Route Origin Authorization

$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/79_Uw4K7qd3eYb_Y-azF8ic5Ccs.roa
File:                     79_Uw4K7qd3eYb_Y-azF8ic5Ccs.roa (raw, json)
Hash identifier:          w47czPaA5WQ0tMPqTZx5bTOvQ7RlBka/cWDJ9wSUV0M=
Subject key identifier:   EF:DF:D4:C3:82:BB:A9:DD:DE:61:BF:D8:F9:AC:C5:F2:27:39:09:CB
Certificate issuer:       /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial:       08FB
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access:      rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/79_Uw4K7qd3eYb_Y-azF8ic5Ccs.roa
Signing time:             Mon 21 Oct 2024 15:55:03 +0000
ROA not before:           Mon 21 Oct 2024 15:55:03 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     15562
IP address blocks:        194.104.129.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 21 Oct 2024 19:55:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2299 (0x8fb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
        Validity
            Not Before: Oct 21 15:55:03 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=EFDFD4C382BBA9DDDE61BFD8F9ACC5F2273909CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ac:82:be:56:e6:dd:39:9e:20:a8:e5:42:26:
                    be:f1:7c:2f:36:af:de:98:38:09:fb:5d:34:38:64:
                    73:f0:6f:d8:4a:67:42:1e:e1:21:fd:5e:be:2e:60:
                    1b:48:d8:9a:5d:74:7f:2f:f5:b8:9d:5a:90:b8:d3:
                    d3:1f:ba:fd:51:e2:97:5d:48:da:0a:d9:e2:0c:e7:
                    7a:0e:10:f0:21:38:f9:f9:be:92:69:57:34:a1:57:
                    8b:91:c3:cd:fd:e2:66:34:c1:8a:6c:5f:48:3e:52:
                    0a:a8:16:a9:35:e9:fe:85:fa:02:ba:f2:9c:52:5a:
                    51:94:f8:71:86:a0:8f:d6:db:f3:8c:b5:f4:84:03:
                    4e:14:3a:02:f8:90:c2:63:a4:98:a5:d9:79:98:d6:
                    ce:21:27:f9:b9:77:76:5e:a3:54:8c:ad:8a:e3:d0:
                    c0:31:3e:15:97:4c:8c:dc:1d:f5:ec:c1:8c:ca:d7:
                    a5:f4:a4:37:76:a3:2a:ca:7c:77:b3:86:67:9c:93:
                    46:c2:2d:7f:4f:4f:c0:4d:e6:df:69:28:a5:41:82:
                    34:f2:03:83:ea:f2:03:91:2b:b8:e9:dc:bd:c9:5b:
                    c1:1d:ec:29:be:05:8f:5c:8b:93:36:86:dd:da:91:
                    00:ab:fc:b3:c9:32:eb:2b:0c:e1:5b:81:9d:7e:30:
                    22:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:DF:D4:C3:82:BB:A9:DD:DE:61:BF:D8:F9:AC:C5:F2:27:39:09:CB
            X509v3 Authority Key Identifier:
                keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/79_Uw4K7qd3eYb_Y-azF8ic5Ccs.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.104.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:29:5d:c1:51:0c:36:a7:b3:5b:2e:98:9a:29:74:87:8e:ac:
         c6:8a:36:c2:d1:b9:da:e2:48:75:65:b1:3e:27:6f:9b:f1:59:
         67:02:ec:7f:a5:97:11:4c:2c:2b:a8:a7:c0:ee:53:17:28:08:
         fe:d9:f2:e1:42:23:02:5e:8f:68:50:e6:b4:01:67:8e:39:d6:
         f2:ba:bf:e2:f0:99:93:83:09:9e:b4:7f:ba:19:eb:8f:74:ae:
         e4:71:9d:01:fb:f9:bf:97:c7:02:41:93:fc:7e:e0:97:64:80:
         0f:d3:19:03:60:ab:9e:9b:4a:7f:58:01:62:c9:56:2f:a8:b9:
         44:9c:46:cc:3f:2c:69:17:6d:f3:f9:4c:b5:ff:d1:17:41:ce:
         e8:90:de:93:ae:95:16:1b:3d:03:d4:00:b3:ab:31:55:3e:50:
         fc:c7:13:47:9b:fc:da:7d:5d:e2:ce:c4:2f:b5:68:7f:3a:9c:
         2f:87:64:86:1a:56:ef:a5:18:9b:41:f3:13:98:65:e3:73:6b:
         50:43:c5:3b:4f:e7:12:61:3c:76:b7:c5:f3:31:18:a2:e6:d8:
         72:e1:42:db:f3:bb:a3:a6:b5:86:7d:dd:1f:de:8d:a5:f1:73:
         5d:99:2f:79:66:b5:49:72:b9:b1:01:5f:d1:b1:99:60:ca:4c:
         8b:52:86:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 21 22:10:01 2024 by rpki-client on console-fra.rpki-client.org