Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/dT0Wbdzc3UhevCGK4eQpJjzr-Xo.roa
File: dT0Wbdzc3UhevCGK4eQpJjzr-Xo.roa (raw, json)
Hash identifier: RfSRByLdSzGjA6KZM00lWfblUlbUxIMrL/ukrbOA5As=
Subject key identifier: 75:3D:16:6D:DC:DC:DD:48:5E:BC:21:8A:E1:E4:29:26:3C:EB:F9:7A
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0484
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/dT0Wbdzc3UhevCGK4eQpJjzr-Xo.roa
Signing time: Sun 16 Jun 2024 15:55:03 +0000
ROA not before: Sun 16 Jun 2024 15:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 16 Jun 2024 19:55:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1156 (0x484)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Jun 16 15:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=753D166DDCDCDD485EBC218AE1E429263CEBF97A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:a8:15:08:aa:31:fc:96:5a:9a:fe:53:fc:95:
cf:bc:3c:bd:a6:83:b3:5a:97:cc:47:d5:2a:ca:c2:
0b:23:30:3c:d9:48:ce:66:8c:d5:e7:0c:fb:b6:76:
d6:f5:49:db:77:8d:91:34:7a:06:22:b7:5c:0d:42:
df:02:4d:73:3a:60:8e:44:7f:15:42:95:30:fd:5b:
ff:95:48:f8:e5:98:e1:d4:99:c0:c8:7e:74:e0:3b:
3f:73:36:3a:bd:2d:0e:97:00:cc:c6:0e:0d:9f:a8:
f7:42:31:d0:d7:68:b6:c0:4b:6d:44:9d:cb:cc:48:
88:0d:7e:80:8b:87:82:36:69:b5:88:8e:48:97:5e:
7f:fc:e9:23:60:b0:5a:7c:b4:ef:46:90:94:46:56:
f7:d6:3f:73:ca:5f:86:2c:f2:55:36:4f:c1:7d:13:
e4:55:20:32:cd:90:b9:38:c2:68:42:c0:d9:40:7a:
90:08:98:88:60:40:aa:8f:31:7c:08:49:5f:93:a3:
97:00:1c:22:5f:6e:f0:20:f6:07:bd:03:ff:27:ef:
94:08:18:80:7e:0e:19:d2:89:40:f0:1e:8c:d7:e4:
32:b3:66:7b:a7:6f:07:ab:04:a0:9e:fd:3e:5b:81:
ce:c5:2a:a8:1a:b2:7e:07:e8:58:fb:ff:07:41:b8:
ea:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:3D:16:6D:DC:DC:DD:48:5E:BC:21:8A:E1:E4:29:26:3C:EB:F9:7A
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/dT0Wbdzc3UhevCGK4eQpJjzr-Xo.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
d3:ae:19:65:3f:b1:65:86:f5:ba:e6:00:d5:7b:68:02:0b:a8:
ed:17:17:16:82:cf:17:77:ab:57:f7:c3:05:2d:58:76:d3:05:
80:d7:d9:86:c9:97:da:e5:eb:75:f7:2b:a9:3d:43:fa:82:ed:
cb:a9:69:0d:aa:0c:35:ae:4e:4e:79:bb:c3:54:9e:77:59:6c:
df:17:da:54:64:c7:c4:c0:3e:d0:6f:2d:71:26:82:6b:57:f0:
1f:c2:e8:da:35:10:78:4d:64:19:d1:06:bd:79:7e:b5:13:06:
81:7a:79:e6:3d:4b:ad:08:67:9a:e0:09:be:06:3b:4a:da:8a:
1e:59:02:12:81:55:24:0f:85:fa:2e:61:6f:33:81:03:1f:07:
ca:04:b0:8b:7d:b5:75:28:aa:73:41:b4:26:f8:a1:9a:ec:7f:
5e:88:12:65:36:2f:fd:80:ef:9e:b3:42:03:0a:19:56:83:2f:
00:0d:34:a9:18:53:81:5d:06:9a:36:42:44:62:e2:71:28:07:
cb:4d:eb:00:e7:25:d3:44:0f:4a:d1:4f:13:3f:e4:8e:78:02:
1e:3e:92:27:a8:64:06:7e:7e:25:9d:86:7b:35:68:87:a8:78:
af:30:c2:cc:b0:26:5b:53:08:12:5e:e3:1e:93:b2:ee:25:58:
d1:bc:6a:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 22:56:01 2024 by rpki-client on console-fra.rpki-client.org