Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/z0DL69Rhz-lb9ynWUuNIjUND24Y.roa
File: z0DL69Rhz-lb9ynWUuNIjUND24Y.roa (raw, json)
Hash identifier: tC8aK6y9upNg6Iv61OSPlBDObQBHbjdTWx9aBj7mwHk=
Subject key identifier: CF:40:CB:EB:D4:61:CF:E9:5B:F7:29:D6:52:E3:48:8D:43:43:DB:86
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: B5
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/z0DL69Rhz-lb9ynWUuNIjUND24Y.roa
Signing time: Thu 29 Feb 2024 07:55:03 +0000
ROA not before: Thu 29 Feb 2024 07:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 29 Feb 2024 11:55:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 181 (0xb5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Feb 29 07:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=CF40CBEBD461CFE95BF729D652E3488D4343DB86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:cb:3d:2c:61:15:c1:76:9b:70:5b:6d:9d:b1:
b7:73:c3:09:fe:af:ef:9e:41:98:77:ca:ea:60:53:
6c:cd:8e:5d:bd:2a:da:5a:98:05:1a:d2:67:ab:0d:
27:eb:d0:f4:e1:4f:70:59:23:57:2f:d9:61:1c:0b:
47:de:47:c8:a6:31:d5:27:00:04:56:e1:bf:1c:9c:
80:cc:e1:11:66:72:ad:cc:8d:0e:01:c9:ae:9b:02:
4a:56:2e:b5:ac:80:55:37:70:5f:cf:6d:45:7d:0e:
78:90:09:13:ba:12:43:86:f8:3e:b9:6b:47:76:18:
07:8d:f8:5a:fc:a9:eb:8b:43:be:35:69:9f:0a:fb:
38:f8:2f:ab:5c:f5:85:b4:05:33:14:87:f5:9d:fa:
3c:5c:75:a5:28:ed:9f:c1:c4:65:9a:45:37:0e:a6:
8b:6a:15:ae:b9:c1:c6:11:b5:91:3f:f0:96:34:57:
a5:e1:9e:98:65:d6:50:6c:82:fa:7a:10:5f:ff:99:
e2:6d:1e:9d:6a:37:8e:44:32:e6:9e:c3:f0:83:99:
af:ec:b9:6e:8b:ae:38:da:42:04:cc:bb:61:21:26:
f2:63:3f:4d:9b:c2:95:62:71:b8:93:c7:06:37:b6:
41:3a:1d:12:d7:14:71:a2:f2:20:3a:a7:36:29:44:
d3:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:40:CB:EB:D4:61:CF:E9:5B:F7:29:D6:52:E3:48:8D:43:43:DB:86
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/z0DL69Rhz-lb9ynWUuNIjUND24Y.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:da:f2:3c:9d:df:fc:1e:5b:02:48:38:32:fd:b4:4e:03:4c:
c9:a0:f7:30:f2:f8:0a:06:60:ac:21:d5:b3:24:83:7e:94:75:
70:50:47:05:5f:34:bb:5e:ce:35:f6:85:1f:94:41:40:76:61:
68:b0:e0:54:e3:de:30:5f:47:8e:8b:f9:77:4a:a5:cd:bc:6b:
a1:d8:49:28:bc:a9:9c:21:93:b0:ce:d4:d0:38:ee:e1:91:10:
f0:de:53:42:dc:93:36:ed:9a:33:4f:a7:63:12:13:d2:f1:22:
a2:6b:98:06:1c:b4:6e:f3:cb:00:ee:f2:61:32:6b:8d:26:36:
2a:9d:1b:67:7c:39:56:18:98:1e:e3:8d:fd:19:95:2b:f4:a0:
a4:b5:6c:f4:ec:9b:18:ce:91:dd:fd:52:4b:b3:ef:64:39:c7:
21:97:d1:b3:81:8b:26:2e:fc:2a:d8:d3:6a:a4:9f:d7:0a:36:
51:6c:db:d6:d1:d6:4c:2c:b6:92:1e:7f:48:ba:44:0d:c1:46:
2b:77:30:e4:5b:7d:24:75:a0:1d:84:74:be:82:31:a8:4c:9c:
f9:7a:04:b3:de:fc:18:2c:4f:ed:f4:ef:28:fa:89:f3:29:cf:
e8:02:04:aa:22:1d:2b:25:c0:8b:ef:0c:18:67:6d:f7:57:34:
90:d4:63:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 29 16:38:59 2024 by rpki-client on console-ams.rpki-client.org