Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/VUQe9pPkZW4Yt2Euewjmur0Yodw.roa
File: VUQe9pPkZW4Yt2Euewjmur0Yodw.roa (raw, json)
Hash identifier: kdQ9XIbXH+Uq/usT/QhZdmsdqcxKAm0DoWBiMnh0+kw=
Subject key identifier: 55:44:1E:F6:93:E4:65:6E:18:B7:61:2E:7B:08:E6:BA:BD:18:A1:DC
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0277
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/VUQe9pPkZW4Yt2Euewjmur0Yodw.roa
Signing time: Fri 19 Apr 2024 07:55:03 +0000
ROA not before: Fri 19 Apr 2024 07:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 19 Apr 2024 11:55:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 631 (0x277)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Apr 19 07:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=55441EF693E4656E18B7612E7B08E6BABD18A1DC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a4:ff:4a:a3:e3:8c:2e:7e:cc:d1:f6:f8:a4:
b0:b6:be:ae:a4:e1:3f:1d:42:c1:e2:5d:71:f4:d2:
66:b4:85:9b:d7:b3:0d:3f:c9:56:49:2b:d9:af:1b:
48:5c:ba:c4:65:be:d7:80:4a:53:b2:26:ac:cf:dc:
45:65:2d:81:b0:a3:76:f0:60:d1:22:da:f0:75:51:
85:77:f5:38:4a:1f:ec:fe:e0:23:63:43:76:32:d8:
c3:1b:8f:d4:0b:ae:5b:a5:bf:45:f7:a0:7f:9d:8f:
6c:28:78:d6:97:cb:96:fd:1d:cc:70:6c:36:8e:9a:
f3:7d:6e:db:5d:37:00:14:e8:6b:af:25:e7:e5:c4:
56:ec:61:16:ed:6f:fe:62:99:35:0b:aa:63:65:55:
b4:26:6d:b5:83:77:83:f4:d1:45:2b:0b:06:f3:bb:
69:4e:b5:5a:bf:fb:56:cd:41:03:f6:a7:73:b0:1c:
05:bd:ad:26:b3:f5:9f:a0:4e:a7:f5:c8:4d:dc:23:
cf:da:6b:58:db:e8:5b:5c:a4:2b:44:bf:fe:ce:dc:
23:6d:71:b8:28:d7:1f:34:a7:79:48:ed:4c:c3:9d:
82:04:61:a9:3a:c2:c2:f6:01:2a:b4:ea:d0:1f:a4:
6b:6d:48:9a:5e:82:a1:d7:9b:17:23:95:11:26:9b:
8f:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:44:1E:F6:93:E4:65:6E:18:B7:61:2E:7B:08:E6:BA:BD:18:A1:DC
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/VUQe9pPkZW4Yt2Euewjmur0Yodw.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
30:e1:ef:b1:12:39:a2:35:68:a6:85:4b:62:ba:27:ba:08:b7:
55:05:da:e7:a0:b5:e6:54:9b:69:18:5a:ac:e5:c0:13:5c:9c:
e8:65:ff:03:3b:e9:a8:10:8f:bd:c4:04:46:97:76:2d:4e:17:
b4:37:2b:b6:52:88:c6:fb:75:58:c2:55:b1:60:a3:df:93:87:
d7:4d:e6:aa:e0:4e:b7:c5:86:5b:ed:28:4f:92:6a:93:b4:f0:
87:c7:b3:13:d6:b1:4a:a7:50:6c:31:a6:b9:23:43:9d:7f:49:
