Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/0jHMeGJB6ZVh2DxJPBvqQebjW3s.roa
File: 0jHMeGJB6ZVh2DxJPBvqQebjW3s.roa (raw, json)
Hash identifier: kDcJiBC4ok339Y6U1yMoUN0nO2NS4U7mZuSdqCimc3c=
Subject key identifier: D2:31:CC:78:62:41:E9:95:61:D8:3C:49:3C:1B:EA:41:E6:E3:5B:7B
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 08C8
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/0jHMeGJB6ZVh2DxJPBvqQebjW3s.roa
Signing time: Tue 15 Oct 2024 23:55:03 +0000
ROA not before: Tue 15 Oct 2024 23:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 16 Oct 2024 03:55:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2248 (0x8c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Oct 15 23:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=D231CC786241E99561D83C493C1BEA41E6E35B7B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e5:c7:ba:4a:0a:bb:6d:36:73:05:8e:cf:61:
e0:83:77:16:b9:36:4c:50:b4:66:e1:f4:40:16:93:
a2:57:22:f5:f9:b8:e8:2c:ec:7f:27:7b:75:c8:bf:
88:ca:c4:e3:49:99:30:19:b6:bf:57:67:73:b1:e7:
9e:f2:34:fe:4a:11:02:30:b4:45:27:17:7f:f3:00:
93:9d:a6:dc:3e:7b:78:eb:11:03:55:7f:51:93:fc:
a5:d7:04:52:ca:ba:1a:18:27:d2:41:b4:d1:90:0c:
ae:ac:11:eb:30:d1:d7:31:b2:62:3f:8b:a4:3e:7d:
12:7a:62:79:05:f9:70:7c:c6:96:1b:18:f9:e9:f5:
bd:51:d2:b5:7b:32:f2:76:a2:7e:ba:0b:e7:0b:be:
84:3e:3f:49:90:aa:6d:e3:92:a0:b9:a6:be:47:a4:
76:89:0d:5c:4f:6e:21:49:09:c0:30:fb:32:52:b6:
0b:7c:3f:c5:d0:42:d3:33:b7:e5:03:df:8b:4c:03:
78:0e:6b:21:0f:3d:07:79:5a:f9:8b:ab:7f:f4:e4:
fe:fe:db:48:01:ff:08:81:d5:df:69:7e:51:ee:67:
37:93:86:02:68:b7:a6:9b:29:97:d6:42:1b:a5:e5:
ca:d6:2e:b1:e7:5a:4c:ab:e1:5e:32:09:53:04:c5:
f8:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:31:CC:78:62:41:E9:95:61:D8:3C:49:3C:1B:EA:41:E6:E3:5B:7B
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/0jHMeGJB6ZVh2DxJPBvqQebjW3s.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
d8:50:57:99:0e:4a:2c:74:41:a5:28:ba:ae:30:c9:5f:82:34:
90:c8:46:2f:e8:d0:2b:c3:47:13:b4:75:3a:9f:81:d7:5c:8b:
db:99:ce:77:80:26:44:19:b1:df:db:85:69:4b:cf:9d:47:43:
cb:77:56:e8:ee:da:76:85:51:1d:ed:d7:b6:ed:4d:89:44:57:
b0:3c:21:d9:15:f9:31:a3:99:3f:6b:5c:33:21:42:de:20:ca:
63:9e:8a:0c:62:45:5f:5b:d2:03:94:f2:69:9c:28:1f:df:fc:
