Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/liIEx8oOdF-rOsFFrHvV2T4aLvk.roa
File: liIEx8oOdF-rOsFFrHvV2T4aLvk.roa (raw, json)
Hash identifier: oUTJxPyln44peJtLQ1ogm9T8ZJZMYv3JherEKFTLz2A=
Subject key identifier: 96:22:04:C7:CA:0E:74:5F:AB:3A:C1:45:AC:7B:D5:D9:3E:1A:2E:F9
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 82
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/liIEx8oOdF-rOsFFrHvV2T4aLvk.roa
Signing time: Fri 23 Feb 2024 15:55:03 +0000
ROA not before: Fri 23 Feb 2024 15:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 23 Feb 2024 19:55:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 130 (0x82)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Feb 23 15:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=962204C7CA0E745FAB3AC145AC7BD5D93E1A2EF9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:48:0a:cd:f4:d1:f4:8e:d6:31:12:2a:0a:a7:
7d:45:07:b7:ae:1f:81:d0:5e:78:00:f0:3f:59:b5:
a3:7a:9b:c3:c1:36:cb:46:8b:87:b3:99:3c:87:0e:
1b:2b:35:38:a3:48:cc:0a:87:b8:3e:a3:7f:bf:fd:
2d:f9:6e:27:12:3e:b3:18:dd:40:d7:72:63:ed:a5:
f2:98:d0:c9:c6:df:3f:0d:bc:d9:73:62:1f:0e:ce:
b8:f0:09:52:23:d2:29:2d:bb:bf:9b:99:7b:dd:45:
ce:6d:3a:26:f5:3a:59:3f:9a:b5:f8:24:27:6d:1f:
0e:5d:48:e9:d2:e8:4f:04:2b:2d:b8:4c:da:37:5f:
68:7c:e2:f0:01:52:da:b4:c8:c0:da:a1:32:da:e8:
16:0c:35:d5:6a:1f:9e:64:01:9d:58:23:f0:a9:14:
f2:0a:04:a4:d4:7a:a3:69:0a:e8:4e:28:61:04:7d:
1b:36:37:a0:0e:30:bf:4d:46:3c:d2:a3:c6:00:f9:
76:4b:40:a0:71:a3:4e:b9:80:17:7e:97:bb:16:6b:
70:b5:35:ae:f0:8f:1f:56:76:2d:d4:c3:91:4d:c2:
82:52:0f:65:1b:92:f7:fa:d4:22:34:15:38:9a:06:
18:00:c3:7e:a5:4b:cb:49:2c:d8:ff:bc:aa:38:81:
85:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:22:04:C7:CA:0E:74:5F:AB:3A:C1:45:AC:7B:D5:D9:3E:1A:2E:F9
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/liIEx8oOdF-rOsFFrHvV2T4aLvk.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:e8:78:90:58:c1:1c:f5:98:28:a6:5b:24:5c:3e:08:7e:f1:
03:7d:ae:77:ce:88:3a:46:c6:e1:73:ca:45:11:61:dd:ec:35:
55:cb:2c:39:d9:4a:bf:ca:f8:5f:4d:bf:86:9d:8d:3d:b2:9e:
f5:40:89:5b:c8:8e:ae:37:aa:ec:55:c8:60:24:99:84:d9:34:
db:05:a0:93:a7:87:ce:21:a2:a0:f0:1d:21:c5:ac:35:47:7e:
e4:dc:c3:51:76:dc:2d:c6:65:1b:5b:3a:76:3b:52:79:dd:ce:
38:b5:59:2a:6f:e1:46:b4:e0:2d:13:df:a2:25:8c:63:3a:b3:
e3:c0:b3:49:ec:c5:f5:36:3f:06:b8:52:50:fd:cb:e0:37:b5:
b9:94:7d:2d:de:11:72:34:c1:9c:86:d3:80:57:5a:bd:2c:1a:
51:a4:b7:6d:9a:a2:d9:1a:64:68:f6:71:08:c9:e0:e8:bd:32:
0f:97:7c:b8:f7:fe:e3:c0:c6:3e:82:12:25:e1:8b:51:c0:a9:
20:53:8a:38:23:80:b7:5e:51:c1:06:28:4e:7e:b2:b9:45:38:
f4:7d:25:d1:87:e7:4e:a1:39:96:44:0c:6a:f8:09:1c:71:fa:
16:9b:45:55:50:25:7b:01:f6:73:62:75:e7:53:ca:b9:ec:9b:
73:f6:38:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 24 01:09:32 2024 by rpki-client on console-ams.rpki-client.org