Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/3aK_-TL-byUuBUCk-wtu4KDhgik.roa
File: 3aK_-TL-byUuBUCk-wtu4KDhgik.roa (raw, json)
Hash identifier: i/44PnSEbtNKSsZ0lTRwbgVRMXP/jQtefUYVe+bV7Yg=
Subject key identifier: DD:A2:BF:F9:32:FE:6F:25:2E:05:40:A4:FB:0B:6E:E0:A0:E1:82:29
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 04D5
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/3aK_-TL-byUuBUCk-wtu4KDhgik.roa
Signing time: Tue 25 Jun 2024 15:55:03 +0000
ROA not before: Tue 25 Jun 2024 15:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 25 Jun 2024 19:55:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1237 (0x4d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Jun 25 15:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=DDA2BFF932FE6F252E0540A4FB0B6EE0A0E18229
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:41:52:b9:2f:ce:6b:89:52:97:c0:f1:40:2d:
08:be:9d:13:2e:33:67:d7:3c:b3:6a:b2:0b:a4:c9:
cf:aa:b7:60:95:9a:90:21:6c:d2:3c:34:e0:49:aa:
ce:3a:5b:f5:1b:a8:7f:60:c8:07:55:ce:32:18:fd:
37:8f:21:8a:17:75:b7:8e:c7:1a:a3:c9:3c:05:85:
5b:00:2e:9b:be:d5:8a:9e:e0:67:df:ae:d6:62:97:
86:4b:f4:c8:82:0d:4d:07:d1:0a:4d:84:3a:fd:3d:
2a:a5:1b:3b:69:de:7a:d4:e5:5f:2d:c9:7e:28:1d:
7c:26:69:46:e4:da:7a:57:4d:4d:dc:b5:b1:57:aa:
ab:87:b2:ee:52:b6:0c:33:cf:b4:14:05:ce:55:95:
15:32:4d:a2:b8:e5:b1:9f:79:10:c4:1c:2b:7d:52:
40:46:ab:16:6d:72:9c:85:ca:84:98:5a:9f:a3:70:
12:b4:f7:3c:71:c0:cf:fe:94:a9:86:6d:2b:a1:f7:
e6:f9:68:30:c5:37:f1:0f:13:88:ab:d0:b3:bd:88:
c2:77:96:3f:07:fc:5d:b3:b9:23:16:6b:27:e0:10:
93:f1:08:74:b4:c4:d7:5f:db:ba:30:f8:0d:1b:96:
60:8a:28:a0:c1:a1:cb:5b:cd:38:a2:67:41:50:7a:
62:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:A2:BF:F9:32:FE:6F:25:2E:05:40:A4:FB:0B:6E:E0:A0:E1:82:29
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/3aK_-TL-byUuBUCk-wtu4KDhgik.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
65:05:54:82:9a:22:98:cc:ff:ba:8d:e3:57:b2:ab:8a:82:fe:
2d:3b:3c:4d:fc:e8:77:03:94:b1:bd:65:60:51:f4:6c:ad:c7:
0f:c5:5a:74:9c:2c:aa:65:54:86:5f:7b:db:16:62:0b:42:8d:
ae:b9:2c:9e:fe:43:90:01:ea:e1:a4:f7:b3:43:7c:89:14:bc:
d8:c8:23:0f:66:cc:01:0d:b8:b6:3c:1e:cb:ee:be:84:cb:4f:
3a:85:09:20:f7:e6:bc:83:a8:dc:08:b7:f7:e0:98:94:42:1e:
