Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/KS9jW2eATWJy83QGAnCC4XSJ4yw.roa
File: KS9jW2eATWJy83QGAnCC4XSJ4yw.roa (raw, json)
Hash identifier: gnbz4o1vhRzooGrCvzEMIN52BG0VRO32HXOPcauy38U=
Subject key identifier: 29:2F:63:5B:67:80:4D:62:72:F3:74:06:02:70:82:E1:74:89:E3:2C
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0628
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/KS9jW2eATWJy83QGAnCC4XSJ4yw.roa
Signing time: Fri 02 Aug 2024 07:55:04 +0000
ROA not before: Fri 02 Aug 2024 07:55:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 02 Aug 2024 11:55:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1576 (0x628)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Aug 2 07:55:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=292F635B67804D6272F37406027082E17489E32C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:2c:6d:f0:eb:8f:03:71:6b:d7:49:d5:56:dd:
08:47:ca:d0:d0:89:6d:dc:d0:7e:97:c8:86:90:39:
fc:54:69:8c:8b:3c:e7:c2:50:90:32:4d:82:32:b9:
74:bd:16:32:d3:c6:b9:99:ec:24:fa:26:ff:5f:bb:
26:bd:1d:4c:b8:37:af:b3:f0:bb:52:0d:57:1b:a3:
9d:e0:5a:20:49:09:d4:2b:0f:f6:6a:0f:3f:56:9b:
c6:2b:cc:b6:9a:93:eb:bf:22:7c:f6:8c:93:c8:38:
a0:64:0c:84:95:65:fd:e1:28:c6:ef:33:53:c4:14:
6a:7c:1c:80:5c:de:ba:0c:05:51:9e:c3:41:24:e8:
3f:0b:0a:10:e3:cf:73:0b:5e:48:1a:36:59:82:38:
45:57:58:c7:f6:4a:f0:2a:d3:f3:5f:53:d9:a0:14:
7a:ac:61:59:fb:8a:c0:89:67:95:a8:27:00:06:99:
e4:5e:91:ca:d3:fe:f6:df:04:20:1c:18:80:5a:a0:
00:1d:20:d8:64:13:83:da:6f:6f:5e:f0:08:5f:d1:
94:6e:ad:9f:9e:36:3d:fb:ed:ff:3b:70:32:8b:36:
ee:48:87:21:ea:82:34:12:8b:c1:a4:ae:35:c0:5a:
ff:bf:35:75:f3:c1:bd:e5:32:eb:88:1c:cf:a2:2a:
cf:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:2F:63:5B:67:80:4D:62:72:F3:74:06:02:70:82:E1:74:89:E3:2C
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/KS9jW2eATWJy83QGAnCC4XSJ4yw.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:69:6c:04:f8:cd:33:fb:57:00:e0:44:0c:15:71:19:05:fe:
7c:fe:2d:2c:6a:80:d3:2c:81:97:51:f4:c4:3d:e7:87:cb:ed:
d6:35:4f:5e:e4:c5:8f:25:18:71:3a:5f:c5:ab:e6:4e:bf:c0:
20:4e:ea:c1:bd:2e:68:84:53:b8:a7:6b:4f:d4:77:af:7f:43:
32:b1:e3:ad:cd:0d:00:00:73:8f:9b:33:03:c9:8f:fc:8f:9d:
50:60:34:bb:8b:6c:84:ec:09:5f:d7:29:8f:75:5e:61:78:56:
7a:d2:d0:c4:a3:8a:75:bc:94:f0:61:f9:78:89:4e:1d:67:5a:
1d:35:a6:79:ec:13:dc:92:52:e6:75:f3:0c:39:2d:31:19:2e:
e2:4e:8f:8d:b3:f7:73:3f:a4:e1:c4:89:d6:8e:e2:90:ca:e7:
02:ad:09:73:10:f6:9a:ce:f1:57:67:f6:24:02:f9:0e:6a:51:
9e:55:9f:8e:dd:44:d9:04:7e:bf:53:f6:01:73:b4:26:89:e6:
89:3b:13:47:97:4b:f3:e2:09:90:b6:e7:03:a0:90:de:fd:93:
92:eb:56:11:dd:02:45:cd:40:29:68:99:cc:4b:da:40:ae:d3:
79:34:6c:9c:64:f6:f6:41:3b:4e:2f:b7:b4:93:ac:53:a9:3c:
da:96:4f:1a
-----BEGIN CERTIFICATE-----
MIIEojCCA4qgAwIBAgICBigwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzFk
MTRlYmIyNTVkYzA1OGQ0YmZhNWE1MWM5M2Y3M2Y4MzBhYjg4ZjAeFw0yNDA4MDIw
NzU1MDRaFw0yNTA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKDI5MkY2MzVCNjc4MDRE
NjI3MkYzNzQwNjAyNzA4MkUxNzQ4OUUzMkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDfLG3w648DcWvXSdVW3QhHytDQiW3c0H6XyIaQOfxUaYyLPOfC
UJAyTYIyuXS9FjLTxrmZ7CT6Jv9fuya9HUy4N6+z8LtSDVcbo53gWiBJCdQrD/Zq
Dz9Wm8YrzLaak+u/Inz2jJPIOKBkDISVZf3hKMbvM1PEFGp8HIBc3roMBVGew0Ek
6D8LChDjz3MLXkgaNlmCOEVXWMf2SvAq0/NfU9mgFHqsYVn7isCJZ5WoJwAGmeRe
kcrT/vbfBCAcGIBaoAAdINhkE4Pab29e8Ahf0ZRurZ+eNj377f87cDKLNu5IhyHq
gjQSi8GkrjXAWv+/NXXzwb3lMuuIHM+iKs/xAgMBAAGjggG+MIIBujAdBgNVHQ4E
FgQUKS9jW2eATWJy83QGAnCC4XSJ4ywwHwYDVR0jBBgwFoAUcdFOuyVdwFjUv6Wl
HJP3P4MKuI8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL2NobG9lLnNvYm9ybm9zdC5uZXQvcnBraS9SSVBFLW5scnNz
Zi9jZEZPdXlWZHdGalV2NldsSEpQM1A0TUt1STguY3JsMGQGCCsGAQUFBwEBBFgw
VjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9jZEZPdXlWZHdGalV2NldsSEpQM1A0TUt1STguY2VyMA4GA1UdDwEB
/wQEAwIHgDBoBggrBgEFBQcBCwRcMFowWAYIKwYBBQUHMAuGTHJzeW5jOi8vY2hs
b2Uuc29ib3Jub3N0Lm5ldC9ycGtpL1JJUEUtbmxyc3NmL0tTOWpXMmVBVFdKeTgz
UUdBbkNDNFhTSjR5dy5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADC
aIEwDQYJKoZIhvcNAQELBQADggEBAFtpbAT4zTP7VwDgRAwVcRkF/nz+LSxqgNMs
gZdR9MQ954fL7dY1T17kxY8lGHE6X8Wr5k6/wCBO6sG9LmiEU7ina0/Ud69/QzKx
463NDQAAc4+bMwPJj/yPnVBgNLuLbITsCV/XKY91XmF4VnrS0MSjinW8lPBh+XiJ
Th1nWh01pnnsE9ySUuZ18ww5LTEZLuJOj42z93M/pOHEidaO4pDK5wKtCXMQ9prO
8Vdn9iQC+Q5qUZ5Vn47dRNkEfr9T9gFztCaJ5ok7E0eXS/PiCZC25wOgkN79k5Lr
VhHdAkXNQClomcxL2kCu03k0bJxk9vZBO04vt7STrFOpPNqWTxo=
-----END CERTIFICATE-----
Generated at Fri Aug 2 13:49:46 2024 by rpki-client on console-fra.rpki-client.org