Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/uNREwtM42yPDij-iO5c_8Fhe3Ug.roa
File: uNREwtM42yPDij-iO5c_8Fhe3Ug.roa (raw, json)
Hash identifier: G6fS6XFBR1WVRt6/0hRlhltStArCtzdgRDktYllhhf4=
Subject key identifier: B8:D4:44:C2:D3:38:DB:23:C3:8A:3F:A2:3B:97:3F:F0:58:5E:DD:48
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0406
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/uNREwtM42yPDij-iO5c_8Fhe3Ug.roa
Signing time: Sun 02 Jun 2024 15:55:03 +0000
ROA not before: Sun 02 Jun 2024 15:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 02 Jun 2024 19:55:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1030 (0x406)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Jun 2 15:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=B8D444C2D338DB23C38A3FA23B973FF0585EDD48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:30:77:db:33:25:f9:9c:bd:d7:55:85:35:39:
d5:d4:e3:37:2c:27:d0:96:f6:8c:78:96:5d:08:e0:
c4:ae:72:c0:8e:1f:cb:8a:8e:5f:45:ee:b3:b2:dc:
bb:7a:fd:37:d8:31:ae:0b:b5:af:ef:15:f8:ae:d5:
20:be:b1:87:d4:e9:b6:a4:c2:9f:8d:d3:39:2f:fa:
85:5b:a0:17:d5:1a:11:9a:bd:83:14:b3:0e:55:44:
d5:32:4f:3c:bf:18:92:8e:97:d4:55:83:d3:cd:eb:
5e:22:a2:38:a2:32:4f:77:6b:69:50:6a:3f:49:d2:
69:2b:fe:9a:5c:9b:ac:8f:40:ae:dd:cc:48:c8:ee:
e5:ef:12:a1:5f:bb:9d:9b:28:61:c8:e9:a6:e5:18:
4d:08:3e:ad:53:5e:ea:74:ef:b7:d2:b6:39:0a:cf:
4c:3f:23:98:ad:d5:43:96:1d:ca:1a:68:1d:3e:73:
8e:a0:f2:27:b0:54:cc:19:ad:5b:72:32:85:23:82:
88:c6:79:a6:9e:e5:e9:cf:23:f4:e3:b4:77:36:c5:
21:77:bc:57:5c:d6:ef:dd:7c:49:69:83:dc:6f:7d:
43:59:b8:01:44:95:57:7c:60:05:aa:72:55:22:fd:
f1:55:08:c3:0f:eb:3e:bf:01:f5:31:31:60:17:74:
ea:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:D4:44:C2:D3:38:DB:23:C3:8A:3F:A2:3B:97:3F:F0:58:5E:DD:48
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/uNREwtM42yPDij-iO5c_8Fhe3Ug.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
14:8a:6f:d7:4e:d1:16:38:21:3b:05:28:17:c1:c8:06:f6:4d:
85:84:1a:48:56:d9:a8:60:58:8f:99:85:76:cc:1d:92:40:2b:
20:2e:27:c1:93:5b:c7:de:82:06:5f:f3:79:d8:7e:c2:0c:33:
78:3f:a5:39:4d:8c:df:83:0f:e7:6a:ef:a8:a0:09:c0:0f:64:
c6:15:ae:7d:66:03:5b:41:32:9f:d2:30:24:62:38:66:ec:92:
ed:09:cd:28:da:ef:11:7e:e5:ae:1a:0c:9f:17:25:0c:5e:6f:
eb:fb:9e:67:19:8a:0c:6e:b3:f1:db:49:4a:70:7a:0a:cb:13:
4f:84:4c:9f:b9:cb:48:d1:e3:f5:12:a2:c0:b1:d0:c5:06:81:
5f:ff:8b:c9:ed:b8:81:bb:42:3a:7f:57:d9:08:74:f7:41:ae:
e2:6e:9b:30:d0:90:bf:66:09:de:7c:a8:be:35:f7:e7:09:ac:
7c:93:ed:70:b8:16:3c:50:bb:b2:7e:bc:cc:78:c4:3e:4d:ca:
7d:d2:23:f9:36:a3:1f:b8:b0:45:4b:d9:3a:b4:87:91:a7:ef:
c6:30:a1:72:ce:2a:40:dd:da:8b:3d:63:1b:c2:dc:8d:8a:0d:
bf:93:e1:d5:a9:5f:8e:a7:6a:ec:43:4f:2c:77:06:3d:54:8d:
f8:71:15:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 21:48:49 2024 by rpki-client on console-ams.rpki-client.org