Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/pzoQoEMhj3DW2QIcX21gB1NysoE.roa
File: pzoQoEMhj3DW2QIcX21gB1NysoE.roa (raw, json)
Hash identifier: uFmZSCr1ozYbKn8E/BfPuTBi3TrAC3AZu1Tvinj59yw=
Subject key identifier: A7:3A:10:A0:43:21:8F:70:D6:D9:02:1C:5F:6D:60:07:53:72:B2:81
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 014E
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/pzoQoEMhj3DW2QIcX21gB1NysoE.roa
Signing time: Sun 17 Mar 2024 07:55:03 +0000
ROA not before: Sun 17 Mar 2024 07:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 17 Mar 2024 11:55:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 334 (0x14e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Mar 17 07:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=A73A10A043218F70D6D9021C5F6D60075372B281
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:8f:27:e4:a8:cd:59:a2:a4:19:df:63:24:b5:
15:10:34:f9:20:d9:b4:a4:a0:db:5c:d1:8c:4d:c2:
5e:06:02:ae:3c:48:c8:61:92:bf:f0:6f:d1:a7:da:
6c:f5:d8:a3:0a:65:0c:e6:eb:95:4a:ca:fa:13:f8:
56:50:81:0d:1b:91:8c:fb:b0:da:8c:39:03:b9:d1:
ca:78:94:47:cd:3d:ec:88:77:2e:b8:36:1e:b0:01:
4f:7a:c4:c5:af:96:78:5f:6c:c2:7b:f0:91:89:4e:
30:1c:e9:d0:0e:8d:a6:5c:06:02:48:79:a1:33:c0:
77:68:34:b2:79:fe:5e:cb:22:1b:1d:6e:36:90:4c:
74:22:9d:f6:82:bc:6d:b0:fa:0f:27:df:4c:f9:e3:
3b:de:b5:47:d3:5e:d5:60:e5:dd:01:28:06:5d:41:
d5:bf:f6:4f:b0:11:95:29:f0:68:7e:ea:bd:f0:a8:
fa:be:c7:56:7c:b2:11:03:42:8f:9c:7c:a8:80:e7:
12:a1:9d:5b:e6:27:b2:c6:f2:5d:c8:88:4c:ed:a1:
48:a0:aa:66:9c:0b:b9:ba:2f:f3:c3:58:09:ff:ad:
d6:b9:8b:39:90:0a:4b:b3:a4:4f:33:d1:9c:7f:0c:
2e:18:31:a6:bb:51:80:69:4c:b2:d8:7a:95:6a:0f:
c3:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:3A:10:A0:43:21:8F:70:D6:D9:02:1C:5F:6D:60:07:53:72:B2:81
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/pzoQoEMhj3DW2QIcX21gB1NysoE.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:2d:da:82:c8:68:50:4b:a5:7d:b9:17:df:1b:1c:12:a9:5b:
97:f7:96:36:d3:32:3a:8f:c3:75:a9:fc:a2:88:ef:3a:1f:4a:
47:37:e3:b0:93:3b:d1:25:26:fd:55:51:39:3a:1b:26:ba:ff:
78:61:3a:ae:0d:ea:e2:1c:28:53:07:48:d0:97:6c:1f:03:ca:
ea:90:a1:ee:5a:98:8d:d9:13:95:2c:8c:96:59:41:b0:55:25:
8c:23:78:87:0a:71:d4:c7:2d:d8:35:9f:a9:97:e8:20:e0:af:
b3:10:f0:e6:74:23:aa:e6:0d:bf:98:ef:c3:78:fe:31:c6:eb:
9c:26:b2:6a:d2:96:23:cc:78:51:93:03:28:15:36:ae:72:c8:
4e:c1:a7:58:9c:00:31:25:21:f8:36:0a:1e:82:cd:62:68:40:
c8:95:3d:07:3d:6e:78:54:0d:e8:0c:b7:13:61:2a:7f:6d:60:
59:38:09:6d:72:cb:62:1b:50:b1:ad:65:47:b7:66:bd:d4:91:
6b:c0:4a:48:ee:8c:44:63:e3:ec:09:54:1c:ec:39:76:4c:8e:
ea:3a:57:ec:7e:43:11:4f:fd:e1:33:85:93:01:0e:e5:d8:67:
6e:1d:f4:bc:b8:e2:48:5a:fe:cf:d9:b4:d6:af:ca:4c:55:37:
01:c8:e4:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:55 2024 by rpki-client on console-fra.rpki-client.org