Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/bv4FyzRcfe5g5Qw6b7pQDI18Ftc.roa
File: bv4FyzRcfe5g5Qw6b7pQDI18Ftc.roa (raw, json)
Hash identifier: oEtVjREo207zHZvbnQt4Een6NfiNrkuf1bVBAP0UQdc=
Subject key identifier: 6E:FE:05:CB:34:5C:7D:EE:60:E5:0C:3A:6F:BA:50:0C:8D:7C:16:D7
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: D6
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/bv4FyzRcfe5g5Qw6b7pQDI18Ftc.roa
Signing time: Sun 03 Mar 2024 23:55:03 +0000
ROA not before: Sun 03 Mar 2024 23:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 04 Mar 2024 03:55:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 214 (0xd6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Mar 3 23:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6EFE05CB345C7DEE60E50C3A6FBA500C8D7C16D7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:85:95:47:4b:d3:b3:15:8f:a0:c4:76:56:43:
42:b6:e6:f5:41:e5:30:28:3d:7e:52:6a:cd:4d:d9:
50:77:7b:38:28:9e:76:7e:01:5b:a8:7d:b0:e5:d7:
29:b2:ed:c7:c8:48:e9:f6:b6:da:1b:38:ac:7b:51:
e0:e8:aa:97:bd:b3:f1:e0:96:13:0e:2b:91:87:fb:
fa:0c:e7:b0:00:42:6c:84:3d:ce:b3:5b:50:c8:df:
65:c1:91:7f:20:3f:be:31:05:46:5d:28:59:53:15:
1c:3d:4c:44:a9:87:96:92:35:ec:ef:8a:f7:db:73:
c3:03:9d:46:cd:55:0c:04:be:9f:34:d7:8d:0c:48:
d5:90:94:a4:b7:04:27:3d:94:3b:19:93:bb:5b:37:
15:b9:19:a7:70:d9:e0:78:a3:e7:96:18:23:45:87:
92:23:52:00:9a:1a:c5:bd:e9:b7:d6:e5:3c:47:b4:
fd:18:6d:41:0a:88:7a:06:55:74:6a:71:88:a5:34:
94:72:39:fc:7a:53:65:f9:55:ca:07:ec:e7:07:6f:
37:97:73:c3:be:4b:a3:e3:ff:c0:f2:18:ed:6b:f2:
0e:92:94:f9:74:f4:ad:31:34:49:68:f7:96:ea:80:
0b:5a:3b:e0:e3:ef:dc:78:4c:42:47:cb:a5:ce:34:
1c:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:FE:05:CB:34:5C:7D:EE:60:E5:0C:3A:6F:BA:50:0C:8D:7C:16:D7
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/bv4FyzRcfe5g5Qw6b7pQDI18Ftc.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:47:bf:17:3b:a6:94:ba:4d:6b:4b:2f:09:34:4f:64:8a:3e:
52:44:8b:a8:bb:fe:87:b2:74:a5:85:a1:0b:8d:e8:36:c4:1a:
2e:f2:dd:12:53:0c:64:7e:64:f4:67:23:4d:56:29:25:44:54:
2e:29:2f:97:9b:72:97:00:eb:e5:04:ca:bd:60:1b:92:09:2a:
b2:3f:02:d0:b4:9b:7a:ee:8c:a4:bf:ff:22:b4:e6:cd:1b:cf:
68:de:04:ff:92:ea:67:df:4c:bc:02:9d:83:f5:c8:d2:5f:27:
10:1b:82:b9:c2:6d:84:79:06:fe:5b:f2:9f:cc:e8:6f:e4:e2:
9f:a2:fa:fc:33:de:c1:4a:e2:ed:a2:5b:d7:79:0d:48:40:ae:
e7:ca:c9:82:2e:36:95:45:c8:c9:9a:71:74:2e:0b:97:c9:d6:
a6:bc:06:c2:36:1c:99:b2:ae:e3:e0:ae:3c:2c:31:9f:6b:3e:
7b:b1:29:70:9d:8a:b8:dc:57:15:68:2a:6c:09:a2:1c:33:e5:
0a:af:ce:aa:7f:bc:4f:72:a6:fe:72:11:93:22:8c:35:60:21:
2c:c7:df:49:ef:e8:e7:28:3e:e2:a5:17:fc:6a:94:89:67:5f:
9a:90:7f:38:c4:8e:0f:0d:5e:94:9d:2f:4f:4d:bd:57:dd:fe:
a9:7e:f4:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:55 2024 by rpki-client on console-fra.rpki-client.org