3e:4f:a7:59:05:81:74:ca:cb:e3:41:0e:47:e4:e6:ae:d9:ad:
f2:d9:17:68:9a:44:5d:d0:b6:b3:42:78:89:db:f4:45:5c:70:
04:ce:c4:bf:a8:40:b7:82:e6:8a:58:3d:f5:42:c3:50:9c:8b:
f1:47:de:6c:98:9b:25:97:50:32:93:bf:46:fb:83:a7:f6:50:
93:39:8f:31:19:1d:9f:3a:62:80:ef:b9:6e:c3:a2:a0:96:d3:
60:e4:c9:95:f5:26:46:8a:72:af:20:fe:39:f0:b2:e1:4c:01:
5a:28:43:4c:e2:cb:90:ed:74:fc:67:7c:34:39:37:59:40:78:
8e:37:5e:20:5f:da:ae:77:a3:1a:87:c7:58:f8:b9:6d:9c:b9:
15:d0:6c:23
-----BEGIN CERTIFICATE-----
MIIEojCCA4qgAwIBAgICCMgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzFk
MTRlYmIyNTVkYzA1OGQ0YmZhNWE1MWM5M2Y3M2Y4MzBhYjg4ZjAeFw0yNDEwMTUy
MzU1MDNaFw0yNTA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKEQyMzFDQzc4NjI0MUU5
OTU2MUQ4M0M0OTNDMUJFQTQxRTZFMzVCN0IwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDG5ce6Sgq7bTZzBY7PYeCDdxa5NkxQtGbh9EAWk6JXIvX5uOgs
7H8ne3XIv4jKxONJmTAZtr9XZ3Ox557yNP5KEQIwtEUnF3/zAJOdptw+e3jrEQNV
f1GT/KXXBFLKuhoYJ9JBtNGQDK6sEesw0dcxsmI/i6Q+fRJ6YnkF+XB8xpYbGPnp
9b1R0rV7MvJ2on66C+cLvoQ+P0mQqm3jkqC5pr5HpHaJDVxPbiFJCcAw+zJStgt8
P8XQQtMzt+UD34tMA3gOayEPPQd5WvmLq3/05P7+20gB/wiB1d9pflHuZzeThgJo
t6abKZfWQhul5crWLrHnWkyr4V4yCVMExfi5AgMBAAGjggG+MIIBujAdBgNVHQ4E
FgQU0jHMeGJB6ZVh2DxJPBvqQebjW3swHwYDVR0jBBgwFoAUcdFOuyVdwFjUv6Wl
HJP3P4MKuI8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL2NobG9lLnNvYm9ybm9zdC5uZXQvcnBraS9SSVBFLW5scnNz
Zi9jZEZPdXlWZHdGalV2NldsSEpQM1A0TUt1STguY3JsMGQGCCsGAQUFBwEBBFgw
VjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9jZEZPdXlWZHdGalV2NldsSEpQM1A0TUt1STguY2VyMA4GA1UdDwEB
/wQEAwIHgDBoBggrBgEFBQcBCwRcMFowWAYIKwYBBQUHMAuGTHJzeW5jOi8vY2hs
b2Uuc29ib3Jub3N0Lm5ldC9ycGtpL1JJUEUtbmxyc3NmLzBqSE1lR0pCNlpWaDJE
eEpQQnZxUWVialczcy5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADC
aIEwDQYJKoZIhvcNAQELBQADggEBANhQV5kOSix0QaUouq4wyV+CNJDIRi/o0CvD
RxO0dTqfgddci9uZzneAJkQZsd/bhWlLz51HQ8t3Vuju2naFUR3t17btTYlEV7A8
IdkV+TGjmT9rXDMhQt4gymOeigxiRV9b0gOU8mmcKB/f/D5Pp1kFgXTKy+NBDkfk
5q7ZrfLZF2iaRF3QtrNCeInb9EVccATOxL+oQLeC5opYPfVCw1Cci/FH3myYmyWX
UDKTv0b7g6f2UJM5jzEZHZ86YoDvuW7DoqCW02DkyZX1JkaKcq8g/jnwsuFMAVoo
Q0ziy5DtdPxnfDQ5N1lAeI43XiBf2q53oxqHx1j4uW2cuRXQbCM=
-----END CERTIFICATE-----
Generated at Wed Oct 16 06:28:41 2024 by rpki-client on console-ams.rpki-client.org