Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/CgKicntmcmPRdj7j6TrysTwfq7I.roa
File: CgKicntmcmPRdj7j6TrysTwfq7I.roa (raw, json)
Hash identifier: E6guPDPHyUwB6DGxbZ1BnvJG825ecyNfuXdZDewusa8=
Subject key identifier: 0A:02:A2:72:7B:66:72:63:D1:76:3E:E3:E9:3A:F2:B1:3C:1F:AB:B2
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 04FF
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/CgKicntmcmPRdj7j6TrysTwfq7I.roa
Signing time: Sun 30 Jun 2024 07:55:03 +0000
ROA not before: Sun 30 Jun 2024 07:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 30 Jun 2024 11:55:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1279 (0x4ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Jun 30 07:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0A02A2727B667263D1763EE3E93AF2B13C1FABB2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ed:41:8f:52:58:bb:79:2f:6a:36:0f:ae:3a:
a7:28:d8:f8:2a:af:57:f8:0b:b8:8e:4c:b0:f4:c6:
aa:da:d3:7d:ed:55:d6:50:72:ca:ca:b9:52:8f:27:
51:79:01:2e:bb:5d:d1:16:a0:b2:a4:eb:83:00:fc:
7b:ec:56:2d:69:bd:b5:da:ff:75:6b:d0:64:34:72:
17:e8:ab:8b:7a:6d:ea:80:93:c0:8d:e8:fe:64:7e:
ae:ac:94:0b:a8:14:e2:25:1d:8e:6f:92:80:5b:1a:
59:d1:92:4e:dd:24:1c:e9:57:8b:32:1f:03:a4:eb:
88:09:7f:91:4a:7a:4f:e6:7c:3b:3d:87:bf:48:76:
89:20:76:f9:ce:b0:74:40:f6:57:c5:42:72:b7:7b:
61:12:3b:82:74:90:e7:bb:95:45:5a:33:39:61:3d:
07:9b:1c:ca:1b:28:d1:91:24:cd:de:e8:3a:92:b7:
3f:f4:dc:9c:99:45:9b:41:54:a7:9e:22:71:8e:56:
bf:e7:7d:ac:13:d6:65:aa:e3:f8:79:ef:7b:fb:84:
63:79:79:b1:ff:bb:a2:1c:8c:c1:94:07:fb:69:f0:
77:93:f7:f2:cc:8c:1f:af:48:78:84:85:de:72:51:
15:d1:67:e1:0a:85:26:35:3b:7a:f2:98:75:7a:89:
d5:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:02:A2:72:7B:66:72:63:D1:76:3E:E3:E9:3A:F2:B1:3C:1F:AB:B2
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/CgKicntmcmPRdj7j6TrysTwfq7I.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:74:fb:d6:fb:25:21:7b:fb:51:b0:00:f7:fd:f6:8c:bd:59:
05:e4:22:a6:f6:a2:9c:7d:37:48:c4:c7:e1:19:a8:1e:76:d8:
87:a9:ca:ed:9c:e7:c8:31:cd:28:08:5f:5f:bb:3f:8d:2b:bd:
2f:69:9a:65:32:62:1a:e7:73:1e:5f:63:c3:8c:a3:df:ba:86:
6b:53:70:89:0a:91:64:aa:e1:be:9f:3f:f7:7c:3f:fd:53:05:
0a:ff:c7:a7:70:3b:e4:7b:20:64:1c:07:f2:c6:dc:c1:29:16:
90:c1:70:06:51:25:72:dc:a8:b3:e4:7d:8a:8d:5c:a7:d0:f6:
0e:16:0d:56:03:b1:ff:72:c0:70:65:c6:96:6c:d7:b1:9d:2d:
8c:c3:84:da:7d:db:d7:14:44:68:52:8e:28:84:95:79:2d:c4:
dc:63:9e:35:52:7f:11:5f:80:77:98:1f:50:95:0e:45:11:dc:
11:76:a9:16:d8:92:2d:f0:75:5e:35:ee:4c:7a:3a:66:94:1c:
78:25:9c:4d:4c:6c:01:99:9c:2a:11:dd:c8:51:0a:66:68:c3:
ce:f0:6b:74:dd:d2:3f:f6:2e:bf:58:98:99:aa:69:b0:dd:e0:
d5:02:c8:57:ae:f8:9a:f5:77:09:d7:50:2a:a4:fe:06:69:be:
9a:83:03:70
-----BEGIN CERTIFICATE-----
MIIEojCCA4qgAwIBAgICBP8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzFk
MTRlYmIyNTVkYzA1OGQ0YmZhNWE1MWM5M2Y3M2Y4MzBhYjg4ZjAeFw0yNDA2MzAw
NzU1MDNaFw0yNTA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKDBBMDJBMjcyN0I2Njcy
NjNEMTc2M0VFM0U5M0FGMkIxM0MxRkFCQjIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC57UGPUli7eS9qNg+uOqco2Pgqr1f4C7iOTLD0xqra033tVdZQ
csrKuVKPJ1F5AS67XdEWoLKk64MA/HvsVi1pvbXa/3Vr0GQ0chfoq4t6beqAk8CN
6P5kfq6slAuoFOIlHY5vkoBbGlnRkk7dJBzpV4syHwOk64gJf5FKek/mfDs9h79I
dokgdvnOsHRA9lfFQnK3e2ESO4J0kOe7lUVaMzlhPQebHMobKNGRJM3e6DqStz/0
3JyZRZtBVKeeInGOVr/nfawT1mWq4/h573v7hGN5ebH/u6IcjMGUB/tp8HeT9/LM
jB+vSHiEhd5yURXRZ+EKhSY1O3rymHV6idVlAgMBAAGjggG+MIIBujAdBgNVHQ4E
FgQUCgKicntmcmPRdj7j6TrysTwfq7IwHwYDVR0jBBgwFoAUcdFOuyVdwFjUv6Wl
HJP3P4MKuI8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL2NobG9lLnNvYm9ybm9zdC5uZXQvcnBraS9SSVBFLW5scnNz
Zi9jZEZPdXlWZHdGalV2NldsSEpQM1A0TUt1STguY3JsMGQGCCsGAQUFBwEBBFgw
VjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9jZEZPdXlWZHdGalV2NldsSEpQM1A0TUt1STguY2VyMA4GA1UdDwEB
/wQEAwIHgDBoBggrBgEFBQcBCwRcMFowWAYIKwYBBQUHMAuGTHJzeW5jOi8vY2hs
b2Uuc29ib3Jub3N0Lm5ldC9ycGtpL1JJUEUtbmxyc3NmL0NnS2ljbnRtY21QUmRq
N2o2VHJ5c1R3ZnE3SS5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADC
aIEwDQYJKoZIhvcNAQELBQADggEBACt0+9b7JSF7+1GwAPf99oy9WQXkIqb2opx9
N0jEx+EZqB522Iepyu2c58gxzSgIX1+7P40rvS9pmmUyYhrncx5fY8OMo9+6hmtT
cIkKkWSq4b6fP/d8P/1TBQr/x6dwO+R7IGQcB/LG3MEpFpDBcAZRJXLcqLPkfYqN
XKfQ9g4WDVYDsf9ywHBlxpZs17GdLYzDhNp929cURGhSjiiElXktxNxjnjVSfxFf
gHeYH1CVDkUR3BF2qRbYki3wdV417kx6OmaUHHglnE1MbAGZnCoR3chRCmZow87w
a3Td0j/2Lr9YmJmqabDd4NUCyFeu+Jr1dwnXUCqk/gZpvpqDA3A=
-----END CERTIFICATE-----
Generated at Sun Jun 30 14:50:07 2024 by rpki-client on console-ams.rpki-client.org