Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/73_JC7qjEpwr7XMaW_1XrFwoiZw.roa
File: 73_JC7qjEpwr7XMaW_1XrFwoiZw.roa (raw, json)
Hash identifier: TySE3Q1EEW45HmB/iIiAYASPysIMClPGIODkIl/QnMc=
Subject key identifier: EF:7F:C9:0B:BA:A3:12:9C:2B:ED:73:1A:5B:FD:57:AC:5C:28:89:9C
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0367
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/73_JC7qjEpwr7XMaW_1XrFwoiZw.roa
Signing time: Wed 15 May 2024 23:55:04 +0000
ROA not before: Wed 15 May 2024 23:55:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 16 May 2024 03:55:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 871 (0x367)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: May 15 23:55:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=EF7FC90BBAA3129C2BED731A5BFD57AC5C28899C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c8:78:b9:a9:36:97:2e:16:1b:df:f4:f6:e6:
40:24:32:2a:18:52:74:da:93:55:ad:f4:39:62:6a:
e0:89:0b:d1:27:21:9e:8b:6d:71:ce:5b:7e:01:6d:
14:d4:01:5c:34:9b:3f:35:a3:ce:2a:5a:c6:cc:3c:
f9:7c:fd:31:bc:5a:10:ae:e0:1b:4d:a7:98:83:af:
b0:6a:0b:3f:15:d2:2f:45:c3:ff:54:19:71:b8:79:
00:7e:10:0d:aa:d0:b4:51:f9:e3:bd:25:94:35:09:
a6:b6:d6:8e:aa:75:b4:92:33:23:70:14:01:86:76:
31:75:97:60:eb:01:8f:37:04:b6:78:4f:0a:d7:eb:
91:fd:54:5a:aa:ee:20:e7:67:ef:a0:cb:2e:a5:81:
28:ab:61:9c:bd:9d:89:6a:b7:b3:51:07:d8:cc:ef:
07:06:e9:2f:48:39:57:5c:b7:7e:32:ec:13:97:7d:
0c:1e:79:6a:0b:f9:35:14:3a:c7:fc:69:e2:99:11:
b3:d4:7a:0b:c3:21:64:21:75:fe:c1:af:22:ed:62:
87:fb:13:e7:f8:cc:5c:b5:eb:13:40:1d:54:3e:55:
dc:82:4f:ab:79:69:9c:f4:e1:92:39:b8:5d:30:bc:
f4:e1:95:96:86:91:24:6a:f2:30:0a:c1:6b:a2:88:
7e:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:7F:C9:0B:BA:A3:12:9C:2B:ED:73:1A:5B:FD:57:AC:5C:28:89:9C
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/73_JC7qjEpwr7XMaW_1XrFwoiZw.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
08:23:23:ad:0d:27:f1:1f:2a:39:b9:b3:31:fa:05:a3:90:cb:
cd:c0:0b:fd:cb:4e:2f:55:56:b6:f2:45:33:b8:03:ac:b3:5e:
3d:74:bf:86:aa:62:1b:69:0e:75:28:e1:c6:78:e9:b6:9c:c4:
4f:35:ba:85:27:2b:f8:85:4b:59:df:88:6d:58:c9:5a:f3:3b:
92:70:11:6f:9b:56:96:c7:0c:1e:0a:16:3c:f5:73:7c:ee:05:
46:bd:c3:cc:cc:d2:1b:eb:a7:36:c8:ea:11:58:63:51:ee:c8:
