Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/tv-yabUlzrF86S9wp2a3JY3bCmE.roa
File: tv-yabUlzrF86S9wp2a3JY3bCmE.roa (raw, json)
Hash identifier: G22gu5uquJIK8eHpkOwsa1RXSGQC+yHehCfbRDfn2Wg=
Subject key identifier: B6:FF:B2:69:B5:25:CE:B1:7C:E9:2F:70:A7:66:B7:25:8D:DB:0A:61
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 01C0
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/tv-yabUlzrF86S9wp2a3JY3bCmE.roa
Signing time: Fri 29 Mar 2024 23:55:04 +0000
ROA not before: Fri 29 Mar 2024 23:55:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 30 Mar 2024 03:55:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 448 (0x1c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Mar 29 23:55:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=B6FFB269B525CEB17CE92F70A766B7258DDB0A61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:7f:eb:67:78:23:87:d4:a1:3c:07:b1:d4:f6:
7f:f9:39:3d:e9:ef:43:6c:55:50:67:e9:4e:9a:a9:
9d:8c:7e:3e:fc:e6:2b:23:d9:fa:6e:5b:6b:29:49:
47:69:4f:69:a4:e8:5b:14:a1:58:8a:1d:49:44:c9:
e6:38:60:fc:df:ae:00:28:37:6f:e1:72:28:c0:8e:
f1:95:19:cc:d0:b1:e0:6d:9e:f8:dd:c4:20:4b:2e:
77:33:9a:fc:60:25:d0:6e:1e:a5:e3:ed:c5:d9:ad:
2b:e2:24:94:20:3c:f9:28:0b:5d:c5:63:75:bf:f4:
6e:eb:3e:fd:4e:8e:cc:37:f9:45:a3:d3:22:4a:06:
97:ea:94:66:97:3c:c6:db:0e:9f:32:0f:f7:dc:1e:
3b:79:27:28:30:4d:98:9e:cb:31:91:6c:10:be:53:
88:b4:fc:ce:40:07:12:33:ce:f4:7d:ed:0a:16:45:
81:d8:b1:66:09:7c:c4:7b:8c:cc:59:a8:d9:5d:81:
8e:1e:3d:21:91:54:5b:da:98:5e:be:64:a4:62:9d:
40:ad:c1:0c:e5:ca:88:b7:2a:42:f3:eb:c1:72:4f:
33:6e:8b:11:8b:f5:86:4e:80:1a:3d:51:48:60:e7:
5c:f6:9e:48:fa:59:a2:c5:d4:8d:56:de:27:37:45:
df:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:FF:B2:69:B5:25:CE:B1:7C:E9:2F:70:A7:66:B7:25:8D:DB:0A:61
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/tv-yabUlzrF86S9wp2a3JY3bCmE.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
75:45:a0:be:9a:80:e3:ec:55:cc:e7:3b:34:44:c5:45:91:a3:
a7:67:69:86:5d:87:ad:68:e0:25:74:4b:c2:92:f3:f1:01:f2:
4e:87:27:79:85:9e:0b:15:fd:61:58:e2:0b:98:6e:1b:fb:cc:
23:7c:e9:8f:41:39:39:e5:3d:40:34:13:aa:6d:a8:5c:b3:07:
01:7d:eb:2f:84:cb:c0:9e:13:20:75:e9:1e:5c:ee:f0:e2:1c:
ec:d0:e6:fd:89:4d:96:46:6f:0a:a5:2e:32:ff:9f:96:db:6e:
b7:46:f8:74:76:ee:78:bc:26:28:38:55:d7:c2:06:d0:70:fa:
b7:72:0e:d2:83:bc:84:18:fd:f8:cb:e2:72:2c:de:29:e8:14:
28:3f:6c:9c:ba:74:46:c6:45:94:c2:c8:2a:f4:f5:c7:7f:f8:
a0:fc:4f:14:12:10:98:67:34:25:e5:1a:6a:e7:8e:6f:b8:e8:
0c:47:95:f2:0b:f7:99:4e:8f:09:88:36:f1:66:e0:f9:af:67:
61:43:51:2d:d2:84:db:22:18:9e:ad:0c:1f:c4:4e:35:1d:2f:
05:56:0d:9b:b3:12:33:29:85:c6:f5:20:0a:cd:2b:a0:f6:cd:
ec:ae:5c:2a:0a:c5:6f:22:9a:83:49:d3:d3:8a:db:24:c6:68:
bb:40:6c:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:55 2024 by rpki-client on console-fra.rpki-client.org