Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/b8-xmu_hwx3TL_YFCVZ0a-zZ70Y.roa
File: b8-xmu_hwx3TL_YFCVZ0a-zZ70Y.roa (raw, json)
Hash identifier: DBM2arkgq+KzQRuKrDleB/kWBizXWRR3DQhJTvyvgos=
Subject key identifier: 6F:CF:B1:9A:EF:E1:C3:1D:D3:2F:F6:05:09:56:74:6B:EC:D9:EF:46
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 04C3
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/b8-xmu_hwx3TL_YFCVZ0a-zZ70Y.roa
Signing time: Sun 23 Jun 2024 15:55:03 +0000
ROA not before: Sun 23 Jun 2024 15:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 23 Jun 2024 19:55:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1219 (0x4c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Jun 23 15:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6FCFB19AEFE1C31DD32FF6050956746BECD9EF46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a0:3c:8b:73:47:72:7d:60:53:0b:45:e7:79:
16:38:bd:40:a8:c6:f7:97:cb:b1:12:18:1b:6a:d6:
e6:13:89:62:78:03:a4:ab:38:46:03:cc:e3:02:55:
80:f7:3c:86:6e:91:04:8a:f8:d7:73:4d:89:56:e6:
53:da:fc:22:c2:fa:46:cc:57:77:0c:00:67:c5:6a:
bb:b6:1e:f8:1f:75:d1:d2:45:b9:e4:9c:b5:e6:0f:
95:32:3f:dd:13:f0:d8:0d:db:45:a2:fc:db:ec:0f:
33:34:f1:17:9e:df:f7:68:84:0c:73:7d:5a:d5:fd:
b9:1a:bb:82:ea:41:8b:91:a1:58:f3:16:ae:f5:3d:
9f:28:30:de:f5:49:5a:08:7a:4b:74:dd:fd:1e:03:
2f:1d:85:51:1c:d4:59:3b:46:ef:8b:53:45:51:64:
43:ea:99:59:35:35:bf:a7:c2:d7:a3:48:0a:f0:61:
5b:33:2d:fb:65:7f:f9:47:44:d4:d5:c3:ff:0b:79:
5f:3d:6c:6c:bd:73:24:f8:7e:ac:7a:32:fa:c4:cb:
89:72:65:4a:af:fb:05:84:1c:68:b1:d5:d8:51:d4:
98:85:eb:78:a9:36:cc:59:00:dc:d7:3f:6a:a9:c4:
19:82:4e:5a:88:58:76:92:0f:22:30:02:3f:80:b3:
30:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:CF:B1:9A:EF:E1:C3:1D:D3:2F:F6:05:09:56:74:6B:EC:D9:EF:46
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/b8-xmu_hwx3TL_YFCVZ0a-zZ70Y.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:94:7c:d9:76:1c:ae:9a:1e:97:5f:60:ef:c1:99:f6:53:0d:
8d:68:d0:04:3a:d4:05:04:f6:e2:60:64:0f:09:de:a0:36:b9:
84:2a:bc:ce:14:7e:75:a0:72:d9:03:a1:44:35:97:72:25:cf:
bc:5a:bb:7b:b5:8f:7f:bd:83:72:0e:66:c2:6d:2e:57:7e:e3:
62:7c:98:19:14:16:67:9f:3c:86:6e:cb:b3:e9:7f:48:f2:75:
5a:8e:e1:6e:a3:c9:43:d2:1b:e4:8a:38:68:02:fb:19:fa:52:
26:0a:8f:9c:27:00:17:f5:73:e0:f7:27:42:81:db:58:5f:ac:
af:6a:d6:20:cd:ac:22:65:16:9a:ca:18:cd:e4:a9:08:0e:1b:
87:4f:f3:b9:a6:28:0f:42:e8:2a:0d:ce:27:f3:cb:e0:15:a7:
11:6e:ab:94:4d:89:cb:a9:11:dd:33:74:b4:e9:82:cb:3a:91:
d2:2d:a3:2b:36:66:5c:58:aa:c4:8b:b8:31:14:98:f7:e4:86:
18:4b:9f:37:75:8b:5b:82:d1:10:81:6b:d3:56:a1:31:1c:29:
bc:67:d0:6d:97:aa:f2:11:a7:e5:e1:cd:cc:6d:51:2f:ef:a0:
25:c6:93:22:e2:f7:d7:8b:c1:99:ef:e0:53:0e:55:0d:b6:e5:
6c:b4:a0:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 21:07:24 2024 by rpki-client on console-fra.rpki-client.org