Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/WD42X68FnmWaCKodNBqSog6PnwE.roa
File: WD42X68FnmWaCKodNBqSog6PnwE.roa (raw, json)
Hash identifier: G3wJ0aArU4kFlj6eqK+4PENgCgOh32F7P3v2vAYt1VI=
Subject key identifier: 58:3E:36:5F:AF:05:9E:65:9A:08:AA:1D:34:1A:92:A2:0E:8F:9F:01
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 04CF
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/WD42X68FnmWaCKodNBqSog6PnwE.roa
Signing time: Mon 24 Jun 2024 23:55:03 +0000
ROA not before: Mon 24 Jun 2024 23:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 25 Jun 2024 03:55:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1231 (0x4cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Jun 24 23:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=583E365FAF059E659A08AA1D341A92A20E8F9F01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b0:9d:b7:f9:f9:6f:53:50:b0:c1:4e:cd:24:
d3:b2:1d:24:be:b9:53:5b:5e:c6:cd:b1:2f:bf:6f:
49:8c:a3:81:50:4b:d9:63:8c:8b:58:af:2d:b5:5d:
ea:34:6d:05:36:a1:1a:0b:53:a9:42:5c:dc:f2:eb:
c9:c2:ab:18:b8:fb:c3:61:78:c8:f6:12:34:1d:c8:
20:fe:3f:e3:bd:93:e9:d1:b3:bb:7b:cd:d8:b7:5c:
1d:c7:55:ab:16:6c:22:e5:e5:89:f5:23:16:6e:3a:
7e:b0:14:e5:01:61:de:15:41:10:cd:19:3d:ce:5b:
0a:59:03:55:25:f7:b1:f3:27:cc:b3:3d:24:5c:f7:
35:90:18:9f:2e:8c:99:a7:78:31:b1:fd:16:d0:37:
b1:91:03:ce:af:ec:a7:16:81:f3:de:8e:aa:58:68:
41:6a:77:ba:3c:f9:c9:7b:23:ec:86:89:d4:b4:93:
ef:e0:41:52:d7:90:82:90:9d:65:7a:80:87:53:94:
74:ca:e8:ab:6b:a5:9a:49:e4:a4:99:b7:bd:d1:70:
84:41:1e:b8:5c:95:9f:cd:54:9b:7c:71:81:5e:a0:
ac:8b:88:06:d7:9a:9f:02:49:bb:2a:72:e9:8a:5e:
20:f3:b4:ac:54:eb:8e:2d:da:68:3b:ab:98:51:83:
01:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:3E:36:5F:AF:05:9E:65:9A:08:AA:1D:34:1A:92:A2:0E:8F:9F:01
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/WD42X68FnmWaCKodNBqSog6PnwE.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
32:59:02:c0:d2:1e:14:76:ac:9b:cc:96:c3:ec:ac:6d:10:30:
f7:f6:33:de:90:c1:ce:76:93:f9:aa:52:09:de:4a:f3:18:97:
83:41:96:91:af:72:68:1d:ec:86:d6:8e:02:90:91:4b:92:cc:
4d:f3:fe:4e:7b:fa:c4:a1:5a:9d:40:f3:c5:1d:ac:9a:6b:20:
dc:77:38:66:f9:b4:30:e7:a8:87:70:25:a8:3f:1d:c0:26:ac:
df:ae:87:a9:d8:7e:b0:6d:e0:dc:69:a4:1e:66:99:40:4a:5b:
dc:58:ff:95:63:e0:50:97:d1:97:d2:c2:61:5a:86:af:1b:b3:
f6:a4:de:e4:38:97:52:8b:e3:4e:cd:a5:58:80:f9:eb:8e:2f:
64:ba:2e:7f:67:71:51:8a:18:64:42:29:ed:ae:a8:8e:af:03:
4d:42:c8:ba:8f:71:6e:94:a0:d1:09:57:9d:05:0e:37:24:7b:
81:02:90:9e:cb:ba:0c:1b:0f:2b:39:60:1a:c9:40:c6:01:43:
c0:4b:84:a7:08:29:1a:8b:45:f9:5a:a9:35:e8:a5:e6:81:4d:
48:77:d6:3f:88:16:bc:28:3e:48:25:7a:4f:4f:18:3a:17:95:
59:fc:cf:6d:fc:2c:90:a3:ef:9b:5d:1c:0f:60:90:9e:11:cc:
7f:e5:c2:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 25 09:54:29 2024 by rpki-client on console-ams.rpki-client.org