Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/FC9SXSymBtvloTENdFb8CcYxDC8.roa
File: FC9SXSymBtvloTENdFb8CcYxDC8.roa (raw, json)
Hash identifier: tHH3yV16cwA+Sb7NyY2LH7Jx1ofMaaeP8allqbHoiEk=
Subject key identifier: 14:2F:52:5D:2C:A6:06:DB:E5:A1:31:0D:74:56:FC:09:C6:31:0C:2F
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 07B7
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/FC9SXSymBtvloTENdFb8CcYxDC8.roa
Signing time: Sun 15 Sep 2024 15:55:02 +0000
ROA not before: Sun 15 Sep 2024 15:55:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 15 Sep 2024 19:55:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1975 (0x7b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Sep 15 15:55:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=142F525D2CA606DBE5A1310D7456FC09C6310C2F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fe:92:35:98:93:a0:33:c9:e6:3a:a2:ff:20:42:
99:66:f8:2f:7c:a6:e9:7c:a7:19:f9:87:88:6d:f8:
63:37:e9:8e:ae:04:2c:f5:7f:78:87:58:83:6a:65:
96:c7:0d:7f:8b:4c:c8:b2:78:99:f5:18:d4:20:75:
b3:5e:6d:b1:9a:76:11:1a:5f:53:43:7c:d0:e0:58:
c9:84:30:97:d4:db:44:4c:ce:79:a3:3f:12:1c:e2:
fe:63:18:24:6b:11:d7:55:9e:f4:d4:71:f9:ab:94:
80:f6:e9:8a:ef:49:7a:91:c8:d6:49:95:bd:af:67:
f0:53:53:1e:78:f6:e6:8d:95:d2:ad:45:bc:da:a3:
e2:45:41:d2:1d:33:5f:47:e0:4c:11:82:34:c4:18:
c5:5f:a0:db:34:dc:ae:84:b9:4c:95:13:39:f4:07:
ad:ab:8b:50:02:d0:8b:aa:e5:38:60:df:c5:f6:ef:
14:4e:2c:0f:89:ea:3f:bf:8f:40:3d:ae:d3:51:95:
c6:8a:44:ae:eb:0b:52:07:7f:6c:8e:a7:47:52:dd:
21:1b:e6:98:7b:a9:0f:ab:e9:3c:eb:e0:30:0f:a7:
e6:66:c8:f2:c3:23:1c:54:75:e9:d1:11:de:4e:de:
5f:40:d2:24:da:bb:9f:c0:ca:f0:ab:9f:b4:f1:b5:
9d:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:2F:52:5D:2C:A6:06:DB:E5:A1:31:0D:74:56:FC:09:C6:31:0C:2F
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/FC9SXSymBtvloTENdFb8CcYxDC8.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:a4:ce:21:f4:4a:f8:3c:d9:ad:9b:27:da:02:36:74:1c:16:
63:d3:4d:58:06:fd:41:88:df:25:bc:77:ea:87:be:fb:9a:1c:
79:3e:e4:f9:6e:ad:d9:a5:61:e8:93:7e:5e:d4:42:d4:06:70:
59:03:97:5e:2f:55:2a:5a:88:43:1c:b3:16:61:16:5b:18:be:
ff:fd:d5:b5:6c:ad:35:9a:6f:e3:ad:37:bb:8c:c5:f8:25:4c:
b5:11:ed:f7:b0:22:83:71:4c:5f:35:30:07:bf:1f:f3:64:53:
03:81:57:d1:43:2d:b3:aa:81:5b:57:b1:53:e7:d2:2f:b9:74:
29:c5:35:f7:c3:1b:df:ac:29:4c:77:38:78:29:2e:a6:b9:b7:
81:7a:4a:9b:73:bf:18:ed:d5:28:59:94:94:24:ba:18:fc:fd:
f0:5a:4d:85:c5:b5:5f:3f:f9:0f:fb:90:95:bb:09:63:95:82:
5b:af:97:88:b5:e1:dc:74:6e:43:ec:8b:47:c1:c1:ed:c5:0d:
75:03:48:ff:a3:57:d7:cd:01:4b:c7:2b:33:10:79:c8:b3:c0:
94:0d:33:3b:f5:fd:f2:a1:48:a3:93:69:ee:d9:58:9b:35:2f:
c0:81:47:4a:5d:c8:a3:e1:d8:f0:7f:32:62:1f:20:06:d6:01:
2f:29:c2:21
-----BEGIN CERTIFICATE-----
MIIEojCCA4qgAwIBAgICB7cwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzFk
MTRlYmIyNTVkYzA1OGQ0YmZhNWE1MWM5M2Y3M2Y4MzBhYjg4ZjAeFw0yNDA5MTUx
NTU1MDJaFw0yNTA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKDE0MkY1MjVEMkNBNjA2
REJFNUExMzEwRDc0NTZGQzA5QzYzMTBDMkYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQD+kjWYk6AzyeY6ov8gQplm+C98pul8pxn5h4ht+GM36Y6uBCz1
f3iHWINqZZbHDX+LTMiyeJn1GNQgdbNebbGadhEaX1NDfNDgWMmEMJfU20RMznmj
PxIc4v5jGCRrEddVnvTUcfmrlID26YrvSXqRyNZJlb2vZ/BTUx549uaNldKtRbza
o+JFQdIdM19H4EwRgjTEGMVfoNs03K6EuUyVEzn0B62ri1AC0Iuq5Thg38X27xRO
LA+J6j+/j0A9rtNRlcaKRK7rC1IHf2yOp0dS3SEb5ph7qQ+r6Tzr4DAPp+ZmyPLD
IxxUdenREd5O3l9A0iTau5/AyvCrn7TxtZ1/AgMBAAGjggG+MIIBujAdBgNVHQ4E
FgQUFC9SXSymBtvloTENdFb8CcYxDC8wHwYDVR0jBBgwFoAUcdFOuyVdwFjUv6Wl
HJP3P4MKuI8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL2NobG9lLnNvYm9ybm9zdC5uZXQvcnBraS9SSVBFLW5scnNz
Zi9jZEZPdXlWZHdGalV2NldsSEpQM1A0TUt1STguY3JsMGQGCCsGAQUFBwEBBFgw
VjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9jZEZPdXlWZHdGalV2NldsSEpQM1A0TUt1STguY2VyMA4GA1UdDwEB
/wQEAwIHgDBoBggrBgEFBQcBCwRcMFowWAYIKwYBBQUHMAuGTHJzeW5jOi8vY2hs
b2Uuc29ib3Jub3N0Lm5ldC9ycGtpL1JJUEUtbmxyc3NmL0ZDOVNYU3ltQnR2bG9U
RU5kRmI4Q2NZeERDOC5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADC
aIEwDQYJKoZIhvcNAQELBQADggEBAJqkziH0Svg82a2bJ9oCNnQcFmPTTVgG/UGI
3yW8d+qHvvuaHHk+5PlurdmlYeiTfl7UQtQGcFkDl14vVSpaiEMcsxZhFlsYvv/9
1bVsrTWab+OtN7uMxfglTLUR7fewIoNxTF81MAe/H/NkUwOBV9FDLbOqgVtXsVPn
0i+5dCnFNffDG9+sKUx3OHgpLqa5t4F6Sptzvxjt1ShZlJQkuhj8/fBaTYXFtV8/
+Q/7kJW7CWOVgluvl4i14dx0bkPsi0fBwe3FDXUDSP+jV9fNAUvHKzMQecizwJQN
Mzv1/fKhSKOTae7ZWJs1L8CBR0pdyKPh2PB/MmIfIAbWAS8pwiE=
-----END CERTIFICATE-----
Generated at Sun Sep 15 23:08:07 2024 by rpki-client on console-fra.rpki-client.org