Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/CsyNMupn26kyavLvVTIcDmUxHko.roa
File: CsyNMupn26kyavLvVTIcDmUxHko.roa (raw, json)
Hash identifier: FkMdZ+gbK4xH/saiR6NRUjP/IVEQLiSQYIJnN8XOEYo=
Subject key identifier: 0A:CC:8D:32:EA:67:DB:A9:32:6A:F2:EF:55:32:1C:0E:65:31:1E:4A
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 05B0
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/CsyNMupn26kyavLvVTIcDmUxHko.roa
Signing time: Fri 19 Jul 2024 23:55:03 +0000
ROA not before: Fri 19 Jul 2024 23:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 20 Jul 2024 03:55:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1456 (0x5b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Jul 19 23:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0ACC8D32EA67DBA9326AF2EF55321C0E65311E4A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:3d:59:02:04:fe:0a:f1:51:1b:c1:a3:b1:fe:
91:46:99:00:be:c1:c1:fa:91:00:b5:e9:1d:41:7a:
fe:4e:a5:3f:b2:2c:b1:cb:08:92:d0:7b:d2:c3:6f:
5a:81:18:45:21:68:0b:24:c2:2e:2a:3d:01:ef:80:
d1:c6:87:2c:fc:eb:cb:34:2b:86:f2:e3:dd:85:b7:
ae:07:2e:62:a7:45:f7:ce:0e:e9:16:9e:fb:d9:a3:
47:d7:82:87:21:b8:41:00:25:3f:e0:d5:dc:d7:c8:
48:fe:c4:64:d4:e8:f8:03:a0:99:06:2b:43:5a:5a:
aa:5d:2e:ef:19:1b:6e:fe:68:d5:5d:f5:02:5e:d6:
9d:21:71:52:50:34:b2:c4:b1:dc:b9:99:5b:57:50:
41:f2:a2:89:20:3e:ef:30:40:41:2d:73:04:9d:82:
01:71:93:28:64:d7:da:86:ff:27:e9:94:8c:5d:82:
9c:ea:66:87:45:63:7b:7d:d2:a1:28:97:64:a0:cd:
91:12:84:6f:c6:f8:f5:a5:b4:f7:0f:90:9a:1a:bd:
01:33:53:4f:44:e3:eb:9b:cd:d1:e6:ac:38:a8:58:
4d:6e:b4:a0:ab:23:0a:a7:05:9d:85:6c:bd:06:34:
56:b3:05:32:d3:a5:a9:5b:0a:18:1a:e7:40:5d:43:
0b:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:CC:8D:32:EA:67:DB:A9:32:6A:F2:EF:55:32:1C:0E:65:31:1E:4A
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/CsyNMupn26kyavLvVTIcDmUxHko.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
96:58:bc:53:7e:5b:54:21:d4:d4:71:5f:cc:e3:28:31:cc:5f:
1a:93:36:76:ae:ee:0c:02:68:fb:e4:ce:13:05:e1:a3:b8:1a:
b9:0c:cc:80:f3:54:8f:1e:0b:c0:65:ef:76:5e:de:d8:19:53:
3f:ed:57:fa:c4:7e:74:81:f3:02:ab:65:9b:34:54:0e:30:b9:
a1:20:ed:b3:f8:60:42:6d:dc:a2:ee:68:dd:a2:fe:78:6b:23:
57:2e:50:69:c4:13:bc:0c:5a:62:96:0c:04:2f:0d:b9:20:49:
