Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/XT33byo9FUl5lRCbazrYGY-fnsM.roa
File: XT33byo9FUl5lRCbazrYGY-fnsM.roa (raw, json)
Hash identifier: 3dmoRhZmZikqhnZyCqxjghstoSUcKwZ7js5w2qyyFdE=
Subject key identifier: 5D:3D:F7:6F:2A:3D:15:49:79:95:10:9B:6B:3A:D8:19:8F:9F:9E:C3
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 03DF
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/XT33byo9FUl5lRCbazrYGY-fnsM.roa
Signing time: Wed 29 May 2024 07:55:03 +0000
ROA not before: Wed 29 May 2024 07:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 29 May 2024 11:55:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 991 (0x3df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: May 29 07:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5D3DF76F2A3D15497995109B6B3AD8198F9F9EC3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e7:cc:49:ac:ed:3f:2a:a5:62:5a:8e:2f:2d:
5c:f0:6c:60:87:9d:fc:1b:6a:46:10:24:66:70:3e:
38:0a:78:d9:1c:8a:a8:a8:57:bb:db:b9:26:c0:8e:
bd:2c:1e:56:19:46:21:6f:58:75:37:2c:05:5a:35:
53:0f:bd:9f:7d:18:e0:9b:8b:40:3e:b2:87:5c:87:
98:01:35:d4:ed:93:be:e1:48:45:bb:d3:0f:74:91:
8f:b4:7d:45:9c:72:d1:16:2f:af:71:8c:b4:af:25:
f1:18:e8:5f:f2:d7:0c:bf:49:ef:27:c5:0b:4a:79:
00:f3:c4:20:84:2c:bd:02:6e:f1:2f:71:1f:4a:0a:
02:7f:98:77:10:ee:f2:37:95:a7:c7:b5:e5:5c:ba:
4e:76:2b:4e:de:5c:d4:d0:4a:33:aa:40:c1:34:b7:
8f:6b:1e:77:9b:76:26:0a:ed:e4:7a:52:25:ba:f0:
6c:22:b1:26:0b:c1:98:04:8f:9a:b1:d7:df:74:41:
8d:4e:a6:c5:00:d3:d0:b0:6d:71:16:20:ba:27:3c:
84:6f:e7:40:53:17:61:85:a2:dd:28:6f:7b:4c:fb:
13:f6:c0:7c:71:ce:b2:4c:ab:61:22:55:d6:fb:c1:
8c:c7:bc:7e:e7:eb:71:d5:0f:f5:46:b1:11:27:37:
a0:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:3D:F7:6F:2A:3D:15:49:79:95:10:9B:6B:3A:D8:19:8F:9F:9E:C3
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/XT33byo9FUl5lRCbazrYGY-fnsM.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:28:d2:34:af:69:bd:0e:ee:0c:ad:11:b3:6b:c6:4f:a5:50:
cc:40:cc:34:7a:78:4b:51:a7:17:43:90:af:ed:c9:f9:34:c1:
13:aa:2f:7a:c0:de:a3:6b:8a:6f:5a:50:63:ed:a5:da:f7:7b:
d7:39:e6:67:77:4d:e5:2c:3c:91:b0:d4:82:3a:1f:9c:1c:e6:
89:1a:64:11:9d:39:0b:20:8f:9f:44:f2:09:28:d1:d7:ad:24:
1f:e9:cf:3c:05:85:61:04:d3:b7:7f:78:a4:f2:24:25:4f:19:
d7:fa:84:9d:52:85:f2:c8:c0:fe:4c:59:0d:fb:0a:96:62:7b:
d1:2d:de:35:17:80:07:08:d0:74:73:2d:78:d8:23:8e:21:18:
85:4a:3b:af:a6:7a:e4:41:6e:fc:4e:03:50:49:3d:df:72:07:
d0:8c:4d:6d:40:0a:44:22:28:40:22:13:ac:29:40:73:a0:3d:
8f:c9:93:63:3e:3f:bb:d3:1e:8f:f1:40:ba:9e:96:39:d6:de:
bd:0f:2e:eb:9e:82:38:91:0d:d8:59:5b:fb:90:70:64:fd:7a:
9a:2b:c4:d3:6d:d6:12:d1:4b:da:a3:a9:05:f0:6f:1f:b2:5e:
33:fb:d8:c9:55:09:56:ce:f4:3a:45:1b:fd:b0:32:b1:25:68:
c3:f9:08:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 29 16:34:23 2024 by rpki-client on console-ams.rpki-client.org