Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/_EiGoMqcUBCDCFSPt6606OMRh1I.roa
File: _EiGoMqcUBCDCFSPt6606OMRh1I.roa (raw, json)
Hash identifier: UDZvR8a8EE1ZVhpb5Gwo/ifWWL7MPtD49iaSF7jlYD4=
Subject key identifier: FC:48:86:A0:CA:9C:50:10:83:08:54:8F:B7:AE:B4:E8:E3:11:87:52
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 08E9
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/_EiGoMqcUBCDCFSPt6606OMRh1I.roa
Signing time: Sat 19 Oct 2024 15:55:02 +0000
ROA not before: Sat 19 Oct 2024 15:55:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 19 Oct 2024 19:55:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2281 (0x8e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Oct 19 15:55:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=FC4886A0CA9C50108308548FB7AEB4E8E3118752
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:a5:6f:34:d0:c5:31:01:e9:e2:3d:78:7d:fd:
ae:de:a7:06:f1:20:e1:cc:18:3d:34:86:a1:a7:0d:
ce:cc:ad:9f:85:bc:04:c3:ca:cb:07:83:f3:d8:5a:
33:cb:80:c7:e1:07:6e:46:3a:64:1b:c5:d0:0d:64:
e2:26:0e:62:b6:63:a6:e9:fc:db:53:e3:15:8d:de:
7f:3f:88:c1:dd:91:88:23:59:50:a2:d0:77:95:5c:
c6:4d:5c:d6:61:2a:30:26:0d:65:0d:ac:f3:d7:36:
c7:f1:ee:15:fe:70:ea:e8:c2:b2:c8:74:94:93:0b:
6c:f1:77:c6:c8:fa:b1:77:62:ba:58:69:ca:a2:6c:
f5:1a:f3:d5:f6:9b:a5:a8:7b:bb:40:24:1f:13:c5:
4f:b5:52:d6:fa:20:9c:0c:b4:f0:f7:07:a3:74:bc:
7a:2f:c7:c4:05:9e:a7:56:f1:f6:65:6e:1f:af:b3:
46:69:e9:ea:c9:a8:06:26:c9:78:17:9b:68:3f:fa:
4a:2b:bd:8f:03:54:1f:f1:9f:7c:ac:25:a3:f8:b7:
3c:9f:a7:19:95:1d:7c:a8:b3:cf:a2:c3:f7:36:22:
c6:bf:5c:c9:a6:13:6e:71:13:92:bd:1a:0d:b6:f8:
51:e8:44:7c:7a:20:e3:07:8c:19:65:a5:25:84:2e:
7d:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:48:86:A0:CA:9C:50:10:83:08:54:8F:B7:AE:B4:E8:E3:11:87:52
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/_EiGoMqcUBCDCFSPt6606OMRh1I.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:62:23:f7:39:d2:ce:b6:f4:e5:77:76:c2:bb:2b:b5:84:f0:
0a:f6:e0:c8:bf:f9:8f:b1:09:2b:fe:28:5b:3f:e9:1e:4e:97:
f9:8d:6f:f7:86:29:12:4b:cb:89:ae:26:14:53:4d:73:3b:bd:
3d:c8:66:b5:6b:f3:90:80:eb:f9:8f:48:a4:88:e1:04:37:2f:
14:8b:ae:4e:fa:da:6d:22:91:80:81:6a:97:95:02:d7:cc:cd:
b5:20:0b:35:f1:91:43:b1:7e:73:6a:64:a3:c5:58:ae:74:18:
48:82:26:1a:48:ea:81:10:bc:d3:57:df:b6:b6:ec:1b:97:29:
46:3b:d3:cb:b3:9f:49:68:94:ae:4a:fa:30:5c:c8:60:05:5c:
41:f2:0b:dc:8c:62:de:9f:03:3b:70:94:2c:f5:6a:76:08:cc:
1a:fd:24:5e:b4:65:c6:cc:e2:0a:69:c1:e9:c5:49:b1:9a:7a:
42:7e:fc:42:7d:4a:ec:7c:ab:8c:ca:7e:fe:f8:b9:84:ba:97:
fa:1e:5a:17:50:ed:90:39:47:7f:f0:8c:0b:b2:c5:46:1c:5b:
1a:9a:df:9c:cb:81:47:af:d9:59:88:d2:9f:da:0a:e2:53:43:
27:1c:b5:3d:57:27:c7:78:8e:60:28:3a:60:83:d0:f3:f2:18:
2e:82:0a:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 19 21:59:14 2024 by rpki-client on console-ams.rpki-client.org