Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/Uq9D7wNGkyb4I1SOs0QtKifSlGg.roa
File: Uq9D7wNGkyb4I1SOs0QtKifSlGg.roa (raw, json)
Hash identifier: vBK7ibW/W5AWp5df4yVSGCkeHt7h0yHmNMgzysVrZfg=
Subject key identifier: 52:AF:43:EF:03:46:93:26:F8:23:54:8E:B3:44:2D:2A:27:D2:94:68
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0220
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/Uq9D7wNGkyb4I1SOs0QtKifSlGg.roa
Signing time: Tue 09 Apr 2024 15:55:03 +0000
ROA not before: Tue 09 Apr 2024 15:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 09 Apr 2024 19:55:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 544 (0x220)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Apr 9 15:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=52AF43EF03469326F823548EB3442D2A27D29468
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ec:ec:5f:48:f6:18:fa:95:e6:3a:45:58:ea:
e7:f5:ab:fe:0b:c5:dd:b1:27:6b:dd:94:92:5b:5e:
e3:9f:bd:87:f5:b9:54:e7:67:46:05:6c:eb:31:4d:
24:8b:8a:5b:f9:9d:4c:e2:a0:29:66:7a:65:d1:12:
6a:11:9d:82:64:54:2b:93:5d:7d:7c:39:54:a2:ec:
88:04:f1:ed:d0:fc:0c:6d:14:4a:82:78:68:91:fd:
bf:f4:5b:01:20:8d:31:9e:29:32:46:45:eb:03:86:
a3:f3:dd:3f:a4:49:3f:86:87:51:73:7f:f8:fe:1f:
a6:ca:3f:fc:99:b7:b9:cf:b2:41:04:d2:67:64:ab:
77:bb:06:08:d7:84:4b:98:54:c1:47:fa:87:da:12:
45:75:e9:7c:67:90:56:0e:2d:d7:39:2d:56:59:95:
1b:d3:b5:99:c0:da:e7:ee:2a:9c:18:e4:61:bb:05:
70:ac:f7:14:3e:16:4c:ac:cc:63:e2:f3:34:73:7b:
f4:3e:de:83:f0:13:6c:56:66:0a:0c:6b:c9:bb:4e:
af:2c:c6:db:01:1a:84:0f:1f:d5:c5:bc:3a:15:26:
61:2e:d7:1a:1d:2c:35:7e:35:b1:1d:95:e5:cc:e3:
02:3e:44:f1:e1:eb:90:93:97:3c:c0:57:00:31:e6:
11:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:AF:43:EF:03:46:93:26:F8:23:54:8E:B3:44:2D:2A:27:D2:94:68
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/Uq9D7wNGkyb4I1SOs0QtKifSlGg.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
14:49:2e:d2:6e:3a:f2:63:d1:94:db:ca:bb:a7:ee:ff:44:cb:
78:8a:e8:f4:7f:51:92:20:51:b6:db:c0:54:ea:d5:11:13:9d:
db:72:95:50:93:9f:bc:c0:8a:d3:2b:5f:1c:e3:41:11:1c:d1:
6f:35:e6:d0:7b:40:80:46:d7:46:51:a0:0b:38:86:25:1d:c2:
12:cd:58:49:19:34:b8:5b:0a:d3:df:50:a4:67:0c:e4:ef:c6:
48:37:6a:53:ee:1c:0a:4e:36:83:4f:b7:af:52:76:d4:e6:36:
22:88:8a:7f:52:e1:81:c7:2a:3b:c8:64:3a:a2:bb:7d:1c:47:
17:82:f4:5e:3a:57:7a:4e:80:13:62:6a:7f:41:3b:7e:70:3d:
cb:34:de:97:3e:eb:d9:8c:ed:e7:bb:8b:ae:bc:62:9b:6c:22:
ac:00:10:c7:b4:fe:c3:7f:45:8b:63:cf:ee:98:57:28:d3:96:
1a:23:66:0b:8e:3b:e6:e2:7e:5a:42:8a:33:ba:1e:e4:71:af:
ac:a7:65:8c:31:af:4d:e8:fd:9a:83:dd:86:da:db:83:3d:22:
16:56:38:39:36:62:58:38:41:63:ec:c2:53:b1:67:e1:9e:53:
69:b5:05:5b:11:82:cf:58:81:09:23:69:86:6b:98:23:43:ef:
e6:f1:74:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:55 2024 by rpki-client on console-fra.rpki-client.org