Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/j1Vb2JMeQPaTT13lPQjrvX4Kias.roa
File: j1Vb2JMeQPaTT13lPQjrvX4Kias.roa (raw, json)
Hash identifier: USLvpEiylXoYkI1tR2rNmPSe8uOdwqGRkL1nIq7cxf0=
Subject key identifier: 8F:55:5B:D8:93:1E:40:F6:93:4F:5D:E5:3D:08:EB:BD:7E:0A:89:AB
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 03B2
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/j1Vb2JMeQPaTT13lPQjrvX4Kias.roa
Signing time: Fri 24 May 2024 07:55:04 +0000
ROA not before: Fri 24 May 2024 07:55:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 24 May 2024 11:55:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 946 (0x3b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: May 24 07:55:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8F555BD8931E40F6934F5DE53D08EBBD7E0A89AB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:04:d7:f0:5c:f6:c0:6e:ca:fc:7f:4c:ec:cc:
ad:35:38:6b:9f:dc:65:34:ae:fa:8a:31:09:dc:d3:
08:ba:86:aa:de:ed:56:50:61:ff:30:eb:6b:08:76:
b0:24:64:d2:4c:b6:13:7b:44:dd:d9:0d:59:81:c1:
5a:8d:29:7b:e0:36:e2:a0:00:18:dd:80:1f:fd:2e:
38:2c:e7:4e:a1:ef:ef:18:bd:7f:80:15:48:0c:17:
eb:99:ca:71:74:75:7f:7d:fc:1e:d7:97:29:32:9d:
47:59:39:23:23:7a:83:f1:f4:a8:c5:96:ee:d5:5c:
4f:a0:f6:95:cd:5c:a0:2c:4d:ad:8e:a4:c7:3c:44:
66:3f:bd:9c:15:a1:a8:50:8a:c9:c6:81:36:bb:51:
7a:c9:58:c8:88:25:31:7f:1b:dd:80:9f:a8:1d:73:
72:90:10:ea:d3:22:02:6e:4e:90:eb:92:62:3d:0b:
ab:b6:3b:7f:a3:b9:ce:34:43:56:fd:83:b7:d6:de:
42:9d:9d:58:0d:4e:fe:2d:d0:d3:be:0b:66:31:b8:
55:d8:76:85:fc:7e:7a:94:c2:07:ea:8b:1d:63:77:
2f:55:b4:2f:bd:7d:e2:a7:a2:03:9a:9c:ed:17:7f:
4e:89:ad:eb:2e:e1:e4:1e:83:76:f7:2d:c2:9a:3b:
9d:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:55:5B:D8:93:1E:40:F6:93:4F:5D:E5:3D:08:EB:BD:7E:0A:89:AB
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/j1Vb2JMeQPaTT13lPQjrvX4Kias.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
77:2c:c2:bf:e7:8c:c4:92:95:23:c3:71:b8:6b:e2:c0:27:c5:
7b:69:98:69:d1:8a:d3:39:1b:82:ba:a5:35:02:e5:74:c6:f6:
ba:9e:79:5e:36:33:a9:99:01:68:02:c0:b8:4d:f2:d8:43:85:
da:1a:cd:aa:63:bb:94:43:b4:c3:ff:f3:0b:a4:7a:33:36:c5:
8b:be:da:35:22:07:59:2d:9b:6d:3e:48:1b:c5:60:41:7b:df:
60:e2:18:08:66:85:0b:e5:c2:f2:83:e7:19:67:b3:37:51:f8:
a6:b1:d2:aa:87:54:a7:6a:ad:46:a6:8e:05:65:dc:9e:44:ff:
97:0c:6d:2c:22:d8:35:f0:12:41:fe:b8:13:03:43:e4:e2:75:
52:dd:c7:ae:d9:8b:24:9e:96:77:c0:83:47:4d:24:80:1d:a5:
b0:80:51:00:9c:cf:79:65:52:63:32:20:5d:b8:71:f2:06:71:
6b:c7:76:c3:57:79:f9:f7:9c:ae:88:80:fc:78:74:2f:de:2b:
d9:e9:69:11:1d:af:7e:5e:5a:56:31:fe:35:f3:66:b7:9f:bc:
3c:ea:34:51:20:78:7b:4d:ae:29:a9:c3:7d:c6:03:8e:05:87:
9c:01:20:99:27:a9:f2:44:a2:ce:52:f9:cc:7b:5c:49:6c:8b:
6f:56:46:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 24 17:11:18 2024 by rpki-client on console-ams.rpki-client.org