Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/KbfiKtN1FEFGsh4r5fNMJ-WizjU.roa
File: KbfiKtN1FEFGsh4r5fNMJ-WizjU.roa (raw, json)
Hash identifier: ppLBj9/GUdlDMJ+Fgiok9qOwUVjfScp+1dO81feLv/Y=
Subject key identifier: 29:B7:E2:2A:D3:75:14:41:46:B2:1E:2B:E5:F3:4C:27:E5:A2:CE:35
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0358
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/KbfiKtN1FEFGsh4r5fNMJ-WizjU.roa
Signing time: Tue 14 May 2024 07:55:03 +0000
ROA not before: Tue 14 May 2024 07:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 14 May 2024 11:55:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 856 (0x358)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: May 14 07:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=29B7E22AD375144146B21E2BE5F34C27E5A2CE35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:84:32:3a:ad:3e:ff:12:d0:0c:8b:41:2c:1b:
b5:41:76:35:ea:68:ea:a7:83:4b:af:33:e3:f6:e6:
e1:49:a3:61:8a:44:94:bd:12:35:2a:c1:21:53:d2:
43:79:83:6a:10:e8:bf:ac:2c:04:9b:b0:2e:c1:fb:
1f:bd:50:f7:9e:74:63:60:5a:58:8d:7c:f6:2a:ff:
22:f4:5e:4b:17:eb:2d:5e:05:7b:ca:80:db:77:bc:
44:8e:57:69:c9:ed:bc:a5:a4:63:cd:9b:5f:e0:db:
24:b5:13:51:cb:df:ab:95:27:6d:7d:6a:05:7f:31:
c0:7f:b3:f0:e0:f2:3d:ab:69:4a:2f:bf:f6:b8:dd:
0c:96:8d:cd:bb:c4:42:27:c4:a7:29:e5:c5:5e:72:
2c:9b:1b:78:7c:ac:28:cf:f4:a1:5a:c0:c9:d1:6b:
b5:6f:11:02:9a:ad:45:58:bf:2a:cb:9c:7a:3e:67:
0d:a5:cb:1a:69:72:fd:50:02:8a:ab:6d:cb:61:3c:
fb:d6:32:0e:22:e4:f2:9f:61:b6:9c:7d:46:65:fa:
e0:5f:73:d1:6d:2d:a8:ec:cc:58:52:9d:21:37:b5:
42:52:10:ee:bc:43:21:0c:d2:14:12:61:52:3e:8b:
bc:e3:16:5a:de:eb:5d:8a:5f:a6:db:ca:1e:40:c4:
93:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:B7:E2:2A:D3:75:14:41:46:B2:1E:2B:E5:F3:4C:27:E5:A2:CE:35
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/KbfiKtN1FEFGsh4r5fNMJ-WizjU.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
44:aa:ea:f4:63:21:b4:50:33:76:f8:83:49:10:94:46:ef:f4:
f2:16:ce:4b:6b:00:14:dc:cb:93:ca:47:79:0f:32:7f:b0:60:
48:d1:e7:0d:27:f9:57:e6:73:1c:c3:e4:33:51:09:8c:13:f1:
dd:4a:c4:6b:f0:12:51:31:1a:92:49:a4:80:fe:b8:bc:d2:ff:
6f:2b:d6:60:42:d4:75:25:95:e4:cb:8f:ff:f0:e4:03:05:c6:
ed:dc:19:3a:cd:b0:6a:b1:b8:35:03:a7:da:7a:e6:fe:d9:3e:
b6:15:39:75:4b:8e:ef:ae:f1:cb:f4:7f:6c:6a:67:c6:ad:23:
ef:5a:d5:29:7c:ff:c4:57:06:ba:b9:66:3f:35:d6:7d:28:fc:
a8:a5:0e:3a:99:7f:f3:3d:da:fe:65:ef:ed:f1:2b:d8:35:d2:
ca:e7:ab:c0:b2:5f:87:ae:11:6d:da:a0:2d:7b:5f:2d:d5:3f:
9a:9e:9e:64:c1:33:44:7e:dc:d1:71:5b:8c:7f:06:8f:10:63:
af:00:ea:f6:e8:9a:67:64:56:99:35:65:76:69:bf:1d:51:be:
3f:31:dd:d7:b3:fd:6a:ed:24:52:db:a0:86:b6:0a:ca:9d:2b:
a2:06:e4:30:06:97:ed:81:3b:21:f0:14:79:65:63:f3:23:ae:
52:33:81:3f
-----BEGIN CERTIFICATE-----
MIIEojCCA4qgAwIBAgICA1gwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzFk
MTRlYmIyNTVkYzA1OGQ0YmZhNWE1MWM5M2Y3M2Y4MzBhYjg4ZjAeFw0yNDA1MTQw
NzU1MDNaFw0yNTA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKDI5QjdFMjJBRDM3NTE0
NDE0NkIyMUUyQkU1RjM0QzI3RTVBMkNFMzUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCVhDI6rT7/EtAMi0EsG7VBdjXqaOqng0uvM+P25uFJo2GKRJS9
EjUqwSFT0kN5g2oQ6L+sLASbsC7B+x+9UPeedGNgWliNfPYq/yL0XksX6y1eBXvK
gNt3vESOV2nJ7bylpGPNm1/g2yS1E1HL36uVJ219agV/McB/s/Dg8j2raUovv/a4
3QyWjc27xEInxKcp5cVeciybG3h8rCjP9KFawMnRa7VvEQKarUVYvyrLnHo+Zw2l
yxppcv1QAoqrbcthPPvWMg4i5PKfYbacfUZl+uBfc9FtLajszFhSnSE3tUJSEO68
QyEM0hQSYVI+i7zjFlre612KX6bbyh5AxJMzAgMBAAGjggG+MIIBujAdBgNVHQ4E
FgQUKbfiKtN1FEFGsh4r5fNMJ+WizjUwHwYDVR0jBBgwFoAUcdFOuyVdwFjUv6Wl
HJP3P4MKuI8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL2NobG9lLnNvYm9ybm9zdC5uZXQvcnBraS9SSVBFLW5scnNz
Zi9jZEZPdXlWZHdGalV2NldsSEpQM1A0TUt1STguY3JsMGQGCCsGAQUFBwEBBFgw
VjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9jZEZPdXlWZHdGalV2NldsSEpQM1A0TUt1STguY2VyMA4GA1UdDwEB
/wQEAwIHgDBoBggrBgEFBQcBCwRcMFowWAYIKwYBBQUHMAuGTHJzeW5jOi8vY2hs
b2Uuc29ib3Jub3N0Lm5ldC9ycGtpL1JJUEUtbmxyc3NmL0tiZmlLdE4xRkVGR3No
NHI1Zk5NSi1XaXpqVS5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADC
aIEwDQYJKoZIhvcNAQELBQADggEBAESq6vRjIbRQM3b4g0kQlEbv9PIWzktrABTc
y5PKR3kPMn+wYEjR5w0n+VfmcxzD5DNRCYwT8d1KxGvwElExGpJJpID+uLzS/28r
1mBC1HUlleTLj//w5AMFxu3cGTrNsGqxuDUDp9p65v7ZPrYVOXVLju+u8cv0f2xq
Z8atI+9a1Sl8/8RXBrq5Zj811n0o/KilDjqZf/M92v5l7+3xK9g10srnq8CyX4eu
EW3aoC17Xy3VP5qenmTBM0R+3NFxW4x/Bo8QY68A6vbommdkVpk1ZXZpvx1Rvj8x
3dez/WrtJFLboIa2CsqdK6IG5DAGl+2BOyHwFHllY/MjrlIzgT8=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:54 2024 by rpki-client on console-fra.rpki-client.org