Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/1afqs-a3PU8kkJN3RsmYLp8eDvY.roa
File: 1afqs-a3PU8kkJN3RsmYLp8eDvY.roa (raw, json)
Hash identifier: 45B4LyXwwwyFmcNy06HVhIZDzZxJHw6zeBMWNeZXOFY=
Subject key identifier: D5:A7:EA:B3:E6:B7:3D:4F:24:90:93:77:46:C9:98:2E:9F:1E:0E:F6
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0992
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/1afqs-a3PU8kkJN3RsmYLp8eDvY.roa
Signing time: Thu 07 Nov 2024 07:55:03 +0000
ROA not before: Thu 07 Nov 2024 07:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 07 Nov 2024 11:55:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2450 (0x992)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Nov 7 07:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=D5A7EAB3E6B73D4F2490937746C9982E9F1E0EF6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e1:ab:0b:9e:8f:bf:46:e9:b8:5b:b6:7d:cd:
55:ec:00:3b:e5:76:45:41:12:75:ac:5a:ea:68:5a:
f0:0e:08:84:65:36:ff:52:3b:6f:50:b6:f8:9d:3a:
14:8f:51:58:46:de:5a:d3:0c:ce:c9:79:e9:69:3a:
ab:05:79:30:68:4f:66:d0:cc:dd:df:17:ba:ad:ff:
d4:2a:68:10:3c:e2:92:89:2c:b4:d5:a3:72:d7:33:
16:c2:1b:c5:68:cd:42:5c:60:1c:91:44:33:88:6d:
98:be:f9:87:08:07:59:5d:99:72:ca:d9:fd:4a:e5:
2a:53:ad:b3:6a:0c:05:69:e9:37:16:42:41:9b:0a:
33:fc:56:e1:43:1f:24:97:2b:8a:09:fc:02:45:3b:
49:df:78:e8:e0:7d:d2:14:0e:22:da:63:34:74:13:
80:de:68:75:50:66:7d:08:ce:85:b4:fe:df:f0:9c:
49:84:73:b6:a8:ca:d5:1b:73:0c:7a:de:a0:cf:6c:
38:10:2b:b9:1a:b7:ab:a5:b1:1e:8c:8b:0e:87:0b:
b4:9e:4e:28:2b:62:cd:30:b4:6a:71:95:18:69:78:
a4:e3:89:ca:2f:48:ac:f0:d2:5a:a4:55:29:e2:ed:
5e:67:d6:ab:c1:2b:f9:8d:62:7b:ef:f6:96:01:7d:
be:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:A7:EA:B3:E6:B7:3D:4F:24:90:93:77:46:C9:98:2E:9F:1E:0E:F6
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/1afqs-a3PU8kkJN3RsmYLp8eDvY.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:fe:4a:47:82:03:b2:e9:5f:a9:92:af:99:3f:05:93:6c:4e:
27:20:a2:3f:8b:08:0b:fd:f5:9b:92:84:67:19:a8:6b:3e:2f:
0d:82:e2:7d:0f:5f:3d:04:9b:8e:7c:60:74:b7:71:2e:42:05:
93:01:02:93:a9:de:6c:f4:7c:4b:61:cd:d5:fa:3a:a6:da:19:
fd:de:f6:bd:94:2a:7a:54:a3:75:56:77:c6:33:05:d9:e6:74:
51:ca:92:80:af:db:51:2e:6d:40:80:d7:42:50:7d:3d:d2:63:
49:b5:6b:d9:3d:7c:cc:73:e5:c8:87:db:69:d7:e8:19:d4:97:
c6:0b:36:3a:4c:2b:95:20:da:e7:db:c0:11:19:0c:71:36:94:
4e:8d:39:d4:dd:53:ca:5f:73:49:12:34:b4:fc:fb:da:c3:f4:
2a:94:3d:c4:6a:12:86:45:6f:5c:09:a5:a1:76:18:46:3b:5e:
a7:d6:18:05:d6:ac:4d:50:1b:6c:45:62:32:68:aa:4c:73:ad:
49:41:92:1c:b8:aa:0e:6a:6c:08:47:13:05:e3:1a:e6:f3:08:
01:27:9c:3f:55:3c:07:51:26:2a:80:2c:f6:49:11:18:98:fa:
06:69:87:41:8b:4e:da:a3:24:0c:b5:24:00:8e:83:28:19:a4:
c6:a7:15:a3
-----BEGIN CERTIFICATE-----
MIIEojCCA4qgAwIBAgICCZIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzFk
MTRlYmIyNTVkYzA1OGQ0YmZhNWE1MWM5M2Y3M2Y4MzBhYjg4ZjAeFw0yNDExMDcw
NzU1MDNaFw0yNTA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKEQ1QTdFQUIzRTZCNzNE
NEYyNDkwOTM3NzQ2Qzk5ODJFOUYxRTBFRjYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCo4asLno+/Rum4W7Z9zVXsADvldkVBEnWsWupoWvAOCIRlNv9S
O29QtvidOhSPUVhG3lrTDM7JeelpOqsFeTBoT2bQzN3fF7qt/9QqaBA84pKJLLTV
o3LXMxbCG8VozUJcYByRRDOIbZi++YcIB1ldmXLK2f1K5SpTrbNqDAVp6TcWQkGb
CjP8VuFDHySXK4oJ/AJFO0nfeOjgfdIUDiLaYzR0E4DeaHVQZn0IzoW0/t/wnEmE
c7aoytUbcwx63qDPbDgQK7kat6ulsR6Miw6HC7SeTigrYs0wtGpxlRhpeKTjicov
SKzw0lqkVSni7V5n1qvBK/mNYnvv9pYBfb7xAgMBAAGjggG+MIIBujAdBgNVHQ4E
FgQU1afqs+a3PU8kkJN3RsmYLp8eDvYwHwYDVR0jBBgwFoAUcdFOuyVdwFjUv6Wl
HJP3P4MKuI8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL2NobG9lLnNvYm9ybm9zdC5uZXQvcnBraS9SSVBFLW5scnNz
Zi9jZEZPdXlWZHdGalV2NldsSEpQM1A0TUt1STguY3JsMGQGCCsGAQUFBwEBBFgw
VjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9jZEZPdXlWZHdGalV2NldsSEpQM1A0TUt1STguY2VyMA4GA1UdDwEB
/wQEAwIHgDBoBggrBgEFBQcBCwRcMFowWAYIKwYBBQUHMAuGTHJzeW5jOi8vY2hs
b2Uuc29ib3Jub3N0Lm5ldC9ycGtpL1JJUEUtbmxyc3NmLzFhZnFzLWEzUFU4a2tK
TjNSc21ZTHA4ZUR2WS5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADC
aIEwDQYJKoZIhvcNAQELBQADggEBAF/+SkeCA7LpX6mSr5k/BZNsTicgoj+LCAv9
9ZuShGcZqGs+Lw2C4n0PXz0Em458YHS3cS5CBZMBApOp3mz0fEthzdX6OqbaGf3e
9r2UKnpUo3VWd8YzBdnmdFHKkoCv21EubUCA10JQfT3SY0m1a9k9fMxz5ciH22nX
6BnUl8YLNjpMK5Ug2ufbwBEZDHE2lE6NOdTdU8pfc0kSNLT8+9rD9CqUPcRqEoZF
b1wJpaF2GEY7XqfWGAXWrE1QG2xFYjJoqkxzrUlBkhy4qg5qbAhHEwXjGubzCAEn
nD9VPAdRJiqALPZJERiY+gZph0GLTtqjJAy1JACOgygZpManFaM=
-----END CERTIFICATE-----
Generated at Thu Nov 7 17:43:08 2024 by rpki-client on console-ams.rpki-client.org