Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/AsbH7H-yQgL7cKUl9mdV1QzupAM.roa
File: AsbH7H-yQgL7cKUl9mdV1QzupAM.roa (raw, json)
Hash identifier: gRvKUgZLpEspto4PyJrQfsBxWFuLqcR3BtzdPfmJgHY=
Subject key identifier: 02:C6:C7:EC:7F:B2:42:02:FB:70:A5:25:F6:67:55:D5:0C:EE:A4:03
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 2B
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/AsbH7H-yQgL7cKUl9mdV1QzupAM.roa
Signing time: Tue 13 Feb 2024 23:55:03 +0000
ROA not before: Tue 13 Feb 2024 23:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 14 Feb 2024 03:55:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43 (0x2b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Feb 13 23:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=02C6C7EC7FB24202FB70A525F66755D50CEEA403
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:3a:c4:1d:b4:91:6d:72:81:38:88:9a:e3:b4:
af:ff:ef:be:0a:63:fb:44:b4:d1:35:2d:4d:73:d0:
d6:45:89:0b:bc:fe:f1:df:82:dd:1b:06:f4:90:1e:
03:99:c9:75:8c:49:76:d7:79:b0:d3:03:c2:34:00:
89:a3:10:72:6e:60:54:9f:d4:f2:7d:de:20:74:81:
18:0e:a7:5a:6e:d4:12:6b:24:ca:fb:49:d2:8f:17:
01:9c:c5:3b:91:71:e7:e9:64:af:28:3c:ea:32:77:
bb:9f:94:0b:e9:59:96:df:63:b9:3e:97:9a:b9:43:
2d:5c:b4:aa:ff:18:fd:2d:b1:63:3b:36:49:91:aa:
a7:41:97:fc:9b:aa:42:4c:72:32:65:07:14:0d:b8:
2f:72:55:aa:d2:6d:0f:24:0a:70:3b:ac:8c:2e:5e:
b6:be:ae:45:8e:3e:5d:89:08:5e:89:ef:70:9a:4e:
f5:ce:bf:57:3c:06:af:f3:45:1a:a2:b6:83:4a:3f:
70:0e:1b:7b:b9:af:8a:d5:e0:e5:af:59:65:d6:69:
b7:a1:18:13:95:83:30:90:fc:00:2c:41:43:04:75:
22:9f:39:b6:4a:5b:4f:a6:89:ad:7c:c7:fd:9a:12:
56:19:22:6e:b4:9f:c4:37:a3:45:25:85:88:3c:65:
d6:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:C6:C7:EC:7F:B2:42:02:FB:70:A5:25:F6:67:55:D5:0C:EE:A4:03
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/AsbH7H-yQgL7cKUl9mdV1QzupAM.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:7c:56:a1:62:38:b4:69:c4:86:dd:c3:f6:33:d7:1e:b7:eb:
d0:7b:e0:42:84:fd:46:8d:00:48:9a:2c:7d:38:8b:9f:13:2a:
48:b6:b5:78:26:54:20:49:d3:5f:86:4d:bd:7a:af:4f:f2:d3:
fa:ef:d0:f4:00:29:3b:30:ad:22:39:cb:5e:97:37:70:1c:74:
3f:6f:da:e6:47:0b:ef:d2:4a:e9:cd:fb:0f:e4:19:69:31:80:
c6:ae:77:b2:d3:21:d2:14:f6:42:00:cb:9b:ac:17:24:45:68:
72:91:11:12:90:72:5e:9f:12:ea:8a:94:c3:ee:58:21:b9:57:
