Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/ftRuWsvlIQiEX3OjpkUwGEYDSRc.roa
File: ftRuWsvlIQiEX3OjpkUwGEYDSRc.roa (raw, json)
Hash identifier: TyMV7AdnY7YzT5m2zp1YSXXC1Q7dT7eNvip4APZX2Pw=
Subject key identifier: 7E:D4:6E:5A:CB:E5:21:08:84:5F:73:A3:A6:45:30:18:46:03:49:17
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 55
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/ftRuWsvlIQiEX3OjpkUwGEYDSRc.roa
Signing time: Sun 18 Feb 2024 15:55:03 +0000
ROA not before: Sun 18 Feb 2024 15:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 18 Feb 2024 19:55:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85 (0x55)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Feb 18 15:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7ED46E5ACBE52108845F73A3A645301846034917
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:94:6a:30:76:0d:91:2e:2e:1a:dc:77:60:85:
f2:f6:e7:9d:f8:a9:12:e3:a4:00:ed:7c:ed:eb:e2:
a1:a3:1a:48:0d:ce:e6:9c:5b:bb:ef:d6:34:07:89:
f9:55:b6:0c:36:36:cd:54:30:a3:6d:65:b9:05:f0:
21:b1:7f:7f:8d:25:78:3f:99:ee:87:90:c8:ac:7a:
d1:c4:b5:f3:85:bb:09:96:9a:83:a7:b7:fe:9c:bc:
f1:2b:c9:58:76:48:85:41:ed:ce:81:e4:21:5c:6d:
6b:87:2d:10:86:36:89:97:7a:28:82:83:e5:f5:f9:
d4:f6:c3:c8:28:e8:d4:f6:b6:b3:e8:cb:66:4b:e2:
5f:4a:d6:0a:c6:f3:fd:ab:88:75:5d:de:99:86:3f:
9c:ed:0f:57:ce:52:8c:40:3f:6b:4c:fe:c7:3d:06:
71:73:8d:43:92:26:cc:fb:f5:d3:a6:aa:24:b8:ef:
3e:8c:51:db:8e:7f:1a:f3:18:1d:f5:58:f7:59:c9:
c1:da:94:12:16:1b:47:a6:af:77:ac:9f:33:b3:d4:
81:9d:a4:5d:1d:03:08:10:53:20:e8:b7:04:c0:57:
33:44:2e:83:04:88:17:ad:32:03:8d:e2:9f:3d:32:
e3:27:3d:fc:0a:98:a9:22:5d:ab:92:ad:1c:6d:97:
e8:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:D4:6E:5A:CB:E5:21:08:84:5F:73:A3:A6:45:30:18:46:03:49:17
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/ftRuWsvlIQiEX3OjpkUwGEYDSRc.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:79:13:40:3e:99:71:6e:91:25:ce:55:92:f2:57:9e:80:bc:
cb:47:a6:f1:75:28:bd:c6:6a:c5:5f:7c:2a:cb:ce:b2:78:4c:
02:27:d2:61:4c:fd:3f:16:21:8e:64:55:6f:4c:dc:88:37:1e:
86:6b:f5:4f:9f:95:6c:38:17:a5:c3:75:4e:21:8d:3d:dd:57:
7a:a7:81:5e:d4:c8:28:d0:04:d9:32:bd:a8:c9:67:12:7e:17:
a2:d4:14:a4:d3:bf:b6:d8:14:9e:ee:1e:7f:32:9a:a3:35:82:
21:d8:97:4c:2d:8b:bc:12:48:e5:bc:f1:8b:7b:fc:e0:c7:38:
d1:18:f9:20:2a:f9:b4:c6:f3:b6:51:75:fa:4b:af:20:e7:d9:
ec:86:5e:71:86:38:93:4a:0f:85:23:98:a0:cd:18:e5:84:cd:
f2:c2:b4:a6:a4:8b:b3:6c:79:cb:80:6b:aa:69:20:ed:ab:39:
04:cf:1c:32:1d:1a:ec:69:c6:a6:2a:ed:62:11:be:cf:81:35:
6d:b3:6f:36:64:f8:0e:74:3e:cd:49:45:cc:03:82:42:41:3d:
94:33:ee:1f:32:5b:76:fb:40:d4:d3:3a:62:bc:db:bb:03:88:
41:93:fc:e0:62:ad:d4:3f:67:f3:de:9f:60:82:32:b7:f3:5e:
d6:47:0c:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 19 01:00:30 2024 by rpki-client on console-ams.rpki-client.org