Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/hUEjzppOFB_j0lQ0jmftBELGKoI.roa
File: hUEjzppOFB_j0lQ0jmftBELGKoI.roa (raw, json)
Hash identifier: Cq8Q1mOmvdCcHXtqyeSS6qvZYFFRPKizzAFEnaXNjwE=
Subject key identifier: 85:41:23:CE:9A:4E:14:1F:E3:D2:54:34:8E:67:ED:04:42:C6:2A:82
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: BB
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/hUEjzppOFB_j0lQ0jmftBELGKoI.roa
Signing time: Thu 29 Feb 2024 23:55:04 +0000
ROA not before: Thu 29 Feb 2024 23:55:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 01 Mar 2024 03:55:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 187 (0xbb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Feb 29 23:55:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=854123CE9A4E141FE3D254348E67ED0442C62A82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:ac:ce:61:0a:2d:97:b2:c4:2a:0a:88:6d:0a:
00:06:c8:58:4e:98:75:fc:95:2b:e8:f3:7d:35:3c:
34:8b:41:30:a4:d4:26:ce:8e:b6:0c:e8:9d:d3:c2:
99:f3:8e:c8:56:2c:16:bd:5b:9e:55:45:e6:a9:4a:
94:37:97:6f:2b:c7:83:b5:ac:55:25:69:88:1c:28:
05:60:14:38:cb:91:60:a0:9f:5f:0f:03:8b:8b:83:
2d:57:b5:8e:fa:3d:7c:a9:e1:61:ca:80:37:b6:23:
fa:c0:a2:b7:4a:a3:28:8d:43:f5:33:3d:ca:a7:0b:
6b:f1:9c:50:ba:81:6c:ba:c6:2b:8e:13:3b:d4:ac:
e4:4f:48:9d:75:f5:d4:cf:84:59:7d:b7:63:ee:15:
ca:60:6c:22:41:3f:cf:fd:95:85:20:17:ee:1e:3e:
d6:82:66:6c:cc:d9:a7:4b:07:de:be:1e:af:b7:c4:
47:d1:4e:eb:ef:49:e0:0f:e4:c8:de:94:89:35:5b:
c4:b0:d5:46:c2:ee:46:25:47:c7:a7:2f:ce:2b:f2:
02:b9:bb:6a:05:7d:f8:80:d2:80:2a:f4:d8:58:90:
21:8c:e7:f3:68:a4:d8:90:0c:7b:9b:49:14:78:ed:
a3:7b:67:b0:f3:2e:8d:94:3e:16:6f:70:23:85:8f:
22:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:41:23:CE:9A:4E:14:1F:E3:D2:54:34:8E:67:ED:04:42:C6:2A:82
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/hUEjzppOFB_j0lQ0jmftBELGKoI.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:8b:25:56:39:a9:ae:8d:c2:02:a7:72:bc:7e:06:b5:cc:a8:
05:64:73:81:20:5c:23:ab:0f:ca:4c:78:a3:cf:43:0b:08:1d:
cb:e3:65:72:c5:7f:7c:7d:47:62:25:aa:e3:e2:35:a3:6f:a9:
51:95:4e:49:93:c3:41:60:fe:e3:81:39:0a:54:49:e5:cd:dc:
c2:45:d4:d2:28:7b:a1:21:6e:90:0a:3d:9c:6c:15:63:2a:82:
1b:63:07:a4:ca:d0:89:85:7a:a7:e0:06:62:8b:08:f0:03:db:
ce:c1:68:6b:d7:19:6c:d5:87:4f:9e:f9:78:da:6f:4f:c2:6e:
2d:ac:f4:ff:bc:32:88:3f:05:1d:e9:00:2a:16:e7:d6:1c:ca:
5e:a8:60:d1:19:a6:8a:d2:9f:01:66:b8:aa:38:fb:a3:32:04:
73:2c:14:09:02:1e:3c:23:78:74:b3:c0:42:f2:a7:1a:7c:93:
35:8f:5c:2d:09:8e:27:83:f6:25:29:41:b8:a9:14:1c:90:9c:
ac:c3:ef:df:37:60:6a:64:4b:51:c1:d2:aa:30:c9:06:f7:a4:
c8:20:13:35:ea:d5:f5:24:0b:a9:8f:ff:a1:0d:a5:76:79:7d:
f6:f2:90:eb:72:aa:7d:ec:1b:75:5a:8e:b3:75:9a:1e:ac:c2:
2c:ad:09:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:55 2024 by rpki-client on console-fra.rpki-client.org