Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/F0movgOc2gyn2SonWIeNmAUEhJg.roa
File: F0movgOc2gyn2SonWIeNmAUEhJg.roa (raw, json)
Hash identifier: SGx4RGq/VRzku9UjeLkQRrMP4YHWko8T7ylGj3jzo1Q=
Subject key identifier: 17:49:A8:BE:03:9C:DA:0C:A7:D9:2A:27:58:87:8D:98:05:04:84:98
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 08EC
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/F0movgOc2gyn2SonWIeNmAUEhJg.roa
Signing time: Sat 19 Oct 2024 23:55:02 +0000
ROA not before: Sat 19 Oct 2024 23:55:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 20 Oct 2024 03:55:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2284 (0x8ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Oct 19 23:55:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1749A8BE039CDA0CA7D92A2758878D9805048498
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:33:fb:03:94:2a:10:ac:92:12:99:0a:e4:e4:
9e:95:14:51:8e:15:0c:94:4c:66:c1:68:d1:dd:35:
eb:ee:50:ad:03:9f:30:33:39:2a:87:c0:67:72:c6:
68:b6:e2:a7:2b:d7:69:1b:3f:83:eb:78:b5:df:d7:
b6:7a:e0:4d:89:8a:76:b6:c6:0d:d8:d0:09:b8:8a:
24:99:fc:18:48:44:6a:1f:75:e4:33:7e:cc:f9:0f:
75:26:19:e4:6e:8a:1d:72:3f:14:5e:1e:3e:ee:e4:
15:15:2e:3a:6a:18:f6:ec:71:3a:da:26:1a:33:42:
b5:13:bd:3d:fd:b9:12:89:ba:c8:f7:ff:15:88:47:
dd:a4:7b:39:8a:87:ab:41:78:b0:47:7a:f6:86:8d:
ec:ed:63:c7:c5:46:ac:12:fe:0d:0d:85:05:68:72:
3e:d8:ee:99:d9:2b:81:af:8a:2e:85:c1:2b:3e:d7:
29:73:7a:77:30:45:0b:b6:24:ae:8b:d1:3c:28:a4:
f3:69:0f:57:73:35:36:a1:0d:c5:c2:f5:8c:e2:b3:
d3:42:99:48:ee:03:9c:4a:39:58:37:25:12:5e:d8:
4e:a2:a2:14:68:0c:fc:48:1e:d5:38:db:63:b1:3a:
9c:20:70:aa:b8:41:0c:3e:e1:6e:34:f2:76:7d:eb:
87:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:49:A8:BE:03:9C:DA:0C:A7:D9:2A:27:58:87:8D:98:05:04:84:98
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/F0movgOc2gyn2SonWIeNmAUEhJg.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
54:03:2e:70:f5:c7:b5:20:52:88:40:ef:a5:f4:9f:ad:5d:15:
d5:2d:8d:40:05:58:08:af:93:64:64:f7:a1:5c:3e:74:0b:19:
89:69:d0:a9:1d:2e:a2:7d:fd:94:c9:d6:62:6d:ed:7a:e7:28:
b6:a5:3e:26:a8:94:cc:9f:31:5f:82:43:29:49:26:09:93:ed:
79:7d:8a:79:46:0f:7a:5a:08:a6:44:32:e4:33:36:2f:5e:58:
e4:08:9e:27:b5:80:01:07:12:b3:50:13:d5:1a:6c:31:f2:3d:
