Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/Rol1uLSzaX3rtGLyYwtBZyd86b4.roa
File: Rol1uLSzaX3rtGLyYwtBZyd86b4.roa (raw, json)
Hash identifier: 2AF9bsjCBFNA+wubyK9Lwd70HCeGcLD+dlulgtZG4o4=
Subject key identifier: 46:89:75:B8:B4:B3:69:7D:EB:B4:62:F2:63:0B:41:67:27:7C:E9:BE
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0634
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/Rol1uLSzaX3rtGLyYwtBZyd86b4.roa
Signing time: Sat 03 Aug 2024 15:55:04 +0000
ROA not before: Sat 03 Aug 2024 15:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 03 Aug 2024 19:55:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1588 (0x634)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Aug 3 15:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=468975B8B4B3697DEBB462F2630B4167277CE9BE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ce:e9:84:e2:e4:93:a2:aa:81:c5:12:9f:21:
3d:f7:3b:df:7b:a3:47:9a:a4:67:9d:5a:0e:61:1a:
39:51:e3:fc:ce:c7:d1:12:18:9f:99:80:9f:c1:3b:
e1:02:85:d2:01:9a:a1:8e:de:ed:d6:62:1d:1f:70:
17:76:0d:d0:0e:24:b0:60:d4:43:bd:10:34:22:14:
9d:85:ec:62:f3:b3:a9:cf:ce:9f:84:82:7f:80:fe:
3a:ab:fc:0f:60:72:ea:b3:60:ad:c9:e7:df:1a:17:
5f:a0:d1:7f:73:ea:c1:f8:af:5a:59:ef:53:70:09:
af:bb:85:6b:f9:89:f2:9e:05:0e:88:e1:27:63:50:
f1:96:8c:87:5f:1d:10:b5:45:bd:80:a3:0b:79:60:
d9:64:99:4d:e1:ce:54:35:18:6d:2b:9a:a2:71:ba:
6d:00:df:a4:29:b4:2a:60:93:e9:88:36:10:5a:0f:
15:18:6e:ee:b8:61:ed:54:9c:1a:b1:d0:c0:f0:05:
8c:ed:e9:fd:18:b5:60:c7:1b:09:72:ff:17:88:bc:
4f:29:aa:54:24:3b:3b:b0:f7:1b:37:14:6f:3c:30:
7c:d8:72:9a:ad:1a:86:53:19:09:00:d1:fc:33:d1:
12:9e:8d:62:d2:d3:71:c1:56:f0:9c:32:4b:82:48:
34:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:89:75:B8:B4:B3:69:7D:EB:B4:62:F2:63:0B:41:67:27:7C:E9:BE
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/Rol1uLSzaX3rtGLyYwtBZyd86b4.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
61:4c:14:46:5a:73:26:9c:3e:1d:ea:fb:44:7f:da:35:30:d0:
2e:cd:02:cd:4f:5a:d6:5d:35:c7:c4:91:06:a3:fb:48:ae:5a:
96:52:a5:6a:4f:00:48:37:71:cd:3e:0b:72:a5:32:1a:ea:16:
8c:9f:a4:66:a2:ec:09:c1:7a:6b:eb:4f:a7:05:4c:25:75:4e:
a1:dd:3f:69:90:bd:a9:f5:d6:e5:c4:42:b5:2d:47:d1:bc:c7:
9f:e1:ce:e6:a9:b6:35:d1:d3:c1:45:4f:d9:fc:f4:03:c0:4b:
11:bf:f3:44:a9:15:28:27:29:d5:ea:92:a8:5a:9c:09:4b:32:
01:ab:f1:3c:94:ed:45:7b:29:f8:1b:cf:0a:54:83:e4:bd:34:
3e:12:7d:1c:e3:70:4f:4f:a7:88:87:1a:95:51:03:fc:e5:df:
30:db:6a:2d:28:da:8b:ba:0f:71:3e:dc:d2:b3:c6:b8:5c:56:
bf:d2:b7:20:17:45:ac:51:ca:c5:31:62:e4:b6:34:d6:ba:1f:
90:c8:8f:db:fa:fd:e4:9e:53:a7:8a:15:09:bb:ca:80:55:8f:
bd:c8:aa:b6:9e:9d:45:a1:9d:42:07:ba:54:19:33:c6:e6:08:
35:2f:81:85:13:3e:ce:b1:e6:31:59:b2:1d:0f:27:73:d8:ac:
46:32:82:51
-----BEGIN CERTIFICATE-----
MIIEojCCA4qgAwIBAgICBjQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzFk
MTRlYmIyNTVkYzA1OGQ0YmZhNWE1MWM5M2Y3M2Y4MzBhYjg4ZjAeFw0yNDA4MDMx
NTU1MDNaFw0yNTA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKDQ2ODk3NUI4QjRCMzY5
N0RFQkI0NjJGMjYzMEI0MTY3Mjc3Q0U5QkUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDPzumE4uSToqqBxRKfIT33O997o0eapGedWg5hGjlR4/zOx9ES
GJ+ZgJ/BO+EChdIBmqGO3u3WYh0fcBd2DdAOJLBg1EO9EDQiFJ2F7GLzs6nPzp+E
gn+A/jqr/A9gcuqzYK3J598aF1+g0X9z6sH4r1pZ71NwCa+7hWv5ifKeBQ6I4Sdj
UPGWjIdfHRC1Rb2Aowt5YNlkmU3hzlQ1GG0rmqJxum0A36QptCpgk+mINhBaDxUY
bu64Ye1UnBqx0MDwBYzt6f0YtWDHGwly/xeIvE8pqlQkOzuw9xs3FG88MHzYcpqt
GoZTGQkA0fwz0RKejWLS03HBVvCcMkuCSDT/AgMBAAGjggG+MIIBujAdBgNVHQ4E
FgQURol1uLSzaX3rtGLyYwtBZyd86b4wHwYDVR0jBBgwFoAUcdFOuyVdwFjUv6Wl
HJP3P4MKuI8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL2NobG9lLnNvYm9ybm9zdC5uZXQvcnBraS9SSVBFLW5scnNz
Zi9jZEZPdXlWZHdGalV2NldsSEpQM1A0TUt1STguY3JsMGQGCCsGAQUFBwEBBFgw
VjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9jZEZPdXlWZHdGalV2NldsSEpQM1A0TUt1STguY2VyMA4GA1UdDwEB
/wQEAwIHgDBoBggrBgEFBQcBCwRcMFowWAYIKwYBBQUHMAuGTHJzeW5jOi8vY2hs
b2Uuc29ib3Jub3N0Lm5ldC9ycGtpL1JJUEUtbmxyc3NmL1JvbDF1TFN6YVgzcnRH
THlZd3RCWnlkODZiNC5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADC
aIEwDQYJKoZIhvcNAQELBQADggEBAGFMFEZacyacPh3q+0R/2jUw0C7NAs1PWtZd
NcfEkQaj+0iuWpZSpWpPAEg3cc0+C3KlMhrqFoyfpGai7AnBemvrT6cFTCV1TqHd
P2mQvan11uXEQrUtR9G8x5/hzuaptjXR08FFT9n89APASxG/80SpFSgnKdXqkqha
nAlLMgGr8TyU7UV7KfgbzwpUg+S9ND4SfRzjcE9Pp4iHGpVRA/zl3zDbai0o2ou6
D3E+3NKzxrhcVr/StyAXRaxRysUxYuS2NNa6H5DIj9v6/eSeU6eKFQm7yoBVj73I
qraenUWhnUIHulQZM8bmCDUvgYUTPs6x5jFZsh0PJ3PYrEYyglE=
-----END CERTIFICATE-----
Generated at Sat Aug 3 21:30:15 2024 by rpki-client on console-fra.rpki-client.org