05:49:80:48:fa:6b:9f:6d:94:32:04:b0:1a:cd:8e:c6:3a:86:
1f:33:ed:f4:09:22:63:9b:18:1f:ce:bc:f5:cd:cb:bd:8c:c1:
f9:97:91:21:12:b3:f7:8a:e0:1d:e4:11:2a:58:0a:a7:42:94:
e0:79:a2:fb:a9:a0:22:da:e7:1a:59:ea:59:3b:9a:9c:62:7a:
77:01:74:83:77:f4:52:50:c4:02:37:5a:c0:46:1d:15:2d:84:
0b:27:66:ea:93:7b:45:4a:b9:e8:45:94:a7:5f:39:8a:88:d3:
72:be:7e:d1:b6:65:fb:04:b1:21:17:9c:9c:97:76:27:20:ce:
dc:26:3b:41:63:ac:0a:b2:b5:0c:d5:f8:e1:73:00:13:c6:f3:
03:3e:27:ad
-----BEGIN CERTIFICATE-----
MIIEojCCA4qgAwIBAgICA2cwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzFk
MTRlYmIyNTVkYzA1OGQ0YmZhNWE1MWM5M2Y3M2Y4MzBhYjg4ZjAeFw0yNDA1MTUy
MzU1MDRaFw0yNTA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKEVGN0ZDOTBCQkFBMzEy
OUMyQkVENzMxQTVCRkQ1N0FDNUMyODg5OUMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC7yHi5qTaXLhYb3/T25kAkMioYUnTak1Wt9DliauCJC9EnIZ6L
bXHOW34BbRTUAVw0mz81o84qWsbMPPl8/TG8WhCu4BtNp5iDr7BqCz8V0i9Fw/9U
GXG4eQB+EA2q0LRR+eO9JZQ1Caa21o6qdbSSMyNwFAGGdjF1l2DrAY83BLZ4TwrX
65H9VFqq7iDnZ++gyy6lgSirYZy9nYlqt7NRB9jM7wcG6S9IOVdct34y7BOXfQwe
eWoL+TUUOsf8aeKZEbPUegvDIWQhdf7BryLtYof7E+f4zFy16xNAHVQ+VdyCT6t5
aZz04ZI5uF0wvPThlZaGkSRq8jAKwWuiiH5XAgMBAAGjggG+MIIBujAdBgNVHQ4E
FgQU73/JC7qjEpwr7XMaW/1XrFwoiZwwHwYDVR0jBBgwFoAUcdFOuyVdwFjUv6Wl
HJP3P4MKuI8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL2NobG9lLnNvYm9ybm9zdC5uZXQvcnBraS9SSVBFLW5scnNz
Zi9jZEZPdXlWZHdGalV2NldsSEpQM1A0TUt1STguY3JsMGQGCCsGAQUFBwEBBFgw
VjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9jZEZPdXlWZHdGalV2NldsSEpQM1A0TUt1STguY2VyMA4GA1UdDwEB
/wQEAwIHgDBoBggrBgEFBQcBCwRcMFowWAYIKwYBBQUHMAuGTHJzeW5jOi8vY2hs
b2Uuc29ib3Jub3N0Lm5ldC9ycGtpL1JJUEUtbmxyc3NmLzczX0pDN3FqRXB3cjdY
TWFXXzFYckZ3b2lady5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADC
aIEwDQYJKoZIhvcNAQELBQADggEBAAgjI60NJ/EfKjm5szH6BaOQy83AC/3LTi9V
VrbyRTO4A6yzXj10v4aqYhtpDnUo4cZ46bacxE81uoUnK/iFS1nfiG1YyVrzO5Jw
EW+bVpbHDB4KFjz1c3zuBUa9w8zM0hvrpzbI6hFYY1HuyAVJgEj6a59tlDIEsBrN
jsY6hh8z7fQJImObGB/OvPXNy72MwfmXkSESs/eK4B3kESpYCqdClOB5ovupoCLa
5xpZ6lk7mpxiencBdIN39FJQxAI3WsBGHRUthAsnZuqTe0VKuehFlKdfOYqI03K+
ftG2ZfsEsSEXnJyXdicgztwmO0FjrAqytQzV+OFzABPG8wM+J60=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:54 2024 by rpki-client on console-fra.rpki-client.org