e9:5d:e4:44:61:50:7d:45:d8:30:5b:93:07:59:33:2e:ad:db:
2d:22:d6:19:0e:28:9c:fb:05:47:6d:95:3f:1c:3e:f0:06:ae:
2a:b0:67:81:49:b6:f9:e0:19:a7:84:fd:fb:5a:06:67:ba:ea:
95:52:4b:a8:0f:6d:0b:d3:7f:d6:cf:ed:bd:b1:b8:d5:09:c6:
5e:4e:56:23:92:4b:2b:92:aa:a9:1b:25:dd:58:90:c9:83:d9:
b4:27:f7:82:2c:be:19:e5:47:fa:b0:58:5d:8c:73:6f:fc:5b:
ee:0d:d8:f0:a4:23:8d:10:68:ee:1d:da:a0:fe:ea:22:9c:e8:
15:46:b4:59:99:8a:ab:70:08:75:e0:74:72:ce:37:00:b6:1c:
b3:31:17:3e
-----BEGIN CERTIFICATE-----
MIIEojCCA4qgAwIBAgICCOwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzFk
MTRlYmIyNTVkYzA1OGQ0YmZhNWE1MWM5M2Y3M2Y4MzBhYjg4ZjAeFw0yNDEwMTky
MzU1MDJaFw0yNTA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKDE3NDlBOEJFMDM5Q0RB
MENBN0Q5MkEyNzU4ODc4RDk4MDUwNDg0OTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC8M/sDlCoQrJISmQrk5J6VFFGOFQyUTGbBaNHdNevuUK0DnzAz
OSqHwGdyxmi24qcr12kbP4PreLXf17Z64E2Jina2xg3Y0Am4iiSZ/BhIRGofdeQz
fsz5D3UmGeRuih1yPxReHj7u5BUVLjpqGPbscTraJhozQrUTvT39uRKJusj3/xWI
R92kezmKh6tBeLBHevaGjeztY8fFRqwS/g0NhQVocj7Y7pnZK4Gvii6FwSs+1ylz
encwRQu2JK6L0TwopPNpD1dzNTahDcXC9Yzis9NCmUjuA5xKOVg3JRJe2E6iohRo
DPxIHtU422OxOpwgcKq4QQw+4W408nZ964eRAgMBAAGjggG+MIIBujAdBgNVHQ4E
FgQUF0movgOc2gyn2SonWIeNmAUEhJgwHwYDVR0jBBgwFoAUcdFOuyVdwFjUv6Wl
HJP3P4MKuI8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL2NobG9lLnNvYm9ybm9zdC5uZXQvcnBraS9SSVBFLW5scnNz
Zi9jZEZPdXlWZHdGalV2NldsSEpQM1A0TUt1STguY3JsMGQGCCsGAQUFBwEBBFgw
VjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9jZEZPdXlWZHdGalV2NldsSEpQM1A0TUt1STguY2VyMA4GA1UdDwEB
/wQEAwIHgDBoBggrBgEFBQcBCwRcMFowWAYIKwYBBQUHMAuGTHJzeW5jOi8vY2hs
b2Uuc29ib3Jub3N0Lm5ldC9ycGtpL1JJUEUtbmxyc3NmL0YwbW92Z09jMmd5bjJT
b25XSWVObUFVRWhKZy5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADC
aIEwDQYJKoZIhvcNAQELBQADggEBAFQDLnD1x7UgUohA76X0n61dFdUtjUAFWAiv
k2Rk96FcPnQLGYlp0KkdLqJ9/ZTJ1mJt7XrnKLalPiaolMyfMV+CQylJJgmT7Xl9
inlGD3paCKZEMuQzNi9eWOQInie1gAEHErNQE9UabDHyPeld5ERhUH1F2DBbkwdZ
My6t2y0i1hkOKJz7BUdtlT8cPvAGriqwZ4FJtvngGaeE/ftaBme66pVSS6gPbQvT
f9bP7b2xuNUJxl5OViOSSyuSqqkbJd1YkMmD2bQn94IsvhnlR/qwWF2Mc2/8W+4N
2PCkI40QaO4d2qD+6iKc6BVGtFmZiqtwCHXgdHLONwC2HLMxFz4=
-----END CERTIFICATE-----
Generated at Sun Oct 20 05:45:28 2024 by rpki-client on console-fra.rpki-client.org