Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/GaxOW0RpGZdaOchiv7ani_AgFmI.roa
File: GaxOW0RpGZdaOchiv7ani_AgFmI.roa (raw, json)
Hash identifier: 4+ylx+VqWssY7VNvDIV6PUaloXQ43OTwTIFOb7QhyCk=
Subject key identifier: 19:AC:4E:5B:44:69:19:97:5A:39:C8:62:BF:B6:A7:8B:F0:20:16:62
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 01E1
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/GaxOW0RpGZdaOchiv7ani_AgFmI.roa
Signing time: Tue 02 Apr 2024 15:55:03 +0000
ROA not before: Tue 02 Apr 2024 15:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Apr 2024 19:55:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 481 (0x1e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Apr 2 15:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=19AC4E5B446919975A39C862BFB6A78BF0201662
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:51:de:6d:e5:b5:e9:44:d8:59:f8:cb:11:13:
68:b9:d6:81:2b:ad:1b:ec:3a:4d:c6:ef:ec:14:fc:
09:e1:56:f3:f6:ee:1d:99:21:5a:99:4c:a6:19:e0:
e0:3a:b6:a3:e8:5c:fd:d8:87:28:f9:b3:65:53:95:
08:97:de:c1:40:95:56:dd:1a:6b:7e:1f:ab:9b:fc:
ba:bd:c5:5e:a3:3c:51:5b:4b:e7:e3:59:6e:e9:7e:
10:10:9c:aa:8f:69:00:51:72:83:ec:91:b4:91:c2:
3f:ff:3f:0b:7e:fb:cc:76:39:06:e0:c6:28:4c:9d:
b0:fc:41:b8:d7:36:6b:43:52:80:69:db:4c:55:6d:
bf:67:39:b0:53:d9:f1:3d:cb:12:97:cc:17:a3:23:
85:8e:2f:78:86:c6:b6:f0:b7:a2:5b:87:e2:18:2c:
b3:51:6c:00:6b:4f:c9:2c:2e:5c:41:a5:31:7b:cb:
fe:dd:f7:d1:0a:9c:43:7f:dd:c8:0c:40:99:25:d8:
7d:63:ec:30:49:2f:da:3c:05:c9:ab:41:26:c3:7f:
de:23:2c:09:72:80:0c:63:d4:10:5f:ef:f6:2e:d2:
96:13:cd:08:96:07:15:91:dc:cc:03:03:cc:5d:95:
8e:f4:68:58:1e:7b:a3:c9:99:2f:20:5e:74:d2:fd:
90:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:AC:4E:5B:44:69:19:97:5A:39:C8:62:BF:B6:A7:8B:F0:20:16:62
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/GaxOW0RpGZdaOchiv7ani_AgFmI.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
19:cc:a4:02:0c:21:90:76:1f:60:b8:09:72:bc:66:7d:20:8f:
ab:10:f5:7d:1b:92:9c:01:30:a1:ba:1d:f2:a2:71:ef:fb:79:
a2:4f:55:37:a2:31:99:29:01:c8:29:70:a5:57:81:78:e0:51:
10:5f:c2:10:35:f9:41:9e:3d:4b:2c:c5:0b:70:82:c6:44:fa:
65:33:8f:e1:71:cd:85:55:28:4c:41:e2:ba:16:14:55:9c:37:
f3:24:5b:7b:c5:ce:bb:21:d1:d6:9e:ba:dd:61:4d:95:86:ef:
d0:ea:04:cc:6f:e7:b0:ad:b9:f7:0b:0d:b7:22:6e:6d:ae:39:
ea:ae:b5:00:72:d2:2c:50:91:ae:f2:df:9e:09:7d:f6:52:b9:
bd:28:d2:72:70:31:a9:32:fe:89:ce:a0:7f:8b:7d:de:26:d9:
2b:f5:45:bc:54:ec:fb:a8:4b:97:6f:f1:89:65:d4:b7:af:d8:
48:f4:35:1b:79:00:c1:4a:a2:9b:87:44:91:b7:45:f9:4f:9f:
9b:48:6a:6b:cc:0b:37:f1:24:45:07:6f:4d:f9:a2:1b:f7:f2:
fa:92:37:0b:e0:1b:21:19:8b:0a:0a:bd:d4:4a:84:de:73:a4:
f0:30:04:48:9e:a9:c5:34:8f:e4:3f:46:70:6a:b4:c2:23:3f:
cb:11:c7:0b
-----BEGIN CERTIFICATE-----
MIIEojCCA4qgAwIBAgICAeEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzFk
MTRlYmIyNTVkYzA1OGQ0YmZhNWE1MWM5M2Y3M2Y4MzBhYjg4ZjAeFw0yNDA0MDIx
NTU1MDNaFw0yNTA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKDE5QUM0RTVCNDQ2OTE5
OTc1QTM5Qzg2MkJGQjZBNzhCRjAyMDE2NjIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDGUd5t5bXpRNhZ+MsRE2i51oErrRvsOk3G7+wU/AnhVvP27h2Z
IVqZTKYZ4OA6tqPoXP3Yhyj5s2VTlQiX3sFAlVbdGmt+H6ub/Lq9xV6jPFFbS+fj
WW7pfhAQnKqPaQBRcoPskbSRwj//Pwt++8x2OQbgxihMnbD8QbjXNmtDUoBp20xV
bb9nObBT2fE9yxKXzBejI4WOL3iGxrbwt6Jbh+IYLLNRbABrT8ksLlxBpTF7y/7d
99EKnEN/3cgMQJkl2H1j7DBJL9o8BcmrQSbDf94jLAlygAxj1BBf7/Yu0pYTzQiW
BxWR3MwDA8xdlY70aFgee6PJmS8gXnTS/ZBtAgMBAAGjggG+MIIBujAdBgNVHQ4E
FgQUGaxOW0RpGZdaOchiv7ani/AgFmIwHwYDVR0jBBgwFoAUcdFOuyVdwFjUv6Wl
HJP3P4MKuI8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL2NobG9lLnNvYm9ybm9zdC5uZXQvcnBraS9SSVBFLW5scnNz
Zi9jZEZPdXlWZHdGalV2NldsSEpQM1A0TUt1STguY3JsMGQGCCsGAQUFBwEBBFgw
VjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9jZEZPdXlWZHdGalV2NldsSEpQM1A0TUt1STguY2VyMA4GA1UdDwEB
/wQEAwIHgDBoBggrBgEFBQcBCwRcMFowWAYIKwYBBQUHMAuGTHJzeW5jOi8vY2hs
b2Uuc29ib3Jub3N0Lm5ldC9ycGtpL1JJUEUtbmxyc3NmL0dheE9XMFJwR1pkYU9j
aGl2N2FuaV9BZ0ZtSS5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADC
aIEwDQYJKoZIhvcNAQELBQADggEBABnMpAIMIZB2H2C4CXK8Zn0gj6sQ9X0bkpwB
MKG6HfKice/7eaJPVTeiMZkpAcgpcKVXgXjgURBfwhA1+UGePUssxQtwgsZE+mUz
j+FxzYVVKExB4roWFFWcN/MkW3vFzrsh0daeut1hTZWG79DqBMxv57CtufcLDbci
bm2uOequtQBy0ixQka7y354JffZSub0o0nJwMaky/onOoH+Lfd4m2Sv1RbxU7Puo
S5dv8Yll1Lev2Ej0NRt5AMFKopuHRJG3RflPn5tIamvMCzfxJEUHb035ohv38vqS
NwvgGyEZiwoKvdRKhN5zpPAwBEieqcU0j+Q/RnBqtMIjP8sRxws=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:54 2024 by rpki-client on console-fra.rpki-client.org