Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/0rN0KseEepKEwHkUWBkZt_dzIDk.roa
File: 0rN0KseEepKEwHkUWBkZt_dzIDk.roa (raw, json)
Hash identifier: AGZo4dTrHBhkyu5Bx6HXefcuwL8vclVvxahAc6D6N5Q=
Subject key identifier: D2:B3:74:2A:C7:84:7A:92:84:C0:79:14:58:19:19:B7:F7:73:20:39
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 09D4
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/0rN0KseEepKEwHkUWBkZt_dzIDk.roa
Signing time: Thu 14 Nov 2024 15:55:03 +0000
ROA not before: Thu 14 Nov 2024 15:55:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 14 Nov 2024 19:55:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2516 (0x9d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Nov 14 15:55:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=D2B3742AC7847A9284C07914581919B7F7732039
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:3c:1d:f1:aa:c9:fa:ed:4b:59:37:5b:0f:6b:
14:60:1f:47:f2:f7:93:52:03:30:96:2b:39:d1:e9:
d9:9c:af:3b:19:9a:4c:31:a4:77:73:0a:55:a9:59:
f5:a9:bc:69:03:2f:3e:dc:55:ec:19:e3:74:87:ef:
8d:d5:34:1d:96:9b:ec:66:81:51:2a:c8:c2:ed:2a:
c1:3e:69:a9:08:8e:48:b1:5f:98:4e:37:00:0f:36:
b9:c0:96:4b:0f:59:0b:ea:cd:44:44:2c:2d:42:07:
c3:c4:da:f4:56:9d:0b:d7:06:cc:e0:5b:1d:0b:07:
1e:2e:d2:06:d8:16:9c:cb:e5:b3:ce:00:f4:01:61:
dc:38:06:7c:df:e1:b5:6d:88:7b:d8:69:9d:8b:e1:
54:71:e3:97:8d:c2:80:c1:ea:79:7e:0f:8b:35:70:
31:71:1a:65:91:aa:dd:93:11:a2:a1:91:a4:9a:db:
e1:78:20:92:53:c7:c2:0e:50:95:5b:3f:0f:1c:b7:
d0:8c:81:e1:e7:73:bb:7f:da:bf:85:25:22:64:cc:
db:e4:51:03:aa:74:ec:ff:2a:2e:77:cf:1d:19:1d:
88:e0:cf:fb:db:15:52:f1:27:40:0d:32:0d:16:72:
da:96:4b:92:aa:4a:51:8a:f7:6b:bf:02:4b:5a:a6:
fb:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:B3:74:2A:C7:84:7A:92:84:C0:79:14:58:19:19:B7:F7:73:20:39
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/0rN0KseEepKEwHkUWBkZt_dzIDk.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:e4:1f:2d:9d:14:f5:b0:29:55:24:fb:27:52:f6:0a:ea:c9:
72:d3:6a:12:56:72:02:1a:fc:90:95:54:65:77:df:c7:00:79:
91:86:db:17:eb:e7:6e:cc:d6:ae:ba:21:cb:97:ff:77:e6:0b:
9c:b1:ef:0c:5b:cb:0c:ce:20:bb:c3:3f:3e:78:76:c9:68:c5:
44:c0:8c:ca:67:76:1b:e9:65:71:cf:49:1d:f1:05:2c:40:bb:
66:3f:87:73:51:b8:58:c7:ef:75:71:b4:5e:36:c0:f4:f0:e3:
