Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/iing22gitXl3No5iQhZi-gQor80.roa
File: iing22gitXl3No5iQhZi-gQor80.roa (raw, json)
Hash identifier: 9VfPj0qxk9L4jkEBSCJkTrK5+mCDyGB5TPOwJdGliNU=
Subject key identifier: 8A:29:E0:DB:68:22:B5:79:77:36:8E:62:42:16:62:FA:04:28:AF:CD
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0100
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/iing22gitXl3No5iQhZi-gQor80.roa
Signing time: Fri 08 Mar 2024 15:55:03 +0000
ROA not before: Fri 08 Mar 2024 15:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 08 Mar 2024 19:55:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 256 (0x100)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Mar 8 15:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8A29E0DB6822B57977368E62421662FA0428AFCD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ec:3e:80:fe:50:36:56:1a:da:9e:cf:0f:96:
db:c2:7a:80:b9:4b:7c:c4:3e:be:19:55:97:77:2f:
43:c0:51:08:58:bd:05:b3:48:88:4f:84:ec:c9:58:
6e:5e:1b:c8:b3:c1:de:65:21:63:3a:0a:92:69:9b:
78:9a:75:9d:66:29:b5:09:8e:80:41:89:49:93:cb:
0e:9e:c7:ff:eb:86:5c:bf:a7:29:3b:ca:70:53:f1:
db:95:d8:db:9c:8f:8a:64:86:cc:44:ee:41:fc:70:
dd:84:75:ec:24:28:4a:d5:fe:fe:18:f9:9d:5e:45:
08:05:ab:1f:81:dc:93:68:ad:6b:2b:01:41:0e:40:
3d:0f:2d:e3:a9:19:be:78:c8:ce:a3:9d:d6:6a:cb:
4e:4c:92:fa:ae:8f:11:35:c8:a1:de:65:d2:76:2a:
02:19:c0:20:8c:08:54:9d:fc:f2:22:6d:6f:61:e0:
2e:6e:cd:50:1a:64:96:c1:e8:4c:5b:a8:27:e8:af:
a1:d0:e0:9a:a6:e2:b5:a1:ac:dd:ea:7f:cc:4e:9a:
db:25:c2:97:9e:43:a3:3c:7c:ee:a5:cf:82:94:01:
85:65:12:46:a8:79:51:7a:9f:30:37:b9:31:2a:61:
80:e0:f3:04:ce:41:c2:b7:01:86:8f:de:3d:33:6a:
bd:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:29:E0:DB:68:22:B5:79:77:36:8E:62:42:16:62:FA:04:28:AF:CD
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/iing22gitXl3No5iQhZi-gQor80.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:46:bc:59:08:7b:4b:5b:3c:28:b9:36:d1:49:bc:8a:59:7c:
df:14:1a:08:19:bd:08:8d:6a:51:24:c9:02:75:92:58:61:41:
0e:de:30:d2:d4:d1:03:21:9f:92:0d:37:15:ff:4b:8d:cc:72:
0e:6b:5e:d0:8c:ce:04:5a:4c:af:4c:cc:4f:3d:71:56:e2:15:
3e:28:36:bc:fd:8d:b2:6b:a6:e2:f4:71:06:89:e9:1c:9d:5e:
11:da:5b:3f:bd:6a:8f:6d:39:b4:74:bf:14:ff:e0:d9:ba:59:
86:7e:63:e1:18:15:dc:b9:36:ab:1e:f2:6b:62:67:68:48:6d:
15:29:97:96:4c:7f:e7:7e:b8:f0:8b:e0:f4:9b:9c:63:d1:fa:
13:e4:df:4b:b1:96:2a:8b:f9:3f:c7:53:6a:61:6f:a3:81:59:
7b:70:c0:ef:7d:e3:9d:39:8a:19:f5:cd:04:4c:9c:1e:ce:db:
fb:b4:b3:2e:26:37:74:5e:ae:ee:48:16:14:54:54:3c:5d:b8:
a9:5d:c2:94:f4:a5:48:cb:68:da:9f:18:55:c8:4d:ec:b5:49:
b7:ed:69:eb:74:09:92:c7:84:bf:20:ac:87:47:5f:b8:40:27:
24:f3:2b:cd:52:98:ca:e5:5c:42:e6:f9:2e:93:8b:24:d7:3d:
0c:af:72:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 8 21:08:27 2024 by rpki-client on console-ams.rpki-client.org