Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/fw7hHi7gLRWziOPiRXGhxUY4Iys.roa
File: fw7hHi7gLRWziOPiRXGhxUY4Iys.roa (raw, json)
Hash identifier: WtX3lkd1zh13RhiqWI2l0T/vQhqSGzFToLlCRGEVF0Y=
Subject key identifier: 7F:0E:E1:1E:2E:E0:2D:15:B3:88:E3:E2:45:71:A1:C5:46:38:23:2B
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 025F
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/fw7hHi7gLRWziOPiRXGhxUY4Iys.roa
Signing time: Tue 16 Apr 2024 15:55:03 +0000
ROA not before: Tue 16 Apr 2024 15:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 16 Apr 2024 19:55:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 607 (0x25f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Apr 16 15:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7F0EE11E2EE02D15B388E3E24571A1C54638232B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:46:d1:be:98:c5:47:f7:44:ef:52:d0:cb:f2:
17:5a:9f:67:93:34:06:d7:a5:8e:4a:d5:ac:03:66:
ca:13:47:97:9e:e0:f3:8a:83:3a:53:b0:d7:c2:0c:
43:7b:a0:12:f7:dd:b0:94:5b:37:fa:9a:d3:88:3c:
f3:1e:d2:71:49:a8:b1:12:07:a8:dc:20:f5:42:32:
bc:1b:88:23:6d:24:96:44:7d:c2:2b:84:56:aa:b9:
0f:44:d2:a3:94:43:92:4e:ba:b3:f0:41:7c:62:5f:
55:cd:32:4b:a7:53:10:81:7f:77:09:d9:8c:c9:fe:
f9:b0:43:e0:64:a3:00:77:c1:32:df:14:f0:b6:d7:
b6:3b:1b:95:c2:89:e2:76:58:b1:b3:7b:d0:07:18:
81:31:bc:ad:c9:04:46:03:b6:26:b1:58:c5:22:18:
52:7b:ce:3e:de:ab:58:ca:5e:e4:59:2d:2b:3b:eb:
a4:8d:32:ee:0a:ea:5e:34:8a:5b:5c:bf:e8:ac:c3:
e8:82:70:e9:18:fa:27:6b:d3:b5:bb:7e:0b:98:4e:
ac:9c:f7:af:22:db:13:34:6a:cf:48:16:87:04:72:
be:0b:3e:4f:f3:c4:99:0d:39:a6:2d:78:d6:0c:1a:
b6:7d:e8:70:b2:57:a5:be:a4:a2:a8:13:e8:6d:9e:
1c:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:0E:E1:1E:2E:E0:2D:15:B3:88:E3:E2:45:71:A1:C5:46:38:23:2B
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/fw7hHi7gLRWziOPiRXGhxUY4Iys.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
20:ac:1c:e2:4c:3a:42:55:9a:4f:0a:e9:5d:c4:cf:07:49:4c:
03:cb:c0:1a:1c:93:26:a1:13:a8:af:5b:6d:35:4a:bd:cd:d9:
f1:ae:82:e7:d6:19:a9:20:da:a2:87:28:32:e9:3b:39:ce:0d:
44:6a:7e:95:ed:de:c3:51:11:21:54:d0:5d:1a:34:51:34:7f:
64:4d:70:c1:e2:c2:d3:0d:5b:24:7b:05:e7:ee:a5:62:2b:35:
f1:ff:cb:81:81:1f:c5:32:b2:da:60:1e:d7:20:5e:34:f4:a6:
52:47:46:36:23:60:5d:37:a1:61:ad:74:39:8c:53:42:ba:31:
02:da:70:25:14:55:c6:ee:58:82:94:5f:3d:27:3a:8b:40:cb:
1d:cb:1e:91:53:67:4c:79:19:7a:c5:c1:51:8b:22:88:c3:ca:
a9:b4:c6:f4:49:71:cd:bf:72:90:6a:e2:12:a7:b4:8b:3b:ad:
c9:ed:7a:0b:22:54:7a:b4:e3:5a:d5:6f:a1:18:11:59:3f:38:
2d:f9:41:95:70:cd:79:03:f6:b7:a4:cd:9b:d7:df:5c:fa:b1:
af:85:7b:53:16:f3:03:11:3c:f1:40:39:27:59:e3:8d:4f:10:
f2:5e:0e:7c:7e:4a:67:41:94:75:0c:0b:32:f7:a6:fe:61:82:
f6:cb:49:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:55 2024 by rpki-client on console-fra.rpki-client.org