Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/DBAHvmo5mCljBDBFp81d67rxUjk.roa
File: DBAHvmo5mCljBDBFp81d67rxUjk.roa (raw, json)
Hash identifier: OR/e3M2JS7RfOcSpmfSEnb0lGSjRNeZ8GBA0zpfiCpI=
Subject key identifier: 0C:10:07:BE:6A:39:98:29:63:04:30:45:A7:CD:5D:EB:BA:F1:52:39
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 089B
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/DBAHvmo5mCljBDBFp81d67rxUjk.roa
Signing time: Thu 10 Oct 2024 23:55:02 +0000
ROA not before: Thu 10 Oct 2024 23:55:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 11 Oct 2024 03:55:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2203 (0x89b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Oct 10 23:55:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0C1007BE6A39982963043045A7CD5DEBBAF15239
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:56:5c:31:8b:ad:8b:cc:bd:ca:c2:c1:10:a4:
17:74:f7:bd:93:42:f8:ab:92:81:bf:00:2d:cc:cc:
2c:db:e0:a3:12:2e:6e:48:76:0f:f8:8d:74:21:e2:
b5:94:20:7b:36:d5:b6:d2:cb:d0:2f:1b:3f:02:00:
6d:dc:02:a8:1c:39:3f:2f:9d:35:b1:c2:16:af:51:
97:75:d1:30:9e:e4:78:54:0b:cf:73:13:db:83:81:
78:dc:bf:5b:d6:f5:3e:be:7e:d5:88:c9:86:01:fc:
69:03:3a:ff:b1:cc:8b:b5:e9:8f:9f:e2:78:85:d3:
cc:59:e1:c6:6d:8d:44:07:9d:7b:01:be:f2:78:31:
18:38:64:f0:be:32:bb:a6:16:c3:9b:50:f7:42:26:
1f:d7:2f:29:ad:1d:a5:5a:7b:c8:de:a0:fd:45:43:
3e:1a:e4:4d:31:98:f3:39:8b:e4:95:2d:3f:3d:2c:
dc:5e:71:d8:ad:8c:41:8d:b7:e2:e4:9d:ae:80:be:
b2:7d:d4:06:cb:4b:9f:bd:0b:d5:c2:8a:ca:ba:08:
8d:47:ab:4b:90:21:42:c5:96:22:38:87:bc:c4:51:
f0:47:4f:9d:57:ee:4d:a0:25:1c:50:b6:43:b6:4c:
56:bc:7c:f2:08:12:89:77:fa:8d:62:6a:c7:b6:e1:
a5:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:10:07:BE:6A:39:98:29:63:04:30:45:A7:CD:5D:EB:BA:F1:52:39
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/DBAHvmo5mCljBDBFp81d67rxUjk.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:28:f7:77:44:c0:cf:be:f7:d5:99:36:8d:ee:bb:94:08:ed:
c1:6f:c4:95:e7:33:a0:5d:be:c4:32:4c:d8:a0:71:18:54:19:
32:46:b3:a2:2b:92:6f:ff:82:90:61:20:b1:38:01:00:b7:20:
70:90:3f:39:bc:42:93:af:73:9b:3c:6a:f6:41:02:f6:39:30:
4f:2c:98:d7:45:11:b0:35:aa:99:4e:89:8a:a6:a2:a2:36:f9:
5e:af:e6:3f:05:fb:be:61:41:a9:bc:6c:23:21:8f:b6:fe:55:
24:87:b7:04:a0:6f:e6:d7:03:05:bc:10:7c:d3:04:fe:3a:c5:
51:09:24:54:b2:20:e6:c4:c8:52:9f:28:7e:69:16:ba:c3:15:
6e:d2:cb:79:be:12:1c:66:38:1d:8c:1b:4c:f6:bb:1d:99:ea:
3d:50:92:fe:d3:14:8e:2c:e3:05:e0:5b:e5:b0:f3:c6:4d:a2:
b6:cc:b8:ad:00:48:f6:20:44:69:d3:89:5c:3e:b2:a3:63:f3:
e2:a2:82:2c:cc:8d:19:9f:df:f5:63:cb:20:a7:5d:ee:50:ad:
05:41:17:c7:d8:5e:b4:23:b6:85:16:1d:e6:22:fe:fc:8f:9a:
a3:5d:24:43:a2:25:9d:a2:6f:2c:d9:40:1f:71:2f:81:e8:0d:
d3:81:77:ed
-----BEGIN CERTIFICATE-----
MIIEojCCA4qgAwIBAgICCJswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzFk
MTRlYmIyNTVkYzA1OGQ0YmZhNWE1MWM5M2Y3M2Y4MzBhYjg4ZjAeFw0yNDEwMTAy
MzU1MDJaFw0yNTA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKDBDMTAwN0JFNkEzOTk4
Mjk2MzA0MzA0NUE3Q0Q1REVCQkFGMTUyMzkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDhVlwxi62LzL3KwsEQpBd0972TQvirkoG/AC3MzCzb4KMSLm5I
dg/4jXQh4rWUIHs21bbSy9AvGz8CAG3cAqgcOT8vnTWxwhavUZd10TCe5HhUC89z
E9uDgXjcv1vW9T6+ftWIyYYB/GkDOv+xzIu16Y+f4niF08xZ4cZtjUQHnXsBvvJ4
MRg4ZPC+MrumFsObUPdCJh/XLymtHaVae8jeoP1FQz4a5E0xmPM5i+SVLT89LNxe
cditjEGNt+Lkna6AvrJ91AbLS5+9C9XCisq6CI1Hq0uQIULFliI4h7zEUfBHT51X
7k2gJRxQtkO2TFa8fPIIEol3+o1iase24aX7AgMBAAGjggG+MIIBujAdBgNVHQ4E
FgQUDBAHvmo5mCljBDBFp81d67rxUjkwHwYDVR0jBBgwFoAUcdFOuyVdwFjUv6Wl
HJP3P4MKuI8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL2NobG9lLnNvYm9ybm9zdC5uZXQvcnBraS9SSVBFLW5scnNz
Zi9jZEZPdXlWZHdGalV2NldsSEpQM1A0TUt1STguY3JsMGQGCCsGAQUFBwEBBFgw
VjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9jZEZPdXlWZHdGalV2NldsSEpQM1A0TUt1STguY2VyMA4GA1UdDwEB
/wQEAwIHgDBoBggrBgEFBQcBCwRcMFowWAYIKwYBBQUHMAuGTHJzeW5jOi8vY2hs
b2Uuc29ib3Jub3N0Lm5ldC9ycGtpL1JJUEUtbmxyc3NmL0RCQUh2bW81bUNsakJE
QkZwODFkNjdyeFVqay5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADC
aIEwDQYJKoZIhvcNAQELBQADggEBAGoo93dEwM++99WZNo3uu5QI7cFvxJXnM6Bd
vsQyTNigcRhUGTJGs6Irkm//gpBhILE4AQC3IHCQPzm8QpOvc5s8avZBAvY5ME8s
mNdFEbA1qplOiYqmoqI2+V6v5j8F+75hQam8bCMhj7b+VSSHtwSgb+bXAwW8EHzT
BP46xVEJJFSyIObEyFKfKH5pFrrDFW7Sy3m+EhxmOB2MG0z2ux2Z6j1Qkv7TFI4s
4wXgW+Ww88ZNorbMuK0ASPYgRGnTiVw+sqNj8+KigizMjRmf3/VjyyCnXe5QrQVB
F8fYXrQjtoUWHeYi/vyPmqNdJEOiJZ2ibyzZQB9xL4HoDdOBd+0=
-----END CERTIFICATE-----
Generated at Fri Oct 11 05:56:35 2024 by rpki-client on console-ams.rpki-client.org