Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/8-t-F1Xc4cMtTLvQ0Vv1UO4hK8g.roa
File: 8-t-F1Xc4cMtTLvQ0Vv1UO4hK8g.roa (raw, json)
Hash identifier: mpAuKnhChyobfh5AupXFCjDqDgI++42M+OJ/yjiXtz0=
Subject key identifier: F3:EB:7E:17:55:DC:E1:C3:2D:4C:BB:D0:D1:5B:F5:50:EE:21:2B:C8
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 043F
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/8-t-F1Xc4cMtTLvQ0Vv1UO4hK8g.roa
Signing time: Sat 08 Jun 2024 23:55:03 +0000
ROA not before: Sat 08 Jun 2024 23:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 09 Jun 2024 03:55:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1087 (0x43f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Jun 8 23:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=F3EB7E1755DCE1C32D4CBBD0D15BF550EE212BC8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:da:8e:73:a3:b5:26:2e:9d:8c:14:31:f9:fb:
35:14:a7:fd:42:53:dc:03:9f:e9:76:08:5d:55:91:
70:47:4c:c7:70:12:d2:4e:38:ae:f1:c9:ab:50:f6:
bb:3c:1a:24:4b:93:63:c4:a5:ac:ab:3a:a5:e9:1e:
c0:dc:83:31:6c:8b:d5:1d:21:8f:12:ff:e1:7c:90:
70:8c:65:a9:71:e6:05:8c:2c:f1:6d:ce:0f:94:4e:
62:75:b8:cf:f7:c4:66:cf:f6:ce:0a:23:b5:1f:3b:
17:77:a9:82:ff:fa:7b:c0:ba:b0:aa:a9:f9:60:03:
2c:4f:ae:bb:42:e0:25:65:72:0c:b5:07:a8:4e:bb:
ea:e2:0e:03:aa:4a:81:e8:1a:c6:08:c7:73:87:bc:
e8:0c:ab:d0:f4:a5:df:33:0e:d4:8c:ae:8b:3a:8e:
cf:4c:45:63:b8:5d:78:95:e9:ef:a5:2f:75:42:48:
c3:3a:86:9a:ad:bc:9b:33:38:6f:31:c0:bb:25:57:
83:f8:d8:76:ca:5f:ed:3e:c1:70:6b:84:e0:26:5d:
32:1f:27:ab:c8:88:83:c7:11:3f:5d:72:dc:c8:4e:
8f:5e:d9:54:d0:d4:57:60:c0:26:52:46:17:c0:b8:
03:00:3a:16:20:8a:07:c0:4d:f1:0c:ce:2c:cf:a0:
0c:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:EB:7E:17:55:DC:E1:C3:2D:4C:BB:D0:D1:5B:F5:50:EE:21:2B:C8
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/8-t-F1Xc4cMtTLvQ0Vv1UO4hK8g.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
73:cc:23:ea:c8:b8:2a:90:aa:d2:ff:54:68:45:a9:57:e0:dd:
77:31:79:42:52:f1:98:13:e4:ef:b7:38:0f:1e:3f:f8:c6:66:
af:f5:09:27:1c:48:09:67:4d:e5:f5:1e:3f:36:73:ee:18:c7:
2c:62:3f:14:5e:69:7f:17:ca:71:54:c8:63:45:ab:79:7d:1d:
59:01:9c:e1:99:de:d7:db:e3:74:0b:27:33:d3:61:b9:13:36:
1c:d2:95:0a:ec:9b:29:eb:b5:98:6a:17:22:ce:02:82:9f:03:
