Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/cveJ7gk-yjEDu5yQ_qQYUHVqgUo.roa
File: cveJ7gk-yjEDu5yQ_qQYUHVqgUo.roa (raw, json)
Hash identifier: /WSI6O/Nwjir5w6Qsjbw7202PKbzsysWoWdkQwBVcCI=
Subject key identifier: 72:F7:89:EE:09:3E:CA:31:03:BB:9C:90:FE:A4:18:50:75:6A:81:4A
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 03CD
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cveJ7gk-yjEDu5yQ_qQYUHVqgUo.roa
Signing time: Mon 27 May 2024 07:55:03 +0000
ROA not before: Mon 27 May 2024 07:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 27 May 2024 11:55:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 973 (0x3cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: May 27 07:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=72F789EE093ECA3103BB9C90FEA41850756A814A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:83:81:f7:1d:fe:af:97:65:01:40:ec:ad:93:
32:8d:8b:dc:6c:40:eb:d0:36:9a:b1:ce:5b:24:53:
e4:11:fe:aa:4f:76:6b:bf:48:d2:84:68:2b:4d:77:
a1:d3:60:cd:31:c3:2a:49:2f:96:39:a7:1f:73:19:
71:3a:c5:b5:27:bc:f8:88:11:f1:35:72:b3:9e:e7:
96:21:08:93:76:6e:09:93:7b:d4:94:c0:0a:7f:8d:
40:fa:48:8c:06:b7:ce:cb:52:00:e8:44:11:62:0d:
bb:46:08:71:04:87:cd:76:42:c5:b9:c2:53:46:bb:
2f:20:7d:f9:80:21:9b:49:49:99:24:0a:f2:ce:ce:
b8:f3:4c:1c:47:5d:7f:75:26:04:43:ad:22:2a:6d:
67:f0:32:45:8b:ed:95:92:d6:bf:17:b9:c0:96:57:
9f:ed:42:e3:93:19:ad:f5:96:41:83:a9:0e:fa:6e:
e7:67:3a:fb:70:33:fd:10:86:b2:44:9b:0d:cd:81:
8c:72:42:05:35:36:20:b2:0f:ff:ea:be:97:57:d3:
75:34:a8:02:db:33:55:50:dc:04:30:10:4e:d5:c6:
80:c8:4f:21:80:c5:c9:09:b8:21:74:a6:54:d4:49:
8c:22:2c:82:4a:9a:a0:fc:5d:17:a0:b7:47:14:1a:
56:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:F7:89:EE:09:3E:CA:31:03:BB:9C:90:FE:A4:18:50:75:6A:81:4A
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cveJ7gk-yjEDu5yQ_qQYUHVqgUo.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
cd:a3:4a:0f:29:43:36:b5:ff:4f:09:36:63:75:81:8c:9f:53:
c0:d8:7b:6e:0e:ff:4b:b9:eb:28:b0:55:52:f2:51:c4:c6:16:
30:8e:b5:81:4e:bf:96:ae:d5:5b:45:e4:40:19:2b:3d:8d:20:
4b:b5:60:a2:fb:9c:e2:fa:87:cd:0d:5a:66:fc:82:30:22:c4:
f0:81:89:a9:8c:b4:5e:72:de:27:3c:a3:0d:a2:67:c5:6f:d6:
3c:c0:25:02:fc:28:0d:17:12:8a:5b:07:f2:b7:cd:58:cd:bc:
5e:f7:04:62:22:43:a7:0f:73:2f:40:19:ae:79:9b:d3:0d:65:
c9:42:48:cc:5c:e5:9b:7a:bd:fb:40:43:e5:ad:b0:f7:2a:49:
5a:1a:2b:5e:0b:6d:2a:c9:51:37:13:25:df:3d:b9:b1:27:1d:
9f:6c:a8:52:ae:21:3a:71:c5:ed:7a:28:be:8c:10:44:36:9d:
d8:4e:37:c7:a8:31:d7:ba:53:f8:fa:45:07:72:61:13:e6:44:
c9:d7:03:20:1f:d6:33:aa:1b:f7:8d:45:8a:47:9d:07:0f:72:
f5:db:7a:3f:16:0b:b0:da:f9:ca:65:81:e3:b9:10:25:0a:d5:
e0:ce:4f:9e:ea:7a:e7:5e:f2:2f:5c:0b:d4:56:62:22:35:b7:
d4:9e:20:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 27 17:45:23 2024 by rpki-client on console-ams.rpki-client.org