Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/KitaeTeuOh-ihUTJCd20G9-dIBo.roa
File: KitaeTeuOh-ihUTJCd20G9-dIBo.roa (raw, json)
Hash identifier: kOJFdQXLRxL80ZTil+YgcJ22TmtxQTUml62ZW/FboNM=
Subject key identifier: 2A:2B:5A:79:37:AE:3A:1F:A2:85:44:C9:09:DD:B4:1B:DF:9D:20:1A
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 08E3
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/KitaeTeuOh-ihUTJCd20G9-dIBo.roa
Signing time: Fri 18 Oct 2024 23:55:03 +0000
ROA not before: Fri 18 Oct 2024 23:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 19 Oct 2024 03:55:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2275 (0x8e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Oct 18 23:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2A2B5A7937AE3A1FA28544C909DDB41BDF9D201A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:bb:82:0d:eb:02:49:58:b9:6a:4d:6b:2c:c7:
93:69:a4:24:a5:e8:1e:1e:4f:29:25:f1:be:0e:7c:
52:b6:63:d6:86:5e:04:ed:4b:63:64:3a:8b:a8:37:
33:c8:c4:61:12:0a:83:9b:ce:be:1a:1c:aa:7c:ec:
e2:bb:25:f8:e4:c6:6c:e6:01:67:95:4f:37:0f:62:
81:aa:af:10:f1:49:9a:0d:5a:a3:4c:85:03:a7:9b:
30:2c:e9:e0:48:84:95:bc:6f:8c:29:6f:bb:01:48:
de:53:3c:f5:38:4b:69:2d:2a:e5:63:c4:13:9c:4f:
f8:c8:d7:fd:15:2e:e5:61:be:22:5f:0d:8b:60:c0:
79:ba:7a:d5:b0:56:a3:f2:5c:15:b7:27:3d:77:64:
b8:fd:1d:17:af:04:21:3b:2d:5a:9d:1b:5b:3e:77:
5e:72:b0:3c:9e:1a:7e:80:72:be:d2:87:61:70:00:
f0:4f:a2:8c:70:cb:fa:59:84:2a:3a:af:ef:f6:25:
2e:0b:3d:03:a3:88:a8:d5:34:7c:1d:3f:e6:cc:d2:
92:aa:19:3c:fb:97:8c:9e:36:5a:ad:9e:f6:f3:a6:
ca:0f:f3:7e:c9:b3:ed:d8:51:0c:d6:4a:f9:74:3e:
9e:24:9f:f7:ab:1a:63:fb:85:35:dd:89:f9:da:31:
22:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:2B:5A:79:37:AE:3A:1F:A2:85:44:C9:09:DD:B4:1B:DF:9D:20:1A
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/KitaeTeuOh-ihUTJCd20G9-dIBo.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:56:60:91:60:1e:f2:9c:b0:36:b6:1f:04:af:ae:a1:5c:53:
5c:db:b5:95:66:32:70:4e:ab:aa:2d:dd:b9:a2:9f:94:ac:3a:
04:05:9a:ef:1b:c9:e6:ff:d8:43:3e:18:89:0d:d1:30:0b:2f:
a4:31:ed:81:30:52:c9:b9:d2:47:80:86:1e:33:f7:15:02:ef:
e3:7f:a2:6f:96:9e:07:3c:36:d3:7a:1e:ef:77:52:f7:8d:1a:
85:b1:b9:32:4f:31:bd:12:3e:4c:3c:b1:f4:93:07:bb:df:ff:
