Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/c_KWknTovdmH9mpHag-VrxuP4HU.roa
File: c_KWknTovdmH9mpHag-VrxuP4HU.roa (raw, json)
Hash identifier: F7r2RNupilMX4msl5cX9YZ7H1kEl010r/8alUGwniG8=
Subject key identifier: 73:F2:96:92:74:E8:BD:D9:87:F6:6A:47:6A:0F:95:AF:1B:8F:E0:75
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 01DE
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/c_KWknTovdmH9mpHag-VrxuP4HU.roa
Signing time: Tue 02 Apr 2024 07:55:03 +0000
ROA not before: Tue 02 Apr 2024 07:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Apr 2024 11:55:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 478 (0x1de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Apr 2 07:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=73F2969274E8BDD987F66A476A0F95AF1B8FE075
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:2d:2e:fc:5a:e9:59:af:17:c0:cc:ac:5e:fa:
bf:ae:54:77:ee:ce:ee:3b:ee:bb:68:cd:4c:76:bf:
11:7d:60:6b:97:4d:67:a3:2a:d1:a0:00:89:77:66:
80:7e:50:39:c6:70:88:e5:c8:73:f0:bf:ec:98:11:
71:92:6f:2d:d1:f6:a1:14:bb:06:ff:d0:3f:c5:a3:
cd:ea:16:ed:33:58:43:3a:06:2f:c7:af:31:39:af:
87:4e:03:0d:17:0a:17:e4:d0:5d:2c:53:29:f7:63:
58:b7:a2:93:23:1d:e9:bf:e1:39:2c:64:f2:77:57:
d4:a7:15:7f:d9:7b:5b:d8:58:12:a8:db:0d:38:c3:
08:64:c6:5e:c3:86:d1:bd:05:47:1b:e5:dc:1c:e4:
73:64:1a:ca:84:f7:b2:b5:c9:20:4f:e1:48:84:12:
0b:4b:90:fd:ac:b7:16:0f:d0:33:2b:71:38:0d:30:
2e:06:fd:68:8b:ca:11:2b:07:29:72:16:9e:a3:7f:
56:38:ce:b8:28:34:3b:2b:89:0e:5d:33:d7:e0:10:
39:dc:6a:e9:8a:e4:05:b9:e7:6b:c4:d0:b9:97:21:
a9:d9:64:35:7b:55:d1:1f:30:68:dd:c7:c9:a5:dd:
0d:86:af:13:e8:3b:db:d6:7c:82:2d:74:85:8d:a4:
6c:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:F2:96:92:74:E8:BD:D9:87:F6:6A:47:6A:0F:95:AF:1B:8F:E0:75
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/c_KWknTovdmH9mpHag-VrxuP4HU.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
81:d9:4c:13:89:b6:7f:12:c1:92:aa:27:48:0a:e8:19:b5:e9:
4e:0f:39:f9:f8:ea:eb:36:97:08:16:1c:39:1d:44:06:77:8a:
6e:88:d2:fc:94:07:96:b3:2e:39:d8:d3:96:94:91:93:58:a0:
6c:ba:2c:00:e8:a9:fd:12:23:d2:40:03:49:1a:49:ca:6c:8a:
64:12:49:f5:44:cd:82:4f:fe:90:0a:50:c3:67:f7:12:93:7b:
98:3f:58:af:0d:42:a6:07:8c:47:f2:79:f3:f6:b2:d2:e6:0b:
45:b3:3f:23:a5:e3:5c:04:03:48:3b:9c:6b:c1:61:0d:25:14:
33:2b:e5:f4:91:73:06:bf:f9:6d:48:4c:b6:05:f8:99:e2:34:
2f:38:b9:89:a5:fc:33:31:7a:e1:0e:1c:35:aa:a3:bb:23:16:
b2:17:cf:b9:61:f4:2e:4f:ec:d5:88:4f:dd:25:f3:78:ef:d6:
dd:3a:31:af:dc:25:21:5a:df:d4:f0:cc:61:f6:5a:1c:7c:13:
27:a7:f9:f9:fe:e5:96:4a:16:a1:61:a4:d0:2e:14:99:ce:af:
40:df:77:4c:17:15:01:ee:2e:c5:2f:18:ff:23:55:9d:4e:28:
37:b3:92:91:e9:93:e3:2e:97:bb:bd:10:57:bc:01:76:ad:81:
37:d4:a7:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:55 2024 by rpki-client on console-fra.rpki-client.org