Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/SzBB_f2XLCkDXQis98OxZzNyC1c.roa
File: SzBB_f2XLCkDXQis98OxZzNyC1c.roa (raw, json)
Hash identifier: QZsV8X8mRej3xM0XW8N49domoBVblbLfmcaDJpHtdv8=
Subject key identifier: 4B:30:41:FD:FD:97:2C:29:03:5D:08:AC:F7:C3:B1:67:33:72:0B:57
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0169
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/SzBB_f2XLCkDXQis98OxZzNyC1c.roa
Signing time: Wed 20 Mar 2024 07:55:03 +0000
ROA not before: Wed 20 Mar 2024 07:55:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 20 Mar 2024 11:55:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 361 (0x169)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Mar 20 07:55:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4B3041FDFD972C29035D08ACF7C3B16733720B57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:93:95:3d:11:b5:ec:80:08:23:56:df:a3:76:
06:53:8a:4a:ce:03:ff:57:7c:2a:b4:cf:5f:40:91:
73:d6:bd:ae:41:82:f9:ad:67:ce:33:2a:d6:c6:64:
88:1b:09:df:5d:24:49:9c:8d:7f:ec:98:cc:60:13:
b7:4c:17:e0:2c:6f:39:03:d3:e1:5c:ae:da:06:a6:
cb:4c:7d:1e:94:0a:ee:1f:0b:05:ee:76:6e:90:0a:
e7:8a:31:df:3b:5a:9f:91:dc:7b:52:ac:b0:b0:f7:
26:56:24:12:85:02:1f:1f:62:4c:ea:b6:32:56:ad:
9f:07:c9:7d:cf:ce:0b:a4:a9:5c:9d:f4:fb:6f:1e:
1d:2b:e7:6b:16:16:2f:59:87:8b:7b:44:58:7d:ba:
b6:f4:e2:3c:e9:3c:95:fe:89:fd:83:2c:21:22:17:
ba:4f:37:89:1d:2e:d6:71:c1:37:84:7d:d3:59:78:
21:9e:9f:83:d2:4c:50:57:60:36:74:af:6b:97:cd:
ec:79:c4:b7:f4:ce:45:df:9e:bc:fb:ed:2b:41:ba:
1e:42:3d:69:f8:16:3f:63:d2:48:68:53:3d:29:7e:
6d:cf:ac:3a:85:bf:bb:4b:d4:43:de:aa:5c:45:b0:
a5:74:b1:57:c3:d4:11:fe:4e:6e:d9:24:f0:c1:2a:
c4:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:30:41:FD:FD:97:2C:29:03:5D:08:AC:F7:C3:B1:67:33:72:0B:57
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/SzBB_f2XLCkDXQis98OxZzNyC1c.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:86:b3:52:0f:78:3c:d9:23:76:29:ee:e3:40:69:d9:aa:ba:
07:74:d5:bf:b9:30:90:70:35:c8:03:e1:e5:d6:f0:f2:07:5b:
a9:b7:03:b2:e6:81:4d:0b:02:55:22:af:06:41:a6:8d:d8:02:
b5:da:97:0c:c0:51:61:ce:ea:2f:7b:92:c0:4b:28:7d:14:20:
42:3d:6a:26:d0:dc:56:2d:1d:e9:16:b7:de:1b:ff:eb:d7:9e:
78:50:48:9a:e3:68:48:a5:33:81:05:7c:c1:5e:d6:9c:4e:78:
54:02:dc:70:c2:32:83:8e:8e:57:fa:a5:ec:94:44:66:07:f9:
a8:e8:6c:10:b0:01:3b:51:01:e2:82:05:06:d9:34:64:d8:5a:
d2:3c:0c:de:ce:6b:d7:69:bf:63:db:83:9a:aa:58:af:28:45:
c2:5f:25:20:1e:ff:f0:ba:03:c4:94:86:1f:2d:f6:e8:8a:55:
9e:a2:95:41:7c:29:21:49:9b:12:6b:78:ab:99:59:45:97:5d:
15:af:02:52:5d:f3:0c:b8:5a:52:27:9e:19:70:93:b8:79:fa:
bc:2c:27:2a:29:8d:85:3c:93:81:f7:24:27:ea:e8:a3:fa:71:
14:a2:08:b3:33:3e:cc:8f:55:a8:6c:be:ca:1c:2b:8c:36:57:
b5:49:8b:6e
-----BEGIN CERTIFICATE-----
MIIEojCCA4qgAwIBAgICAWkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzFk
MTRlYmIyNTVkYzA1OGQ0YmZhNWE1MWM5M2Y3M2Y4MzBhYjg4ZjAeFw0yNDAzMjAw
NzU1MDJaFw0yNTA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKDRCMzA0MUZERkQ5NzJD
MjkwMzVEMDhBQ0Y3QzNCMTY3MzM3MjBCNTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDMk5U9EbXsgAgjVt+jdgZTikrOA/9XfCq0z19AkXPWva5Bgvmt
Z84zKtbGZIgbCd9dJEmcjX/smMxgE7dMF+AsbzkD0+FcrtoGpstMfR6UCu4fCwXu
dm6QCueKMd87Wp+R3HtSrLCw9yZWJBKFAh8fYkzqtjJWrZ8HyX3PzgukqVyd9Ptv
Hh0r52sWFi9Zh4t7RFh9urb04jzpPJX+if2DLCEiF7pPN4kdLtZxwTeEfdNZeCGe
n4PSTFBXYDZ0r2uXzex5xLf0zkXfnrz77StBuh5CPWn4Fj9j0khoUz0pfm3PrDqF
v7tL1EPeqlxFsKV0sVfD1BH+Tm7ZJPDBKsTPAgMBAAGjggG+MIIBujAdBgNVHQ4E
FgQUSzBB/f2XLCkDXQis98OxZzNyC1cwHwYDVR0jBBgwFoAUcdFOuyVdwFjUv6Wl
HJP3P4MKuI8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL2NobG9lLnNvYm9ybm9zdC5uZXQvcnBraS9SSVBFLW5scnNz
Zi9jZEZPdXlWZHdGalV2NldsSEpQM1A0TUt1STguY3JsMGQGCCsGAQUFBwEBBFgw
VjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9jZEZPdXlWZHdGalV2NldsSEpQM1A0TUt1STguY2VyMA4GA1UdDwEB
/wQEAwIHgDBoBggrBgEFBQcBCwRcMFowWAYIKwYBBQUHMAuGTHJzeW5jOi8vY2hs
b2Uuc29ib3Jub3N0Lm5ldC9ycGtpL1JJUEUtbmxyc3NmL1N6QkJfZjJYTENrRFhR
aXM5OE94WnpOeUMxYy5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADC
aIEwDQYJKoZIhvcNAQELBQADggEBAI+Gs1IPeDzZI3Yp7uNAadmqugd01b+5MJBw
NcgD4eXW8PIHW6m3A7LmgU0LAlUirwZBpo3YArXalwzAUWHO6i97ksBLKH0UIEI9
aibQ3FYtHekWt94b/+vXnnhQSJrjaEilM4EFfMFe1pxOeFQC3HDCMoOOjlf6peyU
RGYH+ajobBCwATtRAeKCBQbZNGTYWtI8DN7Oa9dpv2Pbg5qqWK8oRcJfJSAe//C6
A8SUhh8t9uiKVZ6ilUF8KSFJmxJreKuZWUWXXRWvAlJd8wy4WlInnhlwk7h5+rws
JyopjYU8k4H3JCfq6KP6cRSiCLMzPsyPVahsvsocK4w2V7VJi24=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:55 2024 by rpki-client on console-fra.rpki-client.org