56:25:00:49:23:ca:aa:9b:9c:77:51:4f:81:c3:33:4d:ff:a6:
7f:6c:a9:e6:d5:61:f5:e5:81:d2:2c:2b:bb:37:41:32:c4:15:
f8:70:15:8e:cd:34:d4:84:94:e7:61:ac:4f:65:6a:3d:b3:9d:
e3:0f:6a:d9:3c:61:45:c0:2f:7a:27:3b:02:fb:99:b4:77:db:
f5:52:e0:77:47:1f:80:df:f5:83:44:fd:19:0b:32:bf:5e:f8:
9f:15:52:b4:a1:c7:75:5d:f8:54:97:d3:41:6d:5f:35:be:64:
9a:4b:88:fe:9e:9f:16:f5:5b:93:fc:1e:9d:f9:e6:23:05:86:
b5:54:42:10:b3:d5:02:a4:30:10:54:37:7b:d7:53:d8:3a:8e:
79:00:c8:db
-----BEGIN CERTIFICATE-----
MIIEojCCA4qgAwIBAgICBD8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzFk
MTRlYmIyNTVkYzA1OGQ0YmZhNWE1MWM5M2Y3M2Y4MzBhYjg4ZjAeFw0yNDA2MDgy
MzU1MDNaFw0yNTA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKEYzRUI3RTE3NTVEQ0Ux
QzMyRDRDQkJEMEQxNUJGNTUwRUUyMTJCQzgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCr2o5zo7UmLp2MFDH5+zUUp/1CU9wDn+l2CF1VkXBHTMdwEtJO
OK7xyatQ9rs8GiRLk2PEpayrOqXpHsDcgzFsi9UdIY8S/+F8kHCMZalx5gWMLPFt
zg+UTmJ1uM/3xGbP9s4KI7UfOxd3qYL/+nvAurCqqflgAyxPrrtC4CVlcgy1B6hO
u+riDgOqSoHoGsYIx3OHvOgMq9D0pd8zDtSMros6js9MRWO4XXiV6e+lL3VCSMM6
hpqtvJszOG8xwLslV4P42HbKX+0+wXBrhOAmXTIfJ6vIiIPHET9dctzITo9e2VTQ
1FdgwCZSRhfAuAMAOhYgigfATfEMzizPoAznAgMBAAGjggG+MIIBujAdBgNVHQ4E
FgQU8+t+F1Xc4cMtTLvQ0Vv1UO4hK8gwHwYDVR0jBBgwFoAUcdFOuyVdwFjUv6Wl
HJP3P4MKuI8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL2NobG9lLnNvYm9ybm9zdC5uZXQvcnBraS9SSVBFLW5scnNz
Zi9jZEZPdXlWZHdGalV2NldsSEpQM1A0TUt1STguY3JsMGQGCCsGAQUFBwEBBFgw
VjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9jZEZPdXlWZHdGalV2NldsSEpQM1A0TUt1STguY2VyMA4GA1UdDwEB
/wQEAwIHgDBoBggrBgEFBQcBCwRcMFowWAYIKwYBBQUHMAuGTHJzeW5jOi8vY2hs
b2Uuc29ib3Jub3N0Lm5ldC9ycGtpL1JJUEUtbmxyc3NmLzgtdC1GMVhjNGNNdFRM
dlEwVnYxVU80aEs4Zy5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADC
aIEwDQYJKoZIhvcNAQELBQADggEBAHPMI+rIuCqQqtL/VGhFqVfg3XcxeUJS8ZgT
5O+3OA8eP/jGZq/1CSccSAlnTeX1Hj82c+4YxyxiPxReaX8XynFUyGNFq3l9HVkB
nOGZ3tfb43QLJzPTYbkTNhzSlQrsmynrtZhqFyLOAoKfA1YlAEkjyqqbnHdRT4HD
M03/pn9sqebVYfXlgdIsK7s3QTLEFfhwFY7NNNSElOdhrE9laj2zneMPatk8YUXA
L3onOwL7mbR32/VS4HdHH4Df9YNE/RkLMr9e+J8VUrShx3Vd+FSX00FtXzW+ZJpL
iP6enxb1W5P8Hp355iMFhrVUQhCz1QKkMBBUN3vXU9g6jnkAyNs=
-----END CERTIFICATE-----
Generated at Sun Jun 9 06:26:07 2024 by rpki-client on console-ams.rpki-client.org