Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/WqwmjzPPvY9cL8dMT80N8nkHxYc.roa
File: WqwmjzPPvY9cL8dMT80N8nkHxYc.roa (raw, json)
Hash identifier: cq2A5Sr0ncYuq/FqNtXcetLLBhDStjLqw8CG42UBXFs=
Subject key identifier: 5A:AC:26:8F:33:CF:BD:8F:5C:2F:C7:4C:4F:CD:0D:F2:79:07:C5:87
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 04C9
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/WqwmjzPPvY9cL8dMT80N8nkHxYc.roa
Signing time: Mon 24 Jun 2024 07:55:03 +0000
ROA not before: Mon 24 Jun 2024 07:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 24 Jun 2024 11:55:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1225 (0x4c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Jun 24 07:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5AAC268F33CFBD8F5C2FC74C4FCD0DF27907C587
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e2:63:79:80:c3:b9:cd:f1:f7:2a:53:e3:5a:
c4:11:5c:d1:45:d7:52:d5:9b:94:cf:36:61:c1:9a:
9c:25:ef:42:80:0d:8e:ec:6b:c8:05:c7:0e:41:3a:
c9:a5:be:e8:f4:db:2e:ae:20:78:12:42:a8:d0:73:
cf:3d:29:63:b1:d7:6e:61:31:5b:08:73:9f:32:b1:
30:ed:d9:a6:d2:a2:bd:83:9d:34:a2:25:2c:89:2e:
ac:4e:09:53:6f:1e:96:a2:27:b5:14:07:15:cf:8d:
e7:b1:59:87:cd:7a:32:ba:48:1e:e1:54:93:b8:84:
a1:61:e2:4e:0c:73:d6:44:d2:80:b1:83:91:fa:da:
b9:9f:88:49:08:02:e5:83:e1:7a:8d:8b:3a:ba:c3:
9b:a9:35:4f:8f:d4:74:57:09:27:7e:9d:7c:a6:a8:
b0:44:34:5f:b8:bc:be:12:9d:ca:98:3e:81:a7:21:
de:da:12:df:8d:2f:f7:2b:a3:51:b3:0b:15:31:87:
19:b6:b7:81:1c:1d:07:ed:f5:86:a7:3f:64:7a:e9:
ca:57:c4:25:8e:31:f0:b5:06:be:32:ac:7a:bf:6c:
11:73:9d:24:fb:8c:4b:96:d3:0b:a1:89:bc:95:b8:
72:ae:2c:45:6b:74:52:50:79:d7:0e:4b:3a:58:2d:
6f:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:AC:26:8F:33:CF:BD:8F:5C:2F:C7:4C:4F:CD:0D:F2:79:07:C5:87
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/WqwmjzPPvY9cL8dMT80N8nkHxYc.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:51:f1:b2:01:46:ad:36:43:69:41:f1:fc:24:fc:76:52:5c:
71:6a:74:9d:22:37:30:6d:4f:d3:43:b4:c3:5c:b1:3d:bb:f7:
6e:7a:e4:7f:95:53:c6:0e:78:da:9e:31:ba:64:88:96:8b:28:
a8:76:17:6b:1a:16:e1:34:f1:18:6d:8b:9a:3a:45:43:f0:5e:
c5:f4:4b:99:b1:2a:40:ce:bf:09:42:89:93:07:40:c9:6b:2d:
30:f6:33:0d:34:22:46:86:07:f3:e4:11:9b:9a:a2:62:c1:d7:
92:4a:9c:04:e6:36:18:d7:a9:1b:64:25:f2:fb:47:59:6c:3c:
3e:c5:f8:a2:90:33:44:3c:ed:73:8f:59:ac:38:3d:e7:db:4a:
72:30:6d:12:18:a9:0e:55:0a:24:dd:12:fe:ab:90:67:36:8e:
70:eb:e7:99:f6:4b:d8:52:47:da:49:a2:28:90:d8:d7:c4:9a:
15:6b:5b:fc:32:af:47:aa:26:f0:9e:0b:ff:33:aa:76:94:7f:
11:10:0f:ce:e1:8e:80:2d:7e:37:52:03:19:3c:dd:f4:3c:26:
07:ef:1c:c0:5d:66:d5:3c:c7:37:b2:cf:53:cf:82:10:69:fd:
e4:07:9c:3d:5f:d3:2c:84:cb:2c:46:ef:0b:cc:00:d1:d5:d7:
67:92:c8:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 15:20:45 2024 by rpki-client on console-fra.rpki-client.org