Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/BAD9xlhIsB5dkGyjgeoUGecGiGE.roa
File: BAD9xlhIsB5dkGyjgeoUGecGiGE.roa (raw, json)
Hash identifier: 8ruLbpVyUWs56oU60lu2COFuI1tsQ+mwHX+XSs4fN0E=
Subject key identifier: 04:00:FD:C6:58:48:B0:1E:5D:90:6C:A3:81:EA:14:19:E7:06:88:61
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 016C
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/BAD9xlhIsB5dkGyjgeoUGecGiGE.roa
Signing time: Wed 20 Mar 2024 15:55:04 +0000
ROA not before: Wed 20 Mar 2024 15:55:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 20 Mar 2024 19:55:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 364 (0x16c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Mar 20 15:55:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0400FDC65848B01E5D906CA381EA1419E7068861
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f2:d0:99:5f:96:dc:ae:c7:d7:43:2a:55:cb:
82:e9:a8:52:86:56:cc:1c:92:38:ec:c8:5c:81:fa:
22:77:1c:b2:4a:b1:b3:30:45:d9:09:da:b5:96:24:
93:49:5a:ed:2e:78:9d:fc:ba:85:3e:cd:1f:25:bb:
be:0a:2e:05:51:03:29:55:58:85:a6:40:dd:2d:78:
45:a0:0c:f9:35:7b:e7:bc:5f:b7:8d:6b:e5:18:41:
c0:b2:e5:08:0d:6d:68:36:03:03:18:c5:9b:8e:c7:
ac:d4:71:35:5d:f3:aa:70:d2:24:66:5b:8f:cb:22:
74:ec:be:01:84:d5:0b:35:4b:e6:ef:02:0e:3d:fb:
d4:6b:aa:81:e0:7b:e7:e1:a5:f2:e0:27:c8:f7:f9:
58:2d:71:64:40:ec:b9:ed:b7:ff:77:37:28:6a:b2:
cf:aa:5f:06:f5:85:93:3d:5f:fc:cd:72:60:7b:a3:
99:62:ee:43:fa:c0:9b:38:81:f6:86:30:ec:2f:5f:
de:0e:f2:fa:b4:9e:29:c9:5a:be:56:78:d1:e9:59:
ff:2c:98:43:47:aa:35:c1:ef:8b:6c:80:bf:10:8f:
e8:36:99:ac:80:33:f5:a2:1a:00:22:56:05:6a:42:
ce:d3:7a:1e:be:84:f4:76:b3:94:f2:15:17:68:8b:
db:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:00:FD:C6:58:48:B0:1E:5D:90:6C:A3:81:EA:14:19:E7:06:88:61
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/BAD9xlhIsB5dkGyjgeoUGecGiGE.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
28:29:03:1e:47:4c:3f:eb:74:11:aa:15:30:a7:bb:c0:d8:69:
72:6f:cc:dc:8a:e8:08:b5:90:b1:21:b0:cd:5f:ad:54:16:ca:
d5:a0:89:0b:c7:64:fb:d6:0b:bc:b1:77:24:85:bd:15:2e:bd:
1a:04:86:10:ac:8f:a8:77:58:34:64:6c:7f:ca:a2:6c:27:0a:
cf:d9:4d:1c:4d:0e:99:6f:0d:ee:bf:5f:32:15:0a:bc:35:79:
3e:e7:a1:64:b3:79:7a:eb:7d:84:14:67:0f:8b:c5:fb:81:66:
