Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/C2LxDD4XpxQlhrdTuH8ympNsMiY.roa
File: C2LxDD4XpxQlhrdTuH8ympNsMiY.roa (raw, json)
Hash identifier: mP2o0bbxgFnIVp3ZA/CLyzcwtwNVpww6H0EBE6UKYfw=
Subject key identifier: 0B:62:F1:0C:3E:17:A7:14:25:86:B7:53:B8:7F:32:9A:93:6C:32:26
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 07E7
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/C2LxDD4XpxQlhrdTuH8ympNsMiY.roa
Signing time: Fri 20 Sep 2024 23:55:03 +0000
ROA not before: Fri 20 Sep 2024 23:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 21 Sep 2024 03:55:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2023 (0x7e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Sep 20 23:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0B62F10C3E17A7142586B753B87F329A936C3226
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:32:7a:07:ac:9c:8a:13:17:52:0c:a7:90:af:
e3:6c:1b:d7:e2:35:c7:31:2d:32:9a:b2:2e:f6:cb:
5a:02:5c:4e:1a:2b:0f:24:ec:49:03:6b:30:cc:e1:
1d:b5:f2:e0:b8:72:aa:5a:23:3f:c4:7f:9d:cf:23:
a5:de:b9:fb:15:05:64:b1:2b:01:3c:b7:79:26:28:
af:c1:5b:e5:4d:61:d3:cb:bc:2c:6c:2f:26:a3:3e:
2d:00:56:2c:d7:48:fa:d7:96:fd:14:82:34:59:e4:
06:ed:01:ab:a3:63:71:29:23:13:03:3a:fd:a8:ba:
2e:be:fd:d3:ce:0c:39:92:08:ce:ab:97:a3:6d:83:
67:cb:32:a9:7f:39:97:03:36:68:39:5f:58:42:fc:
a6:36:8a:34:7b:c5:08:eb:80:33:68:7d:ef:f7:ae:
f3:9f:a6:3d:1c:0b:b9:b4:fe:22:db:43:d9:3b:cc:
4d:23:a9:92:84:1b:a2:23:48:82:75:92:e1:7a:b9:
28:ec:e2:8b:11:60:28:ff:e1:52:aa:2b:4f:25:20:
48:03:08:28:bb:34:4a:57:87:6a:c8:dd:a3:11:31:
2e:5b:ea:e5:bb:36:84:63:e8:cc:13:f5:49:44:a0:
91:67:1c:aa:e7:d9:cf:52:9f:b6:a6:1d:22:78:3d:
6a:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:62:F1:0C:3E:17:A7:14:25:86:B7:53:B8:7F:32:9A:93:6C:32:26
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/C2LxDD4XpxQlhrdTuH8ympNsMiY.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:d4:69:e1:a5:ef:84:a1:bd:3f:cb:3d:52:40:a8:18:4c:89:
22:e8:86:0a:2a:7c:8d:c7:e0:d3:79:43:fa:8f:ab:2f:5d:d2:
14:77:16:71:0d:30:11:36:65:55:00:3d:e4:ff:84:7b:45:35:
ca:b4:e4:3e:e7:51:e7:e0:7b:ca:a2:8e:71:63:b4:cc:57:e7:
95:f1:f0:bf:a7:f9:7b:01:bc:bc:7b:c6:c0:01:3a:f9:ad:ec:
cf:74:b8:14:21:27:50:2d:1b:fb:e3:c2:27:5e:fb:e4:79:5e:
