Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/PZ0qedXttrprS5bJhBtBd_-G168.roa
File: PZ0qedXttrprS5bJhBtBd_-G168.roa (raw, json)
Hash identifier: BJqruNsmq0SVUbdnu95Ql3/J+tvHBgbwToA+BN8hc4M=
Subject key identifier: 3D:9D:2A:79:D5:ED:B6:BA:6B:4B:96:C9:84:1B:41:77:FF:86:D7:AF
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0811
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/PZ0qedXttrprS5bJhBtBd_-G168.roa
Signing time: Wed 25 Sep 2024 15:55:03 +0000
ROA not before: Wed 25 Sep 2024 15:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 25 Sep 2024 19:55:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2065 (0x811)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Sep 25 15:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3D9D2A79D5EDB6BA6B4B96C9841B4177FF86D7AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:41:42:c1:59:9d:09:74:07:d3:ca:62:8f:d1:
84:da:76:9f:4c:23:9a:de:5a:01:86:9a:21:0c:d4:
6f:b3:df:78:c1:4e:42:d0:02:c6:8e:c6:62:8b:81:
2a:fe:b5:a2:68:cb:33:85:d6:e9:a1:08:74:b8:19:
dc:34:10:ec:3b:51:ae:f4:f6:df:63:7a:9c:8c:3a:
fd:fa:67:d7:06:a2:38:25:0a:c6:b9:52:1c:77:a6:
35:83:5d:70:a2:7b:dd:6d:e3:fe:f5:c8:9c:2a:07:
95:7f:6b:21:01:80:40:06:a0:a6:40:ef:ce:46:be:
29:06:a1:fb:b3:d3:d1:55:44:b7:ea:8c:e2:f7:70:
60:9c:bf:b1:bd:08:25:d7:37:b2:4e:3d:e2:7e:6e:
6c:88:48:b2:f7:21:60:1d:67:da:7c:ae:e2:e5:43:
f2:05:ed:f9:48:ce:3b:45:44:33:7c:f1:76:a2:8a:
d3:6d:69:1e:e8:5b:cb:e5:96:b4:73:2a:94:68:a3:
1c:ed:26:cb:78:54:a5:5f:65:93:78:73:06:ce:a3:
03:bf:ab:f3:06:0b:89:65:76:65:08:70:68:d8:b1:
15:47:f6:4a:21:e6:18:4e:0b:02:f9:cc:87:57:99:
22:59:85:1d:f0:c8:26:ae:de:e2:b4:1f:e1:15:1c:
7c:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:9D:2A:79:D5:ED:B6:BA:6B:4B:96:C9:84:1B:41:77:FF:86:D7:AF
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/PZ0qedXttrprS5bJhBtBd_-G168.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
25:15:41:b5:a6:2a:d1:ec:39:f4:18:6e:ae:56:6f:fa:f5:5b:
5b:b4:fd:6d:fd:73:e8:af:0f:96:4f:7f:7f:78:8a:0a:99:3b:
12:d5:28:ee:91:37:a9:9b:0b:cc:d5:54:2b:77:2b:06:3e:79:
dc:28:78:f1:44:dc:6c:37:e4:5c:d4:f3:9c:4d:78:f3:2e:d0:
6d:eb:ff:e1:df:71:c7:d5:fc:84:c2:93:d6:eb:e5:d9:0a:c4:
ba:e8:d9:67:42:8e:cb:ca:a9:76:d6:d5:ab:32:9b:80:74:ce:
a3:6d:14:cd:83:95:4e:ec:30:f3:05:1a:ec:e2:54:b9:bc:71:
3b:f1:74:31:b0:26:02:20:99:b7:a9:16:05:1a:78:bb:df:ca:
01:e9:b3:42:ff:3e:1f:dd:c3:fa:79:8b:f9:6b:04:4e:84:ce:
28:9d:59:f0:f8:33:c5:76:89:da:bf:42:71:2c:58:43:ea:87:
cd:f1:a5:e7:ac:78:0b:bd:a0:75:e8:d8:fd:63:13:37:46:00:
fb:b4:2c:c8:8f:2b:84:61:47:3f:7e:08:8a:46:62:1f:85:9a:
10:e7:4b:5d:47:68:bf:33:5e:ed:0d:53:40:11:f7:d2:38:c0:
c6:80:37:2b:dc:8a:65:b7:ab:5c:03:c6:4e:67:a1:6f:3a:7b:
8b:cf:8f:b6
-----BEGIN CERTIFICATE-----
MIIEojCCA4qgAwIBAgICCBEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzFk
MTRlYmIyNTVkYzA1OGQ0YmZhNWE1MWM5M2Y3M2Y4MzBhYjg4ZjAeFw0yNDA5MjUx
NTU1MDNaFw0yNTA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKDNEOUQyQTc5RDVFREI2
QkE2QjRCOTZDOTg0MUI0MTc3RkY4NkQ3QUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDEQULBWZ0JdAfTymKP0YTadp9MI5reWgGGmiEM1G+z33jBTkLQ
AsaOxmKLgSr+taJoyzOF1umhCHS4Gdw0EOw7Ua709t9jepyMOv36Z9cGojglCsa5
Uhx3pjWDXXCie91t4/71yJwqB5V/ayEBgEAGoKZA785GvikGofuz09FVRLfqjOL3
cGCcv7G9CCXXN7JOPeJ+bmyISLL3IWAdZ9p8ruLlQ/IF7flIzjtFRDN88XaiitNt
aR7oW8vllrRzKpRooxztJst4VKVfZZN4cwbOowO/q/MGC4lldmUIcGjYsRVH9koh
5hhOCwL5zIdXmSJZhR3wyCau3uK0H+EVHHzdAgMBAAGjggG+MIIBujAdBgNVHQ4E
FgQUPZ0qedXttrprS5bJhBtBd/+G168wHwYDVR0jBBgwFoAUcdFOuyVdwFjUv6Wl
HJP3P4MKuI8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL2NobG9lLnNvYm9ybm9zdC5uZXQvcnBraS9SSVBFLW5scnNz
Zi9jZEZPdXlWZHdGalV2NldsSEpQM1A0TUt1STguY3JsMGQGCCsGAQUFBwEBBFgw
VjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9jZEZPdXlWZHdGalV2NldsSEpQM1A0TUt1STguY2VyMA4GA1UdDwEB
/wQEAwIHgDBoBggrBgEFBQcBCwRcMFowWAYIKwYBBQUHMAuGTHJzeW5jOi8vY2hs
b2Uuc29ib3Jub3N0Lm5ldC9ycGtpL1JJUEUtbmxyc3NmL1BaMHFlZFh0dHJwclM1
YkpoQnRCZF8tRzE2OC5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADC
aIEwDQYJKoZIhvcNAQELBQADggEBACUVQbWmKtHsOfQYbq5Wb/r1W1u0/W39c+iv
D5ZPf394igqZOxLVKO6RN6mbC8zVVCt3KwY+edwoePFE3Gw35FzU85xNePMu0G3r
/+HfccfV/ITCk9br5dkKxLro2WdCjsvKqXbW1asym4B0zqNtFM2DlU7sMPMFGuzi
VLm8cTvxdDGwJgIgmbepFgUaeLvfygHps0L/Ph/dw/p5i/lrBE6EziidWfD4M8V2
idq/QnEsWEPqh83xpeeseAu9oHXo2P1jEzdGAPu0LMiPK4RhRz9+CIpGYh+FmhDn
S11HaL8zXu0NU0AR99I4wMaANyvcimW3q1wDxk5noW86e4vPj7Y=
-----END CERTIFICATE-----
Generated at Wed Sep 25 23:30:40 2024 by rpki-client on console-ams.rpki-client.org