48:33:c3:8a:d6:90:ab:e7:b8:bd:ab:f8:99:66:26:a0:bf:19:
88:1d:3b:e5:ca:da:68:1c:5d:f5:c4:95:95:77:fe:13:07:06:
60:8a:99:05:0c:43:18:b4:49:7b:01:3b:cb:72:97:5e:bf:08:
8f:21:95:00:59:1c:04:6b:bd:ae:5f:a7:ea:35:ea:e3:9f:9b:
d1:5a:43:6a:71:b0:25:aa:73:c7:67:00:7d:38:85:df:fe:ae:
e7:53:c8:29:55:b0:9a:2a:e9:ac:cb:ab:d3:47:b5:e2:86:4f:
aa:4e:40:79:8f:1f:88:e2:a4:0c:aa:af:9d:d0:a0:90:a7:dc:
8a:6e:d0:b5
-----BEGIN CERTIFICATE-----
MIIEoTCCA4mgAwIBAgIBKzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3MWQx
NGViYjI1NWRjMDU4ZDRiZmE1YTUxYzkzZjczZjgzMGFiODhmMB4XDTI0MDIxMzIz
NTUwM1oXDTI1MDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMDJDNkM3RUM3RkIyNDIw
MkZCNzBBNTI1RjY2NzU1RDUwQ0VFQTQwMzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAKo6xB20kW1ygTiImuO0r//vvgpj+0S00TUtTXPQ1kWJC7z+8d+C
3RsG9JAeA5nJdYxJdtd5sNMDwjQAiaMQcm5gVJ/U8n3eIHSBGA6nWm7UEmskyvtJ
0o8XAZzFO5Fx5+lkryg86jJ3u5+UC+lZlt9juT6XmrlDLVy0qv8Y/S2xYzs2SZGq
p0GX/JuqQkxyMmUHFA24L3JVqtJtDyQKcDusjC5etr6uRY4+XYkIXonvcJpO9c6/
VzwGr/NFGqK2g0o/cA4be7mvitXg5a9ZZdZpt6EYE5WDMJD8ACxBQwR1Ip85tkpb
T6aJrXzH/ZoSVhkibrSfxDejRSWFiDxl1m0CAwEAAaOCAb4wggG6MB0GA1UdDgQW
BBQCxsfsf7JCAvtwpSX2Z1XVDO6kAzAfBgNVHSMEGDAWgBRx0U67JV3AWNS/paUc
k/c/gwq4jzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ
oE6GTHJzeW5jOi8vY2hsb2Uuc29ib3Jub3N0Lm5ldC9ycGtpL1JJUEUtbmxyc3Nm
L2NkRk91eVZkd0ZqVXY2V2xISlAzUDRNS3VJOC5jcmwwZAYIKwYBBQUHAQEEWDBW
MFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9E
RUZBVUxUL2NkRk91eVZkd0ZqVXY2V2xISlAzUDRNS3VJOC5jZXIwDgYDVR0PAQH/
BAQDAgeAMGgGCCsGAQUFBwELBFwwWjBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9jaGxv
ZS5zb2Jvcm5vc3QubmV0L3Jwa2kvUklQRS1ubHJzc2YvQXNiSDdILXlRZ0w3Y0tV
bDltZFYxUXp1cEFNLnJvYTAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMJo
gTANBgkqhkiG9w0BAQsFAAOCAQEArHxWoWI4tGnEht3D9jPXHrfr0HvgQoT9Ro0A
SJosfTiLnxMqSLa1eCZUIEnTX4ZNvXqvT/LT+u/Q9AApOzCtIjnLXpc3cBx0P2/a
5kcL79JK6c37D+QZaTGAxq53stMh0hT2QgDLm6wXJEVocpEREpByXp8S6oqUw+5Y
IblXSDPDitaQq+e4vav4mWYmoL8ZiB075craaBxd9cSVlXf+EwcGYIqZBQxDGLRJ
ewE7y3KXXr8IjyGVAFkcBGu9rl+n6jXq45+b0VpDanGwJapzx2cAfTiF3/6u51PI
KVWwmirprMur00e14oZPqk5AeY8fiOKkDKqvndCgkKfcim7QtQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:54 2024 by rpki-client on console-fra.rpki-client.org