fa:bc:5f:41:50:6d:fc:be:24:2f:23:03:9d:b3:59:14:c1:13:
ac:25:a2:d1:77:63:c5:02:4f:48:b3:44:ec:6d:0e:20:7d:e1:
6f:4d:60:5a:ed:e3:7d:bc:ed:1c:d2:9b:e5:4b:58:35:39:33:
df:97:3f:93:7b:11:ba:0f:cd:ed:b2:9b:f0:75:41:07:12:47:
92:4a:61:d9:ad:30:7d:5c:b8:ac:f6:4a:08:19:42:fc:48:81:
c8:c9:5f:cf:6e:3c:aa:84:33:f8:b9:9b:92:b5:b1:f2:c0:3b:
c8:0a:4e:3a:f7:90:56:77:51:f6:a4:ff:31:18:a6:0c:fe:a1:
d3:38:55:74:b4:1d:90:f8:1c:49:9c:fd:59:c3:cf:de:a5:9d:
89:18:41:59
-----BEGIN CERTIFICATE-----
MIIEojCCA4qgAwIBAgICBbAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzFk
MTRlYmIyNTVkYzA1OGQ0YmZhNWE1MWM5M2Y3M2Y4MzBhYjg4ZjAeFw0yNDA3MTky
MzU1MDNaFw0yNTA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKDBBQ0M4RDMyRUE2N0RC
QTkzMjZBRjJFRjU1MzIxQzBFNjUzMTFFNEEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDFPVkCBP4K8VEbwaOx/pFGmQC+wcH6kQC16R1Bev5OpT+yLLHL
CJLQe9LDb1qBGEUhaAskwi4qPQHvgNHGhyz868s0K4by492Ft64HLmKnRffODukW
nvvZo0fXgochuEEAJT/g1dzXyEj+xGTU6PgDoJkGK0NaWqpdLu8ZG27+aNVd9QJe
1p0hcVJQNLLEsdy5mVtXUEHyookgPu8wQEEtcwSdggFxkyhk19qG/yfplIxdgpzq
ZodFY3t90qEol2SgzZEShG/G+PWltPcPkJoavQEzU09E4+ubzdHmrDioWE1utKCr
IwqnBZ2FbL0GNFazBTLTpalbChga50BdQwsjAgMBAAGjggG+MIIBujAdBgNVHQ4E
FgQUCsyNMupn26kyavLvVTIcDmUxHkowHwYDVR0jBBgwFoAUcdFOuyVdwFjUv6Wl
HJP3P4MKuI8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL2NobG9lLnNvYm9ybm9zdC5uZXQvcnBraS9SSVBFLW5scnNz
Zi9jZEZPdXlWZHdGalV2NldsSEpQM1A0TUt1STguY3JsMGQGCCsGAQUFBwEBBFgw
VjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9jZEZPdXlWZHdGalV2NldsSEpQM1A0TUt1STguY2VyMA4GA1UdDwEB
/wQEAwIHgDBoBggrBgEFBQcBCwRcMFowWAYIKwYBBQUHMAuGTHJzeW5jOi8vY2hs
b2Uuc29ib3Jub3N0Lm5ldC9ycGtpL1JJUEUtbmxyc3NmL0NzeU5NdXBuMjZreWF2
THZWVEljRG1VeEhrby5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADC
aIEwDQYJKoZIhvcNAQELBQADggEBAJZYvFN+W1Qh1NRxX8zjKDHMXxqTNnau7gwC
aPvkzhMF4aO4GrkMzIDzVI8eC8Bl73Ze3tgZUz/tV/rEfnSB8wKrZZs0VA4wuaEg
7bP4YEJt3KLuaN2i/nhrI1cuUGnEE7wMWmKWDAQvDbkgSfq8X0FQbfy+JC8jA52z
WRTBE6wlotF3Y8UCT0izROxtDiB94W9NYFrt43287RzSm+VLWDU5M9+XP5N7EboP
ze2ym/B1QQcSR5JKYdmtMH1cuKz2SggZQvxIgcjJX89uPKqEM/i5m5K1sfLAO8gK
Tjr3kFZ3Ufak/zEYpgz+odM4VXS0HZD4HEmc/VnDz96lnYkYQVk=
-----END CERTIFICATE-----
Generated at Sat Jul 20 06:11:38 2024 by rpki-client on console-fra.rpki-client.org