26:e5:b6:9b:d4:12:aa:9a:32:6d:a5:26:23:08:5f:80:17:b0:
7e:53:e5:34:a3:0d:a4:ac:a5:c6:35:93:3e:bc:0b:6f:de:95:
10:b2:f6:87:21:7f:e5:91:fe:88:09:2b:ce:1d:88:90:73:0c:
30:f6:3b:43:86:d0:a4:01:42:d4:bc:93:e3:ab:be:d5:e2:94:
53:05:fe:3e:2c:7a:57:0f:8f:0a:71:cb:25:ac:3b:c2:e6:8e:
19:ba:bc:d1:ee:51:71:25:7b:a8:ec:e1:62:ad:8a:7c:4b:84:
5a:d4:2d:38:ed:39:ae:b7:9a:95:a3:3d:3f:0b:f2:42:5b:e9:
39:6d:55:d2:2d:69:a2:2b:1c:c1:a0:49:39:5a:a0:a5:e0:04:
a2:c1:49:f3
-----BEGIN CERTIFICATE-----
MIIEojCCA4qgAwIBAgICCdQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzFk
MTRlYmIyNTVkYzA1OGQ0YmZhNWE1MWM5M2Y3M2Y4MzBhYjg4ZjAeFw0yNDExMTQx
NTU1MDJaFw0yNTA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKEQyQjM3NDJBQzc4NDdB
OTI4NEMwNzkxNDU4MTkxOUI3Rjc3MzIwMzkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCpPB3xqsn67UtZN1sPaxRgH0fy95NSAzCWKznR6dmcrzsZmkwx
pHdzClWpWfWpvGkDLz7cVewZ43SH743VNB2Wm+xmgVEqyMLtKsE+aakIjkixX5hO
NwAPNrnAlksPWQvqzURELC1CB8PE2vRWnQvXBszgWx0LBx4u0gbYFpzL5bPOAPQB
Ydw4Bnzf4bVtiHvYaZ2L4VRx45eNwoDB6nl+D4s1cDFxGmWRqt2TEaKhkaSa2+F4
IJJTx8IOUJVbPw8ct9CMgeHnc7t/2r+FJSJkzNvkUQOqdOz/Ki53zx0ZHYjgz/vb
FVLxJ0ANMg0WctqWS5KqSlGK92u/AktapvuhAgMBAAGjggG+MIIBujAdBgNVHQ4E
FgQU0rN0KseEepKEwHkUWBkZt/dzIDkwHwYDVR0jBBgwFoAUcdFOuyVdwFjUv6Wl
HJP3P4MKuI8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL2NobG9lLnNvYm9ybm9zdC5uZXQvcnBraS9SSVBFLW5scnNz
Zi9jZEZPdXlWZHdGalV2NldsSEpQM1A0TUt1STguY3JsMGQGCCsGAQUFBwEBBFgw
VjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9jZEZPdXlWZHdGalV2NldsSEpQM1A0TUt1STguY2VyMA4GA1UdDwEB
/wQEAwIHgDBoBggrBgEFBQcBCwRcMFowWAYIKwYBBQUHMAuGTHJzeW5jOi8vY2hs
b2Uuc29ib3Jub3N0Lm5ldC9ycGtpL1JJUEUtbmxyc3NmLzByTjBLc2VFZXBLRXdI
a1VXQmtadF9keklEay5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADC
aIEwDQYJKoZIhvcNAQELBQADggEBAE7kHy2dFPWwKVUk+ydS9grqyXLTahJWcgIa
/JCVVGV338cAeZGG2xfr527M1q66IcuX/3fmC5yx7wxbywzOILvDPz54dsloxUTA
jMpndhvpZXHPSR3xBSxAu2Y/h3NRuFjH73VxtF42wPTw4ybltpvUEqqaMm2lJiMI
X4AXsH5T5TSjDaSspcY1kz68C2/elRCy9ochf+WR/ogJK84diJBzDDD2O0OG0KQB
QtS8k+OrvtXilFMF/j4selcPjwpxyyWsO8Lmjhm6vNHuUXEle6js4WKtinxLhFrU
LTjtOa63mpWjPT8L8kJb6TltVdItaaIrHMGgSTlaoKXgBKLBSfM=
-----END CERTIFICATE-----
Generated at Thu Nov 14 21:30:04 2024 by rpki-client on console-fra.rpki-client.org