Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/UEgj_0kgHBA3T2ueCFJXMODzQ9o.roa
File: UEgj_0kgHBA3T2ueCFJXMODzQ9o.roa (raw, json)
Hash identifier: x1Lc4s08Fd2cdjWxbuXHaDMWD8I6TYVw5Q7Npc5kLag=
Subject key identifier: 50:48:23:FF:49:20:1C:10:37:4F:6B:9E:08:52:57:30:E0:F3:43:DA
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 70
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/UEgj_0kgHBA3T2ueCFJXMODzQ9o.roa
Signing time: Wed 21 Feb 2024 15:55:03 +0000
ROA not before: Wed 21 Feb 2024 15:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 21 Feb 2024 19:55:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112 (0x70)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Feb 21 15:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=504823FF49201C10374F6B9E08525730E0F343DA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f1:ed:92:73:db:2f:77:f2:0d:ef:ac:45:41:
08:1b:8b:d9:2d:d3:62:1b:ef:65:4c:c6:06:3f:03:
6a:38:dc:fd:d5:94:af:6c:03:c0:d4:30:ca:59:f7:
c4:99:6a:28:83:eb:89:fb:ee:cf:a3:04:d8:30:43:
10:38:2e:c7:d1:4a:06:a0:29:26:fd:fe:ee:fc:66:
c8:98:6a:8f:f1:fd:54:dc:4a:4b:9e:be:86:49:0c:
ac:be:99:6e:7e:87:0c:9a:9f:b4:5c:8a:5a:ed:07:
31:0a:c7:1a:33:6c:ab:e3:f3:5b:41:88:95:80:97:
71:c3:1e:dc:cd:74:29:ad:ae:bd:28:49:1e:97:34:
6a:4e:45:06:ee:10:22:26:00:ac:e9:a0:0e:3f:94:
12:d0:fe:86:fb:95:9b:65:6a:cb:41:1e:91:a8:a7:
b2:ee:1f:4d:f1:a5:b2:37:10:da:16:bc:05:b2:74:
69:33:f2:1d:ef:81:66:55:fb:6b:4b:96:df:4d:6f:
4e:8c:0b:6b:73:fd:1f:e2:29:8f:c2:7e:0c:8a:1c:
97:0b:d4:e0:53:33:c7:85:90:99:d9:21:e0:6f:2b:
6f:7d:0c:55:e5:be:16:e2:6d:69:f7:54:14:82:1e:
f6:73:3b:1a:94:c1:51:1c:4b:25:10:52:6b:46:ad:
9d:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:48:23:FF:49:20:1C:10:37:4F:6B:9E:08:52:57:30:E0:F3:43:DA
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/UEgj_0kgHBA3T2ueCFJXMODzQ9o.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
49:8a:bd:08:57:ad:a5:fe:d2:4f:5e:de:20:cc:97:42:28:d1:
40:c3:9a:61:f6:8a:19:58:35:2b:aa:65:68:92:77:49:3c:b1:
7c:90:02:81:85:51:b0:98:57:59:59:29:28:18:ac:41:91:67:
e6:ea:0a:fc:c1:b5:cc:c5:4a:df:d5:5e:47:ec:74:e3:65:28:
15:97:cf:1a:55:b5:45:32:49:f7:80:41:93:e0:31:1a:7e:22:
b6:10:cf:e7:e2:fe:8c:d5:da:7c:bc:b2:bb:31:15:35:f9:49:
81:6d:05:fc:19:55:de:50:16:bb:b0:8a:ed:59:54:59:42:22:
90:d7:01:c6:52:4d:47:d4:6a:ef:9d:2b:42:64:4f:87:17:71:
6b:40:2e:60:0f:80:34:38:9a:0a:98:a1:22:99:3b:b7:97:8c:
a8:cc:2b:db:ac:b4:31:8a:13:23:7e:65:6e:33:89:a0:49:3f:
f2:66:23:6e:ee:c6:a0:7a:58:32:a6:49:d5:67:58:2b:d3:a9:
10:f2:be:25:17:50:29:25:b4:ea:ff:00:5c:98:70:d6:8c:ce:
2f:3d:30:e0:4d:17:32:f7:10:74:63:85:75:f0:13:2a:90:be:
3c:39:0d:cc:e2:16:70:da:f1:83:10:00:cc:eb:e1:c8:85:7c:
b5:94:79:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 22 00:46:09 2024 by rpki-client on console-ams.rpki-client.org