9e:21:b6:41:42:25:fb:42:69:56:f6:ce:31:6b:eb:a6:86:cc:
1c:10:e2:91:bd:9d:9b:6c:0e:f1:98:a4:08:27:76:74:08:6e:
48:bd:aa:fa:f0:23:0d:72:f6:ce:9d:f6:b8:81:6e:55:2a:d5:
5c:1d:f5:8f:60:33:ed:00:d8:4e:a4:c2:21:b6:b2:7a:5f:cf:
90:73:4a:8e:49:f0:e1:20:b8:1a:2b:0c:9a:bd:22:42:8e:e7:
f4:c6:a9:24:e6:35:8b:18:1a:fd:93:0d:92:8a:c3:e4:8b:05:
3b:46:ff:ac:f3:11:4f:20:b4:88:e0:53:39:8f:ff:dc:ac:c8:
ab:86:6d:16:a1:c6:9c:9e:af:3a:31:a5:ff:07:cb:a5:ed:dd:
84:31:77:e0
-----BEGIN CERTIFICATE-----
MIIEojCCA4qgAwIBAgICB+cwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzFk
MTRlYmIyNTVkYzA1OGQ0YmZhNWE1MWM5M2Y3M2Y4MzBhYjg4ZjAeFw0yNDA5MjAy
MzU1MDNaFw0yNTA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKDBCNjJGMTBDM0UxN0E3
MTQyNTg2Qjc1M0I4N0YzMjlBOTM2QzMyMjYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDUMnoHrJyKExdSDKeQr+NsG9fiNccxLTKasi72y1oCXE4aKw8k
7EkDazDM4R218uC4cqpaIz/Ef53PI6XeufsVBWSxKwE8t3kmKK/BW+VNYdPLvCxs
LyajPi0AVizXSPrXlv0UgjRZ5AbtAaujY3EpIxMDOv2oui6+/dPODDmSCM6rl6Nt
g2fLMql/OZcDNmg5X1hC/KY2ijR7xQjrgDNofe/3rvOfpj0cC7m0/iLbQ9k7zE0j
qZKEG6IjSIJ1kuF6uSjs4osRYCj/4VKqK08lIEgDCCi7NEpXh2rI3aMRMS5b6uW7
NoRj6MwT9UlEoJFnHKrn2c9Sn7amHSJ4PWrVAgMBAAGjggG+MIIBujAdBgNVHQ4E
FgQUC2LxDD4XpxQlhrdTuH8ympNsMiYwHwYDVR0jBBgwFoAUcdFOuyVdwFjUv6Wl
HJP3P4MKuI8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL2NobG9lLnNvYm9ybm9zdC5uZXQvcnBraS9SSVBFLW5scnNz
Zi9jZEZPdXlWZHdGalV2NldsSEpQM1A0TUt1STguY3JsMGQGCCsGAQUFBwEBBFgw
VjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9jZEZPdXlWZHdGalV2NldsSEpQM1A0TUt1STguY2VyMA4GA1UdDwEB
/wQEAwIHgDBoBggrBgEFBQcBCwRcMFowWAYIKwYBBQUHMAuGTHJzeW5jOi8vY2hs
b2Uuc29ib3Jub3N0Lm5ldC9ycGtpL1JJUEUtbmxyc3NmL0MyTHhERDRYcHhRbGhy
ZFR1SDh5bXBOc01pWS5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADC
aIEwDQYJKoZIhvcNAQELBQADggEBAKnUaeGl74ShvT/LPVJAqBhMiSLohgoqfI3H
4NN5Q/qPqy9d0hR3FnENMBE2ZVUAPeT/hHtFNcq05D7nUefge8qijnFjtMxX55Xx
8L+n+XsBvLx7xsABOvmt7M90uBQhJ1AtG/vjwide++R5Xp4htkFCJftCaVb2zjFr
66aGzBwQ4pG9nZtsDvGYpAgndnQIbki9qvrwIw1y9s6d9riBblUq1Vwd9Y9gM+0A
2E6kwiG2snpfz5BzSo5J8OEguBorDJq9IkKO5/TGqSTmNYsYGv2TDZKKw+SLBTtG
/6zzEU8gtIjgUzmP/9ysyKuGbRahxpyerzoxpf8Hy6Xt3YQxd+A=
-----END CERTIFICATE-----
Generated at Sat Sep 21 07:22:49 2024 by rpki-client on console-ams.rpki-client.org