Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/7ge7LPkdN32w5V3if4MtXr-Q8Hk.roa
File: 7ge7LPkdN32w5V3if4MtXr-Q8Hk.roa (raw, json)
Hash identifier: 89C/uN0H+VhH9rX6oOUEJukJOhrbNK3Sxwk8wcFz4gk=
Subject key identifier: EE:07:BB:2C:F9:1D:37:7D:B0:E5:5D:E2:7F:83:2D:5E:BF:90:F0:79
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 09C5
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/7ge7LPkdN32w5V3if4MtXr-Q8Hk.roa
Signing time: Tue 12 Nov 2024 23:55:04 +0000
ROA not before: Tue 12 Nov 2024 23:55:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 13 Nov 2024 03:55:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2501 (0x9c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Nov 12 23:55:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=EE07BB2CF91D377DB0E55DE27F832D5EBF90F079
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e9:de:7e:fe:95:1e:00:68:a8:4a:38:45:33:
67:07:1a:87:39:9d:0e:08:b0:c7:fd:12:2b:aa:f0:
6e:98:0e:f1:c2:a9:2d:53:4e:b7:ee:b8:25:27:ef:
21:da:a4:f8:7c:7a:3b:82:3d:cc:cd:f8:78:08:5b:
64:45:aa:dd:fb:d6:25:46:e3:da:d4:61:3c:33:66:
f7:45:e0:50:d3:b9:b4:36:2a:25:1e:f8:c4:e5:72:
e5:33:bf:ce:95:45:51:77:a4:7e:73:46:63:d5:0f:
88:10:9a:ca:0c:a9:52:f8:81:df:9e:9e:37:7d:c5:
2f:21:b4:b1:05:60:8c:08:98:29:68:99:65:39:5e:
37:2d:f3:1b:4c:20:4f:75:1c:6c:4a:c3:a7:c1:a7:
7b:18:e2:6e:a2:62:55:86:ac:03:49:7e:08:51:63:
07:90:5b:db:c8:19:6c:7d:f4:77:db:e4:98:0d:1d:
7d:40:ad:61:c9:a1:e2:be:0a:c6:d9:86:c4:57:1b:
4c:bf:b7:ce:4a:4e:40:83:89:1e:b2:ef:68:cf:83:
aa:1e:74:29:e7:8e:18:3d:4b:d4:0a:e2:bd:b3:d9:
c0:d2:4d:24:55:fb:7b:63:1e:83:90:e9:3e:75:8f:
75:3e:d9:24:48:af:49:fb:fa:d9:be:e9:bf:c4:ed:
2c:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:07:BB:2C:F9:1D:37:7D:B0:E5:5D:E2:7F:83:2D:5E:BF:90:F0:79
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/7ge7LPkdN32w5V3if4MtXr-Q8Hk.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:6b:43:b8:76:c3:69:06:d1:7b:2c:f8:73:34:75:f0:c1:53:
15:5e:f5:5a:53:06:6a:aa:05:4d:8b:a3:d6:b6:68:fe:2e:24:
4a:53:87:03:33:a7:22:95:bd:8c:a9:06:53:c8:7c:b6:5d:cd:
f4:fe:98:94:9d:a5:a9:03:2e:63:51:ad:f3:9f:b9:dd:78:3a:
9b:dc:17:e7:90:8a:93:a8:3e:73:11:58:ac:84:e8:88:d0:4d:
83:ab:36:fb:2e:d8:c2:b1:6a:87:91:ae:8a:28:63:33:f5:4f:
3b:5e:b9:ad:70:31:71:5e:78:b8:35:bc:0d:85:58:9e:11:ad:
b7:15:2c:40:ad:7c:d9:03:6e:4d:61:c8:00:40:0a:27:27:26:
0d:fc:ca:05:b3:f7:ea:19:c3:8d:fc:69:e6:ba:75:6c:1d:3f:
d4:14:61:e8:5e:89:b9:93:9f:96:f7:9e:98:c0:70:5c:64:c5:
87:ae:0b:f1:73:c0:d6:9f:be:fc:42:56:58:b1:f7:6b:f9:cf:
83:00:83:2e:3b:a1:2f:57:b3:da:75:96:8d:44:db:1e:55:7a:
21:82:c5:64:b6:93:50:85:15:ae:c5:b5:35:03:1c:4d:5f:3f:
44:5c:c3:a1:5d:7a:78:d2:c7:87:9d:91:89:9a:96:81:8d:47:
48:ce:8c:c6
-----BEGIN CERTIFICATE-----
MIIEojCCA4qgAwIBAgICCcUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzFk
MTRlYmIyNTVkYzA1OGQ0YmZhNWE1MWM5M2Y3M2Y4MzBhYjg4ZjAeFw0yNDExMTIy
MzU1MDRaFw0yNTA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKEVFMDdCQjJDRjkxRDM3
N0RCMEU1NURFMjdGODMyRDVFQkY5MEYwNzkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC46d5+/pUeAGioSjhFM2cHGoc5nQ4IsMf9Eiuq8G6YDvHCqS1T
TrfuuCUn7yHapPh8ejuCPczN+HgIW2RFqt371iVG49rUYTwzZvdF4FDTubQ2KiUe
+MTlcuUzv86VRVF3pH5zRmPVD4gQmsoMqVL4gd+enjd9xS8htLEFYIwImClomWU5
Xjct8xtMIE91HGxKw6fBp3sY4m6iYlWGrANJfghRYweQW9vIGWx99Hfb5JgNHX1A
rWHJoeK+CsbZhsRXG0y/t85KTkCDiR6y72jPg6oedCnnjhg9S9QK4r2z2cDSTSRV
+3tjHoOQ6T51j3U+2SRIr0n7+tm+6b/E7SzzAgMBAAGjggG+MIIBujAdBgNVHQ4E
FgQU7ge7LPkdN32w5V3if4MtXr+Q8HkwHwYDVR0jBBgwFoAUcdFOuyVdwFjUv6Wl
HJP3P4MKuI8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL2NobG9lLnNvYm9ybm9zdC5uZXQvcnBraS9SSVBFLW5scnNz
Zi9jZEZPdXlWZHdGalV2NldsSEpQM1A0TUt1STguY3JsMGQGCCsGAQUFBwEBBFgw
VjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9jZEZPdXlWZHdGalV2NldsSEpQM1A0TUt1STguY2VyMA4GA1UdDwEB
/wQEAwIHgDBoBggrBgEFBQcBCwRcMFowWAYIKwYBBQUHMAuGTHJzeW5jOi8vY2hs
b2Uuc29ib3Jub3N0Lm5ldC9ycGtpL1JJUEUtbmxyc3NmLzdnZTdMUGtkTjMydzVW
M2lmNE10WHItUThIay5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADC
aIEwDQYJKoZIhvcNAQELBQADggEBAA5rQ7h2w2kG0Xss+HM0dfDBUxVe9VpTBmqq
BU2Lo9a2aP4uJEpThwMzpyKVvYypBlPIfLZdzfT+mJSdpakDLmNRrfOfud14Opvc
F+eQipOoPnMRWKyE6IjQTYOrNvsu2MKxaoeRroooYzP1Tzteua1wMXFeeLg1vA2F
WJ4RrbcVLECtfNkDbk1hyABACicnJg38ygWz9+oZw438aea6dWwdP9QUYeheibmT
n5b3npjAcFxkxYeuC/FzwNafvvxCVlix92v5z4MAgy47oS9Xs9p1lo1E2x5VeiGC
xWS2k1CFFa7FtTUDHE1fP0Rcw6FdenjSx4edkYmaloGNR0jOjMY=
-----END CERTIFICATE-----
Generated at Wed Nov 13 05:56:10 2024 by rpki-client on console-fra.rpki-client.org