05:4e:8f:05:98:86:fe:4b:5b:77:e3:d2:eb:66:b6:a2:74:8b:
29:f2:ae:df:fe:0a:7b:ff:41:32:8c:0c:8d:07:21:a7:46:5e:
27:0e:4c:2f:ca:83:b4:1c:80:cf:de:85:dd:43:b9:9b:27:be:
98:38:87:93:05:9b:f6:26:f9:4b:d7:e8:47:ad:78:8c:2d:37:
21:61:7a:34:07:18:b9:71:fd:de:46:47:de:6e:c8:9e:1b:8f:
c4:22:93:68:e0:ea:03:40:b1:89:06:20:2b:f2:9c:35:29:ed:
b7:f6:88:6b:dc:66:68:41:3f:4e:2a:1e:ea:4f:13:dc:3a:7c:
02:b8:ee:72:24:1e:3b:08:54:fd:d4:72:97:e1:37:79:24:51:
93:7b:09:d5
-----BEGIN CERTIFICATE-----
MIIEojCCA4qgAwIBAgICAWwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzFk
MTRlYmIyNTVkYzA1OGQ0YmZhNWE1MWM5M2Y3M2Y4MzBhYjg4ZjAeFw0yNDAzMjAx
NTU1MDRaFw0yNTA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKDA0MDBGREM2NTg0OEIw
MUU1RDkwNkNBMzgxRUExNDE5RTcwNjg4NjEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDC8tCZX5bcrsfXQypVy4LpqFKGVswckjjsyFyB+iJ3HLJKsbMw
RdkJ2rWWJJNJWu0ueJ38uoU+zR8lu74KLgVRAylVWIWmQN0teEWgDPk1e+e8X7eN
a+UYQcCy5QgNbWg2AwMYxZuOx6zUcTVd86pw0iRmW4/LInTsvgGE1Qs1S+bvAg49
+9RrqoHge+fhpfLgJ8j3+VgtcWRA7Lntt/93Nyhqss+qXwb1hZM9X/zNcmB7o5li
7kP6wJs4gfaGMOwvX94O8vq0ninJWr5WeNHpWf8smENHqjXB74tsgL8Qj+g2mayA
M/WiGgAiVgVqQs7Teh6+hPR2s5TyFRdoi9s7AgMBAAGjggG+MIIBujAdBgNVHQ4E
FgQUBAD9xlhIsB5dkGyjgeoUGecGiGEwHwYDVR0jBBgwFoAUcdFOuyVdwFjUv6Wl
HJP3P4MKuI8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL2NobG9lLnNvYm9ybm9zdC5uZXQvcnBraS9SSVBFLW5scnNz
Zi9jZEZPdXlWZHdGalV2NldsSEpQM1A0TUt1STguY3JsMGQGCCsGAQUFBwEBBFgw
VjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9jZEZPdXlWZHdGalV2NldsSEpQM1A0TUt1STguY2VyMA4GA1UdDwEB
/wQEAwIHgDBoBggrBgEFBQcBCwRcMFowWAYIKwYBBQUHMAuGTHJzeW5jOi8vY2hs
b2Uuc29ib3Jub3N0Lm5ldC9ycGtpL1JJUEUtbmxyc3NmL0JBRDl4bGhJc0I1ZGtH
eWpnZW9VR2VjR2lHRS5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADC
aIEwDQYJKoZIhvcNAQELBQADggEBACgpAx5HTD/rdBGqFTCnu8DYaXJvzNyK6Ai1
kLEhsM1frVQWytWgiQvHZPvWC7yxdySFvRUuvRoEhhCsj6h3WDRkbH/KomwnCs/Z
TRxNDplvDe6/XzIVCrw1eT7noWSzeXrrfYQUZw+LxfuBZgVOjwWYhv5LW3fj0utm
tqJ0iynyrt/+Cnv/QTKMDI0HIadGXicOTC/Kg7QcgM/ehd1DuZsnvpg4h5MFm/Ym
+UvX6EeteIwtNyFhejQHGLlx/d5GR95uyJ4bj8Qik2jg6gNAsYkGICvynDUp7bf2
iGvcZmhBP04qHupPE9w6fAK47nIkHjsIVP3UcpfhN3kkUZN7CdU=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:54 2024 by rpki-client on console-fra.rpki-client.org