Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/zZ8Zs0YiTwElS93VQuDW6B3wpTY.roa
File: zZ8Zs0YiTwElS93VQuDW6B3wpTY.roa (raw, json)
Hash identifier: rMadxDBdtoLf9hcyv1sZxKTCwxwIPV4TQaQbQg6UIjs=
Subject key identifier: CD:9F:19:B3:46:22:4F:01:25:4B:DD:D5:42:E0:D6:E8:1D:F0:A5:36
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 04AE
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/zZ8Zs0YiTwElS93VQuDW6B3wpTY.roa
Signing time: Fri 21 Jun 2024 07:55:03 +0000
ROA not before: Fri 21 Jun 2024 07:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1198 (0x4ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Jun 21 07:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=CD9F19B346224F01254BDDD542E0D6E81DF0A536
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:e6:df:af:45:dc:52:11:48:19:53:5d:47:82:
7d:c8:3f:3f:59:f9:dc:12:86:45:18:2b:7b:52:6c:
73:8b:b7:4e:a7:9f:7c:f4:b3:01:e9:f2:f6:7e:93:
ff:e9:4b:81:fd:a8:b8:fd:c7:ae:30:1c:b7:1e:a1:
78:09:49:96:f1:73:a8:f8:37:ab:55:71:b4:62:16:
14:70:0d:30:11:86:1e:51:4b:85:a8:79:77:59:17:
ce:2b:86:03:fa:fd:73:71:24:03:77:ef:49:75:cd:
ca:86:c6:2f:cd:37:5c:4f:dc:ee:6a:ee:88:d5:ab:
70:66:79:09:54:c1:a4:d3:d7:ba:10:66:c1:4f:37:
ec:32:71:ae:98:2b:28:a6:12:24:57:83:0e:85:12:
7c:b8:3e:8c:ec:16:85:1c:ab:e4:b8:e9:a0:d8:8e:
ed:96:4a:14:04:29:7d:9f:d9:83:48:d9:af:da:1c:
3e:f0:4e:62:1d:3e:bb:0c:64:8f:86:07:20:f6:c8:
f6:5b:dc:b0:a6:21:56:b3:51:e8:b3:df:f9:2c:e8:
6e:11:51:83:82:74:38:df:5a:ea:f5:ab:d2:3c:a6:
aa:c5:92:38:75:1b:6b:f2:5e:5c:d7:ac:43:cf:5c:
e4:fd:1a:50:f4:9e:8b:05:d0:8e:b8:1e:b4:e8:9c:
45:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:9F:19:B3:46:22:4F:01:25:4B:DD:D5:42:E0:D6:E8:1D:F0:A5:36
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/zZ8Zs0YiTwElS93VQuDW6B3wpTY.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:1b:ff:2e:dc:db:39:87:2b:54:2a:bd:bd:ee:ea:12:73:ab:
84:7b:f8:7c:7b:9d:d7:a6:1e:1f:06:0a:d4:95:07:6d:11:28:
ee:e4:67:6e:66:64:7f:85:ab:f3:9a:9e:32:f5:ac:67:41:49:
27:88:8f:02:9b:b0:94:e9:5c:ab:05:d8:4c:b5:1d:40:d6:d5:
38:c9:59:28:89:0f:7e:7a:09:3d:a0:c9:c4:5b:18:c6:33:70:
12:e5:9f:d3:b1:54:ba:ad:32:f3:cf:88:db:85:6b:ef:99:a2:
9c:14:29:e5:b2:5f:6a:49:90:9d:25:5e:13:6d:70:14:5f:57:
8a:89:52:9d:1a:6b:31:7e:10:2b:ca:ac:c4:e2:96:b6:c8:b8:
fd:0c:81:3a:e3:52:3b:ae:a3:21:da:10:f7:d0:76:0e:ce:24:
9e:c6:7f:d5:94:08:96:97:cd:77:d5:15:05:1b:92:45:00:39:
83:53:b9:a7:55:7f:f4:62:bb:d6:d8:fb:ba:8a:61:c1:d4:5a:
6f:c6:45:c4:40:47:e0:73:4d:b3:21:37:8f:c2:63:1a:33:37:
f6:21:49:9a:de:fb:59:41:a7:bb:da:e6:78:0d:53:60:6a:da:
fe:4c:a3:ac:75:11:36:f2:cd:7b:91:68:41:5b:0e:41:21:0d:
49:ed:4c:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 18:16:52 2024 by rpki-client on console-ams.rpki-client.org