Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/54JRi2_ueCYuMR-PPCaJYnc1kVo.roa
File: 54JRi2_ueCYuMR-PPCaJYnc1kVo.roa (raw, json)
Hash identifier: TlEiNtJVvX+jjfu6YWlvXlDWy4zXaMYhps4PESZzEnY=
Subject key identifier: E7:82:51:8B:6F:EE:78:26:2E:31:1F:8F:3C:26:89:62:77:35:91:5A
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0454
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/54JRi2_ueCYuMR-PPCaJYnc1kVo.roa
Signing time: Tue 11 Jun 2024 07:55:03 +0000
ROA not before: Tue 11 Jun 2024 07:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 11 Jun 2024 11:55:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1108 (0x454)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Jun 11 07:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=E782518B6FEE78262E311F8F3C2689627735915A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:73:7d:e3:66:10:c1:f3:b1:47:98:37:5f:76:
10:6f:9e:f2:18:75:72:36:31:78:51:b5:07:12:f3:
94:44:fd:b4:90:21:5d:bc:35:4e:f7:2d:ea:b5:9f:
87:1b:38:1a:a2:27:45:14:33:b2:ba:bd:76:a4:5f:
dc:40:1d:91:de:4d:c5:1e:51:46:98:94:39:5f:4f:
d6:b8:e9:fc:37:15:fc:fd:bd:30:c7:1a:0a:42:7c:
ec:af:93:ed:96:2b:d0:1a:f2:9b:9b:91:65:80:39:
48:9d:80:2c:62:bc:8d:c5:95:ab:27:8e:07:19:96:
77:e1:9e:26:12:e8:21:89:92:a5:fe:9e:78:2e:78:
39:47:fd:d9:e7:40:68:7e:07:c9:fc:9f:69:2f:bd:
a5:b3:41:e4:71:36:6e:da:57:33:e7:d7:a8:8b:6f:
68:4c:56:bb:2e:a9:08:3f:c3:bc:d1:34:d6:e8:cd:
ac:29:56:bf:9e:fd:25:02:00:80:23:8e:06:78:bf:
74:16:ae:f0:b7:3c:14:9b:0f:f7:59:98:c6:b2:9d:
06:8e:fd:de:77:f9:45:61:39:1a:01:c0:1a:ab:48:
bb:f3:f3:be:7c:30:e5:17:66:a2:81:97:63:a0:7f:
50:73:42:2e:72:19:bf:fa:d8:b4:61:14:73:dd:0d:
01:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:82:51:8B:6F:EE:78:26:2E:31:1F:8F:3C:26:89:62:77:35:91:5A
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/54JRi2_ueCYuMR-PPCaJYnc1kVo.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
69:97:67:b4:d1:e5:6a:9e:95:0f:93:ac:62:40:3b:90:c9:d5:
f1:b9:75:92:ad:fb:af:ba:81:e9:07:7f:d8:f6:77:c9:36:1c:
90:14:cc:47:96:5e:be:3b:50:a2:55:3a:84:cc:1e:a4:da:d9:
58:0a:5b:a2:32:e7:b2:f7:5f:78:ce:b5:3b:8f:60:bb:0a:0f:
b3:43:1a:f1:08:b9:82:bd:d6:13:b4:b9:18:64:d2:92:ad:56:
a2:4b:f4:d4:7c:07:97:2c:ee:77:10:5c:bc:23:e5:fe:2c:d3:
