Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/oU8F6ma8rubFP1LqgD2mFRYzcfw.roa
File: oU8F6ma8rubFP1LqgD2mFRYzcfw.roa (raw, json)
Hash identifier: 4ZB8qLgxvP8/xQcRdZ8vxM9iZtMuHy28MMTRIaZRXWI=
Subject key identifier: A1:4F:05:EA:66:BC:AE:E6:C5:3F:52:EA:80:3D:A6:15:16:33:71:FC
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 01CF
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/oU8F6ma8rubFP1LqgD2mFRYzcfw.roa
Signing time: Sun 31 Mar 2024 15:55:03 +0000
ROA not before: Sun 31 Mar 2024 15:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 31 Mar 2024 19:55:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 463 (0x1cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Mar 31 15:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=A14F05EA66BCAEE6C53F52EA803DA615163371FC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:62:7b:2c:2f:d0:c7:22:db:15:bf:37:6f:cc:
30:21:83:69:bd:f3:d6:c5:be:fc:29:ee:c7:89:d8:
f8:67:50:f4:09:47:0b:4c:73:45:95:21:2b:f0:78:
b0:7c:be:cc:93:a5:db:63:d7:4f:b0:38:e3:b5:bd:
9a:73:e0:c2:83:d2:e9:f5:ad:70:a0:a0:48:b4:a5:
04:3e:21:93:98:f5:5d:36:65:9e:e3:f2:4c:af:bb:
ce:3f:9a:97:24:c5:a0:1a:ee:ea:fe:4a:a6:8d:60:
7c:a2:09:a5:30:bf:29:23:c9:c3:69:37:c2:a1:f2:
61:b0:ce:75:39:66:c8:a7:8e:e5:f5:d4:48:9e:04:
60:79:7e:4f:f6:c6:ae:8e:9a:8b:10:6e:c2:6f:42:
0d:a3:e0:d4:e1:34:e0:fe:fb:02:33:1b:8a:ad:27:
98:14:dc:ff:10:9d:a1:90:dd:16:13:cf:2c:b5:4a:
bf:6e:0c:e6:bd:78:e7:2f:e4:6c:bf:f7:7b:b0:a4:
3c:6e:bd:62:7a:e3:4c:f8:95:a4:28:e5:9d:36:16:
ad:67:3f:0c:35:d2:61:65:e1:19:96:68:4f:67:68:
ac:bb:14:55:6d:6e:16:71:36:20:10:84:06:85:b9:
74:d9:28:45:cd:32:6f:17:3a:d0:7b:0b:b0:a6:eb:
ed:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:4F:05:EA:66:BC:AE:E6:C5:3F:52:EA:80:3D:A6:15:16:33:71:FC
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/oU8F6ma8rubFP1LqgD2mFRYzcfw.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
95:8d:4a:96:8c:29:70:7c:70:64:c1:23:c9:63:c8:2e:36:46:
11:5d:9e:a0:28:8a:0d:b0:5d:4e:12:97:4b:cb:4e:4b:c4:b5:
a2:43:d4:5c:6e:7e:4c:78:8a:d3:a6:f7:2e:7f:41:48:6f:76:
cd:19:6c:39:52:a1:61:ab:2f:9a:d4:f8:0a:9e:0a:87:0c:87:
90:17:87:37:6f:9c:f2:46:af:22:fc:3f:ee:fc:85:4f:f7:16:
af:a5:05:2c:90:51:fd:90:84:cc:ee:7e:95:fd:43:03:94:54:
8e:ee:13:b2:a6:c8:be:25:dc:3c:84:ea:e9:fc:39:65:b0:93:
09:1b:5b:77:84:50:5a:5f:cb:fc:45:9e:dd:80:02:44:0c:36:
c9:fb:17:35:02:3d:9e:b9:90:1c:d7:4e:0e:c7:3e:b4:5b:4d:
96:95:b7:08:86:85:13:e6:20:e3:bf:f6:3d:c5:3d:4e:e8:88:
81:14:b5:70:f0:7c:cc:44:d6:f0:2d:ae:c8:a0:5c:82:11:f9:
25:c3:d8:bd:d7:53:d3:f9:e6:64:46:b7:16:ca:e0:8e:93:59:
3f:4c:65:54:d0:85:14:2c:3d:95:6e:25:cb:df:f2:ba:00:04:
34:5b:9b:09:07:2e:3f:6e:3b:e0:46:79:7f:96:65:68:95:ad:
42:d8:1e:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 31 22:31:48 2024 by rpki-client on console-ams.rpki-client.org