68:17:bd:d9:
15:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:AE:4C:A6:D8:21:7E:02:17:F6:39:D3:FD:85:48:55:83:3E:3E:30
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/U65MptghfgIX9jnT_YVIVYM-PjA.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
e0:6e:2a:0a:61:5f:de:07:cd:b4:f8:53:55:94:21:26:27:1c:
81:93:8e:ff:65:7c:97:24:43:f3:d7:64:83:70:19:6d:79:de:
40:50:52:d3:b5:d0:e2:f4:0e:51:77:11:b9:da:3b:a9:a6:af:
5d:3b:4f:46:dc:d0:40:39:5b:c2:1c:11:a9:34:0a:b9:22:b0:
e9:cf:0e:23:91:13:45:fb:7a:8d:ba:e0:b0:96:e3:eb:02:e1:
41:59:9f:99:09:1a:52:96:a3:9b:5a:7e:cf:73:a7:19:c1:8f:
d9:dd:9e:58:6b:50:af:4a:26:54:89:c8:10:33:d5:bb:bb:c2:
b1:a6:7e:66:80:48:3a:23:c0:c4:d9:99:fa:ed:15:4f:de:f5:
f7:5d:86:2b:02:b0:88:f8:d0:78:a0:32:42:fe:04:a3:07:9c:
0b:91:33:d6:a6:84:bb:9a:49:41:9c:b5:0c:64:e5:27:0c:65:
ad:fb:17:d2:2d:51:23:f6:52:76:91:3f:58:f0:fe:35:07:11:
0b:de:95:1c:46:8e:27:68:f6:0f:a8:bf:d0:85:04:a5:31:9d:
e5:56:66:56:70:14:5d:25:1b:5c:3d:eb:bd:c8:87:1e:e7:03:
d5:08:6b:8c:fb:9d:d4:16:f5:82:7a:ac:73:ff:52:df:7f:62:
3f:12:66:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 17 21:29:17 2024 by rpki-client on console-fra.rpki-client.org