Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/01W_PQ2hvskyQhm65ZmB4cFwUn0.roa
File: 01W_PQ2hvskyQhm65ZmB4cFwUn0.roa (raw, json)
Hash identifier: sgojyB/UJR5SQwRLqsHvhtnkXpJpc3gHOennebwwRI8=
Subject key identifier: D3:55:BF:3D:0D:A1:BE:C9:32:42:19:BA:E5:99:81:E1:C1:70:52:7D
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 031F
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/01W_PQ2hvskyQhm65ZmB4cFwUn0.roa
Signing time: Tue 07 May 2024 23:55:03 +0000
ROA not before: Tue 07 May 2024 23:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 08 May 2024 03:55:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 799 (0x31f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: May 7 23:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=D355BF3D0DA1BEC9324219BAE59981E1C170527D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:1f:e8:69:bc:8c:18:28:47:60:33:49:80:19:
05:61:23:bf:52:e1:75:3c:27:be:ae:56:11:eb:af:
ea:dd:1e:b8:dd:b8:96:6b:fb:8f:3f:f5:8d:fd:f3:
e7:b5:9f:68:1e:46:48:5b:34:41:0e:33:69:3d:ed:
c2:dd:32:6f:af:31:50:90:0f:60:17:fe:50:d7:77:
05:06:c9:5a:09:96:d2:4f:64:3a:9d:04:c6:57:53:
9a:08:c8:ab:07:52:75:0f:19:57:8e:3e:a9:91:4c:
59:d3:50:bb:fb:e4:1c:f2:6d:30:62:e0:97:11:91:
e7:e1:c2:1b:74:fb:c1:ee:33:e2:40:ad:d7:c2:c2:
30:72:c6:8a:94:e6:17:03:dc:f2:ef:f4:5e:2c:a3:
76:29:c9:51:8b:b2:2a:0e:65:34:05:8d:1e:a1:d8:
84:11:43:07:ec:03:56:ef:27:a0:16:54:5b:d2:70:
58:36:a9:dd:5e:7b:31:67:eb:05:d4:dc:e9:a2:26:
f1:af:34:86:34:c5:47:77:25:62:13:20:bd:d0:f7:
b5:80:f8:97:50:9e:7d:06:1c:5d:43:b3:13:3f:31:
ff:e6:05:53:64:ab:5b:0c:9f:bd:dc:ee:6f:ac:62:
f0:78:a9:a4:9b:da:f7:80:9f:6b:f7:3a:64:9c:d7:
3a:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:55:BF:3D:0D:A1:BE:C9:32:42:19:BA:E5:99:81:E1:C1:70:52:7D
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/01W_PQ2hvskyQhm65ZmB4cFwUn0.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
21:8a:51:98:6f:df:fe:c5:be:4b:27:e8:93:21:a6:96:bc:a1:
39:34:d8:e6:7e:a0:e4:25:4a:f3:0c:d3:c2:8d:98:86:4d:08:
89:0f:3e:4d:4c:3c:98:e9:0e:40:6c:ff:62:80:ee:42:55:38:
12:ec:42:22:6b:58:90:c0:c4:fe:f7:c5:bc:7c:74:76:e3:5d:
c8:aa:4b:2b:20:fd:9c:49:28:f3:78:45:2d:3c:d2:7b:29:69:
2d:ac:32:11:72:53:df:a7:48:5c:7f:a9:e4:9f:fc:e5:01:c4:
28:f5:ea:c7:01:d7:db:f7:93:27:a9:3d:28:86:69:c1:d8:0a:
4f:f1:2c:30:19:ad:f6:6e:dd:7f:2d:a2:32:dc:84:6e:02:f7:
79:6d:35:9d:05:69:33:c5:8d:84:3b:e2:30:4f:d9:85:4a:37:
95:82:cb:2a:60:41:0d:e2:ff:cb:d7:c4:ee:0d:10:da:8a:b3:
f7:db:b6:65:51:b9:0a:6b:4f:53:d5:4c:74:64:3e:18:a0:f4:
ea:cd:be:a9:c5:ff:03:1f:48:55:a1:73:e9:3a:5f:ba:b3:bd:
98:26:7b:c0:ba:d3:e8:d3:4e:85:6d:f3:ea:72:5c:bd:91:29:
d7:a0:87:df:c0:ea:0e:de:b3:b9:c7:99:35:5c:fb:16:47:63:
e5:0d:b4:e3
-----BEGIN CERTIFICATE-----
MIIEojCCA4qgAwIBAgICAx8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzFk
MTRlYmIyNTVkYzA1OGQ0YmZhNWE1MWM5M2Y3M2Y4MzBhYjg4ZjAeFw0yNDA1MDcy
MzU1MDNaFw0yNTA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKEQzNTVCRjNEMERBMUJF
QzkzMjQyMTlCQUU1OTk4MUUxQzE3MDUyN0QwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDEH+hpvIwYKEdgM0mAGQVhI79S4XU8J76uVhHrr+rdHrjduJZr
+48/9Y398+e1n2geRkhbNEEOM2k97cLdMm+vMVCQD2AX/lDXdwUGyVoJltJPZDqd
BMZXU5oIyKsHUnUPGVeOPqmRTFnTULv75BzybTBi4JcRkefhwht0+8HuM+JArdfC
wjByxoqU5hcD3PLv9F4so3YpyVGLsioOZTQFjR6h2IQRQwfsA1bvJ6AWVFvScFg2
qd1eezFn6wXU3OmiJvGvNIY0xUd3JWITIL3Q97WA+JdQnn0GHF1DsxM/Mf/mBVNk
q1sMn73c7m+sYvB4qaSb2veAn2v3OmSc1zqxAgMBAAGjggG+MIIBujAdBgNVHQ4E
FgQU01W/PQ2hvskyQhm65ZmB4cFwUn0wHwYDVR0jBBgwFoAUcdFOuyVdwFjUv6Wl
HJP3P4MKuI8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL2NobG9lLnNvYm9ybm9zdC5uZXQvcnBraS9SSVBFLW5scnNz
Zi9jZEZPdXlWZHdGalV2NldsSEpQM1A0TUt1STguY3JsMGQGCCsGAQUFBwEBBFgw
VjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9jZEZPdXlWZHdGalV2NldsSEpQM1A0TUt1STguY2VyMA4GA1UdDwEB
/wQEAwIHgDBoBggrBgEFBQcBCwRcMFowWAYIKwYBBQUHMAuGTHJzeW5jOi8vY2hs
b2Uuc29ib3Jub3N0Lm5ldC9ycGtpL1JJUEUtbmxyc3NmLzAxV19QUTJodnNreVFo
bTY1Wm1CNGNGd1VuMC5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADC
aIEwDQYJKoZIhvcNAQELBQADggEBACGKUZhv3/7Fvksn6JMhppa8oTk02OZ+oOQl
SvMM08KNmIZNCIkPPk1MPJjpDkBs/2KA7kJVOBLsQiJrWJDAxP73xbx8dHbjXciq
Sysg/ZxJKPN4RS080nspaS2sMhFyU9+nSFx/qeSf/OUBxCj16scB19v3kyepPSiG
acHYCk/xLDAZrfZu3X8tojLchG4C93ltNZ0FaTPFjYQ74jBP2YVKN5WCyypgQQ3i
/8vXxO4NENqKs/fbtmVRuQprT1PVTHRkPhig9OrNvqnF/wMfSFWhc+k6X7qzvZgm
e8C60+jTToVt8+pyXL2RKdegh9/A6g7es7nHmTVc+xZHY+UNtOM=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:54 2024 by rpki-client on console-fra.rpki-client.org