Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/WCC-XswpTkY9YdvzOwQwOn5gZLw.roa
File: WCC-XswpTkY9YdvzOwQwOn5gZLw.roa (raw, json)
Hash identifier: B7Eg0bZVby+mevo/MI5bW/50EGR7U1+IwcEMdqZ1tHg=
Subject key identifier: 58:20:BE:5E:CC:29:4E:46:3D:61:DB:F3:3B:04:30:3A:7E:60:64:BC
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 03DC
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/WCC-XswpTkY9YdvzOwQwOn5gZLw.roa
Signing time: Tue 28 May 2024 23:55:03 +0000
ROA not before: Tue 28 May 2024 23:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 29 May 2024 03:55:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 988 (0x3dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: May 28 23:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5820BE5ECC294E463D61DBF33B04303A7E6064BC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:80:d8:36:f6:05:a6:cb:fd:1c:53:cc:52:d8:
0c:d5:69:c9:32:3f:72:76:27:ab:4e:3c:4b:5c:4a:
18:0f:d9:3d:5a:30:b3:87:53:85:6c:15:e0:3c:5c:
7e:ed:68:c8:96:8f:ef:33:85:8c:3e:9b:19:ad:36:
c4:6e:61:54:ce:35:e6:63:5d:93:d1:5a:fe:0f:17:
34:30:5b:58:97:2f:0b:e8:18:c1:b2:91:60:65:e7:
37:0c:55:b5:6d:29:93:db:47:4d:71:7c:a2:49:c5:
14:e6:be:3e:9f:2e:60:e8:2e:e1:d3:0c:fa:7c:24:
4a:6b:eb:86:ab:a1:7e:ff:3f:37:6c:23:67:87:c5:
2c:9d:c7:f9:0c:ee:41:8a:fa:c5:a1:a5:40:fd:c9:
87:30:c3:e8:91:2f:b7:a5:d6:b5:c9:a1:1f:81:79:
70:40:08:35:6c:89:8d:f4:9b:cd:4a:1f:b8:48:28:
62:fd:a8:aa:9d:1c:2f:d8:93:e7:d0:cb:56:31:8d:
be:33:d9:4a:e8:26:65:02:87:91:83:1a:d4:cb:1d:
c7:8c:6d:10:39:e6:47:24:6e:1e:12:e3:ba:89:d4:
f9:0a:29:74:a4:b8:a7:da:b5:4e:e9:ba:61:84:d4:
a4:d6:0b:78:2c:af:15:e2:5e:ff:89:6c:74:63:2b:
6e:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:20:BE:5E:CC:29:4E:46:3D:61:DB:F3:3B:04:30:3A:7E:60:64:BC
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/WCC-XswpTkY9YdvzOwQwOn5gZLw.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
14:89:2e:95:da:13:41:95:65:62:6f:29:e2:24:92:f5:0f:4e:
c9:b2:12:ee:0b:39:5d:09:f6:17:7d:92:46:8b:01:f8:67:2c:
78:78:44:ef:2d:bf:2a:f8:0c:1f:fb:fa:ab:fb:85:fc:b5:6d:
66:e5:ef:37:fd:53:38:93:76:cf:09:63:12:fe:42:90:a0:a8:
d0:ae:d6:1b:43:f6:9a:89:71:df:69:8f:1a:6f:23:f7:5c:df:
7a:a2:f1:11:2d:19:6f:43:ff:80:71:56:08:d6:42:0b:30:63:
3b:d7:a5:61:bb:bc:25:35:83:d2:33:65:5a:fb:45:95:39:bb:
5f:6d:5b:e9:55:44:a5:ab:5c:89:b1:56:59:c9:99:c2:d8:42:
34:4b:16:6a:90:88:a3:98:f0:16:bc:3b:f2:b2:7e:bf:82:59:
ec:d3:4e:ae:e0:97:9a:65:46:bd:be:1e:6d:a8:b9:4f:ba:f5:
70:7e:e0:44:22:d8:0a:99:4f:b1:2e:0a:a7:ce:16:4b:0a:2f:
ef:83:13:b2:64:1b:8e:a5:7f:56:d5:c8:a7:e0:87:69:e0:1c:
1b:a2:c2:c2:9b:af:01:db:cc:24:1b:98:7d:69:40:1a:56:48:
99:83:75:97:a0:c1:c5:da:3c:07:6a:43:f6:be:80:76:96:a6:
c5:43:69:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 29 06:35:34 2024 by rpki-client on console-ams.rpki-client.org