84:b4:45:b1:ca:6a:15:ff:85:2a:38:3b:5b:bc:85:b4:d8:ee:
11:e1:8c:0f:f5:d2:8d:40:99:93:ee:79:40:3f:73:b2:d0:45:
e8:ef:35:11:74:77:d0:16:a4:55:59:ca:d9:ad:e9:74:37:df:
ed:a6:e2:bc:1d:8a:f9:16:ff:49:1a:b7:66:fb:c2:bc:b7:01:
9b:9b:b8:a0:1a:fd:93:c6:e8:ab:6d:f3:a5:b1:b3:8e:2b:6b:
6b:06:8e:e7:7a:97:ae:74:16:f2:8e:a2:c8:98:a7:0a:80:ba:
ac:d1:7e:11:47:f3:1c:53:67:56:aa:3f:60:b5:7a:d2:22:d0:
7f:10:b3:6e:8e:87:49:2a:a5:f8:ff:49:23:23:0e:24:af:c3:
f3:e4:80:27
-----BEGIN CERTIFICATE-----
MIIEojCCA4qgAwIBAgICCOMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzFk
MTRlYmIyNTVkYzA1OGQ0YmZhNWE1MWM5M2Y3M2Y4MzBhYjg4ZjAeFw0yNDEwMTgy
MzU1MDNaFw0yNTA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKDJBMkI1QTc5MzdBRTNB
MUZBMjg1NDRDOTA5RERCNDFCREY5RDIwMUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDKu4IN6wJJWLlqTWssx5NppCSl6B4eTykl8b4OfFK2Y9aGXgTt
S2NkOouoNzPIxGESCoObzr4aHKp87OK7JfjkxmzmAWeVTzcPYoGqrxDxSZoNWqNM
hQOnmzAs6eBIhJW8b4wpb7sBSN5TPPU4S2ktKuVjxBOcT/jI1/0VLuVhviJfDYtg
wHm6etWwVqPyXBW3Jz13ZLj9HRevBCE7LVqdG1s+d15ysDyeGn6Acr7Sh2FwAPBP
ooxwy/pZhCo6r+/2JS4LPQOjiKjVNHwdP+bM0pKqGTz7l4yeNlqtnvbzpsoP837J
s+3YUQzWSvl0Pp4kn/erGmP7hTXdifnaMSLPAgMBAAGjggG+MIIBujAdBgNVHQ4E
FgQUKitaeTeuOh+ihUTJCd20G9+dIBowHwYDVR0jBBgwFoAUcdFOuyVdwFjUv6Wl
HJP3P4MKuI8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL2NobG9lLnNvYm9ybm9zdC5uZXQvcnBraS9SSVBFLW5scnNz
Zi9jZEZPdXlWZHdGalV2NldsSEpQM1A0TUt1STguY3JsMGQGCCsGAQUFBwEBBFgw
VjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9jZEZPdXlWZHdGalV2NldsSEpQM1A0TUt1STguY2VyMA4GA1UdDwEB
/wQEAwIHgDBoBggrBgEFBQcBCwRcMFowWAYIKwYBBQUHMAuGTHJzeW5jOi8vY2hs
b2Uuc29ib3Jub3N0Lm5ldC9ycGtpL1JJUEUtbmxyc3NmL0tpdGFlVGV1T2gtaWhV
VEpDZDIwRzktZElCby5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADC
aIEwDQYJKoZIhvcNAQELBQADggEBAJpWYJFgHvKcsDa2HwSvrqFcU1zbtZVmMnBO
q6ot3bmin5SsOgQFmu8byeb/2EM+GIkN0TALL6Qx7YEwUsm50keAhh4z9xUC7+N/
om+Wngc8NtN6Hu93UveNGoWxuTJPMb0SPkw8sfSTB7vf/4S0RbHKahX/hSo4O1u8
hbTY7hHhjA/10o1AmZPueUA/c7LQRejvNRF0d9AWpFVZytmt6XQ33+2m4rwdivkW
/0kat2b7wry3AZubuKAa/ZPG6Ktt86Wxs44ra2sGjud6l650FvKOosiYpwqAuqzR
fhFH8xxTZ1aqP2C1etIi0H8Qs26Oh0kqpfj/SSMjDiSvw/PkgCc=
-----END CERTIFICATE-----
Generated at Sat Oct 19 06:59:54 2024 by rpki-client on console-ams.rpki-client.org