8d:14:eb:87:5f:33:cc:0b:2e:86:23:5a:8e:86:53:7a:34:cc:
7c:21:14:f8:30:28:4a:a7:68:94:c5:1a:d7:31:39:ef:3d:64:
9d:5c:56:ae:8b:ed:95:9f:38:e3:f7:fa:cf:9f:00:5e:d4:db:
ba:d3:15:45:55:15:b5:ca:c7:ab:03:c4:fc:0f:99:f8:9f:2c:
d4:21:55:0f:39:f4:35:3c:d6:d8:58:86:97:a9:d8:06:03:89:
89:21:e0:19:10:4c:be:ff:c4:ab:31:c9:7a:dc:c9:a9:ca:05:
b0:62:5b:67:4e:5a:cc:60:b5:76:66:d8:6b:6b:ed:ca:88:63:
8b:30:ee:b5:e0:fc:ca:dc:83:fa:da:7a:bf:c9:e7:5a:b0:08:
49:e8:26:65
-----BEGIN CERTIFICATE-----
MIIEojCCA4qgAwIBAgICAncwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzFk
MTRlYmIyNTVkYzA1OGQ0YmZhNWE1MWM5M2Y3M2Y4MzBhYjg4ZjAeFw0yNDA0MTkw
NzU1MDNaFw0yNTA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKDU1NDQxRUY2OTNFNDY1
NkUxOEI3NjEyRTdCMDhFNkJBQkQxOEExREMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDGpP9Ko+OMLn7M0fb4pLC2vq6k4T8dQsHiXXH00ma0hZvXsw0/
yVZJK9mvG0hcusRlvteASlOyJqzP3EVlLYGwo3bwYNEi2vB1UYV39ThKH+z+4CNj
Q3Yy2MMbj9QLrlulv0X3oH+dj2woeNaXy5b9HcxwbDaOmvN9bttdNwAU6GuvJefl
xFbsYRbtb/5imTULqmNlVbQmbbWDd4P00UUrCwbzu2lOtVq/+1bNQQP2p3OwHAW9
rSaz9Z+gTqf1yE3cI8/aa1jb6FtcpCtEv/7O3CNtcbgo1x80p3lI7UzDnYIEYak6
wsL2ASq06tAfpGttSJpegqHXmxcjlREmm4/LAgMBAAGjggG+MIIBujAdBgNVHQ4E
FgQUVUQe9pPkZW4Yt2Euewjmur0YodwwHwYDVR0jBBgwFoAUcdFOuyVdwFjUv6Wl
HJP3P4MKuI8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL2NobG9lLnNvYm9ybm9zdC5uZXQvcnBraS9SSVBFLW5scnNz
Zi9jZEZPdXlWZHdGalV2NldsSEpQM1A0TUt1STguY3JsMGQGCCsGAQUFBwEBBFgw
VjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9jZEZPdXlWZHdGalV2NldsSEpQM1A0TUt1STguY2VyMA4GA1UdDwEB
/wQEAwIHgDBoBggrBgEFBQcBCwRcMFowWAYIKwYBBQUHMAuGTHJzeW5jOi8vY2hs
b2Uuc29ib3Jub3N0Lm5ldC9ycGtpL1JJUEUtbmxyc3NmL1ZVUWU5cFBrWlc0WXQy
RXVld2ptdXIwWW9kdy5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADC
aIEwDQYJKoZIhvcNAQELBQADggEBADDh77ESOaI1aKaFS2K6J7oIt1UF2uegteZU
m2kYWqzlwBNcnOhl/wM76agQj73EBEaXdi1OF7Q3K7ZSiMb7dVjCVbFgo9+Th9dN
5qrgTrfFhlvtKE+SapO08IfHsxPWsUqnUGwxprkjQ51/SY0U64dfM8wLLoYjWo6G
U3o0zHwhFPgwKEqnaJTFGtcxOe89ZJ1cVq6L7ZWfOOP3+s+fAF7U27rTFUVVFbXK
x6sDxPwPmfifLNQhVQ859DU81thYhpep2AYDiYkh4BkQTL7/xKsxyXrcyanKBbBi
W2dOWsxgtXZm2Gtr7cqIY4sw7rXg/Mrcg/raer/J51qwCEnoJmU=
-----END CERTIFICATE-----
Generated at Fri Apr 19 15:26:24 2024 by rpki-client on console-ams.rpki-client.org