40:7f:3a:26:9a:f2:3e:08:03:26:07:6d:00:58:be:1b:80:96:
c0:d9:51:39:38:bd:10:21:3d:ee:ed:78:70:5d:ec:e4:48:1c:
82:3e:b1:2b:97:45:03:80:cc:db:f9:77:70:2a:bc:38:2b:d5:
31:18:ac:2f:28:f1:b9:5a:e6:f7:37:9e:b4:b2:57:f8:59:b7:
ab:8c:4b:a9:23:2d:8b:e2:5b:8e:ed:8b:40:28:f7:6b:c4:30:
86:7e:9b:8a:d8:80:99:5a:d3:96:38:f6:b9:05:bf:26:15:5d:
b9:65:f6:22:ed:a7:81:10:c5:d2:02:db:27:e9:f5:6b:f4:99:
94:f9:9f:e1:2b:e6:9c:c3:b8:1a:4c:6d:cd:d4:c0:96:ef:d6:
6d:36:e9:63
-----BEGIN CERTIFICATE-----
MIIEojCCA4qgAwIBAgICBNUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzFk
MTRlYmIyNTVkYzA1OGQ0YmZhNWE1MWM5M2Y3M2Y4MzBhYjg4ZjAeFw0yNDA2MjUx
NTU1MDNaFw0yNTA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKEREQTJCRkY5MzJGRTZG
MjUyRTA1NDBBNEZCMEI2RUUwQTBFMTgyMjkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDEQVK5L85riVKXwPFALQi+nRMuM2fXPLNqsgukyc+qt2CVmpAh
bNI8NOBJqs46W/UbqH9gyAdVzjIY/TePIYoXdbeOxxqjyTwFhVsALpu+1Yqe4Gff
rtZil4ZL9MiCDU0H0QpNhDr9PSqlGztp3nrU5V8tyX4oHXwmaUbk2npXTU3ctbFX
qquHsu5Stgwzz7QUBc5VlRUyTaK45bGfeRDEHCt9UkBGqxZtcpyFyoSYWp+jcBK0
9zxxwM/+lKmGbSuh9+b5aDDFN/EPE4ir0LO9iMJ3lj8H/F2zuSMWayfgEJPxCHS0
xNdf27ow+A0blmCKKKDBoctbzTiiZ0FQemLlAgMBAAGjggG+MIIBujAdBgNVHQ4E
FgQU3aK/+TL+byUuBUCk+wtu4KDhgikwHwYDVR0jBBgwFoAUcdFOuyVdwFjUv6Wl
HJP3P4MKuI8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL2NobG9lLnNvYm9ybm9zdC5uZXQvcnBraS9SSVBFLW5scnNz
Zi9jZEZPdXlWZHdGalV2NldsSEpQM1A0TUt1STguY3JsMGQGCCsGAQUFBwEBBFgw
VjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9jZEZPdXlWZHdGalV2NldsSEpQM1A0TUt1STguY2VyMA4GA1UdDwEB
/wQEAwIHgDBoBggrBgEFBQcBCwRcMFowWAYIKwYBBQUHMAuGTHJzeW5jOi8vY2hs
b2Uuc29ib3Jub3N0Lm5ldC9ycGtpL1JJUEUtbmxyc3NmLzNhS18tVEwtYnlVdUJV
Q2std3R1NEtEaGdpay5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADC
aIEwDQYJKoZIhvcNAQELBQADggEBAGUFVIKaIpjM/7qN41eyq4qC/i07PE386HcD
lLG9ZWBR9Gytxw/FWnScLKplVIZfe9sWYgtCja65LJ7+Q5AB6uGk97NDfIkUvNjI
Iw9mzAENuLY8HsvuvoTLTzqFCSD35ryDqNwIt/fgmJRCHkB/Oiaa8j4IAyYHbQBY
vhuAlsDZUTk4vRAhPe7teHBd7ORIHII+sSuXRQOAzNv5d3AqvDgr1TEYrC8o8bla
5vc3nrSyV/hZt6uMS6kjLYviW47ti0Ao92vEMIZ+m4rYgJla05Y49rkFvyYVXbll
9iLtp4EQxdIC2yfp9Wv0mZT5n+Er5pzDuBpMbc3UwJbv1m026WM=
-----END CERTIFICATE-----
Generated at Wed Jun 26 01:38:26 2024 by rpki-client on console-fra.rpki-client.org