63:59:32:be:31:07:39:a3:2a:cc:bd:f0:31:05:84:8d:b4:1e:
40:30:e3:5e:6d:ec:ed:48:96:13:3c:c3:e6:0c:e4:17:eb:d6:
5b:f6:74:03:60:9a:4b:71:ba:7d:13:56:6a:e9:e9:94:2e:f3:
88:04:62:c6:d4:f3:94:15:a0:a9:a0:55:94:60:8e:74:9c:f9:
96:c3:89:9b:ed:ba:95:fa:29:65:ce:29:2d:fa:61:6d:e6:d9:
9d:a2:4e:52:ea:af:53:36:7b:0a:9f:7d:f5:95:aa:10:1a:0d:
5d:58:b9:b7:a9:e5:f4:ae:78:f1:1b:57:41:17:fc:05:f2:c9:
81:11:d8:ec:26:a0:73:79:0f:25:a9:9e:de:2b:7b:96:96:9e:
ed:99:94:c2
-----BEGIN CERTIFICATE-----
MIIEojCCA4qgAwIBAgICBFQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzFk
MTRlYmIyNTVkYzA1OGQ0YmZhNWE1MWM5M2Y3M2Y4MzBhYjg4ZjAeFw0yNDA2MTEw
NzU1MDNaFw0yNTA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKEU3ODI1MThCNkZFRTc4
MjYyRTMxMUY4RjNDMjY4OTYyNzczNTkxNUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDNc33jZhDB87FHmDdfdhBvnvIYdXI2MXhRtQcS85RE/bSQIV28
NU73Leq1n4cbOBqiJ0UUM7K6vXakX9xAHZHeTcUeUUaYlDlfT9a46fw3Ffz9vTDH
GgpCfOyvk+2WK9Aa8pubkWWAOUidgCxivI3FlasnjgcZlnfhniYS6CGJkqX+nngu
eDlH/dnnQGh+B8n8n2kvvaWzQeRxNm7aVzPn16iLb2hMVrsuqQg/w7zRNNbozawp
Vr+e/SUCAIAjjgZ4v3QWrvC3PBSbD/dZmMaynQaO/d53+UVhORoBwBqrSLvz8758
MOUXZqKBl2Ogf1BzQi5yGb/62LRhFHPdDQGVAgMBAAGjggG+MIIBujAdBgNVHQ4E
FgQU54JRi2/ueCYuMR+PPCaJYnc1kVowHwYDVR0jBBgwFoAUcdFOuyVdwFjUv6Wl
HJP3P4MKuI8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL2NobG9lLnNvYm9ybm9zdC5uZXQvcnBraS9SSVBFLW5scnNz
Zi9jZEZPdXlWZHdGalV2NldsSEpQM1A0TUt1STguY3JsMGQGCCsGAQUFBwEBBFgw
VjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9jZEZPdXlWZHdGalV2NldsSEpQM1A0TUt1STguY2VyMA4GA1UdDwEB
/wQEAwIHgDBoBggrBgEFBQcBCwRcMFowWAYIKwYBBQUHMAuGTHJzeW5jOi8vY2hs
b2Uuc29ib3Jub3N0Lm5ldC9ycGtpL1JJUEUtbmxyc3NmLzU0SlJpMl91ZUNZdU1S
LVBQQ2FKWW5jMWtWby5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADC
aIEwDQYJKoZIhvcNAQELBQADggEBAGmXZ7TR5WqelQ+TrGJAO5DJ1fG5dZKt+6+6
gekHf9j2d8k2HJAUzEeWXr47UKJVOoTMHqTa2VgKW6Iy57L3X3jOtTuPYLsKD7ND
GvEIuYK91hO0uRhk0pKtVqJL9NR8B5cs7ncQXLwj5f4s02NZMr4xBzmjKsy98DEF
hI20HkAw415t7O1IlhM8w+YM5Bfr1lv2dANgmktxun0TVmrp6ZQu84gEYsbU85QV
oKmgVZRgjnSc+ZbDiZvtupX6KWXOKS36YW3m2Z2iTlLqr1M2ewqfffWVqhAaDV1Y
ubep5fSuePEbV0EX/AXyyYER2OwmoHN5DyWpnt4re5aWnu2ZlMI=
-----END CERTIFICATE-----
Generated at Tue Jun 11 16:28:22 2024 by rpki-client on console-ams.rpki-client.org