Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/W0H2Lu6mtvOwKOEF4hQwCb012VA.roa
File: W0H2Lu6mtvOwKOEF4hQwCb012VA.roa (raw, json)
Hash identifier: yhkuV3AS7q7vXO+wBgFGt9DsFgXMdzzFFw8DHY5AI1E=
Subject key identifier: 5B:41:F6:2E:EE:A6:B6:F3:B0:28:E1:05:E2:14:30:09:BD:35:D9:50
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 082F
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/W0H2Lu6mtvOwKOEF4hQwCb012VA.roa
Signing time: Sat 28 Sep 2024 23:55:02 +0000
ROA not before: Sat 28 Sep 2024 23:55:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 29 Sep 2024 03:55:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2095 (0x82f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Sep 28 23:55:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5B41F62EEEA6B6F3B028E105E2143009BD35D950
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a0:4d:5b:5b:21:55:fb:e7:eb:a9:32:53:37:
97:f5:91:10:9c:de:32:b4:0f:16:f2:76:4e:97:5a:
03:dd:b2:cf:b5:56:80:32:75:2e:bc:59:88:2b:27:
c7:c8:2a:a2:08:63:9a:ae:ce:53:e9:bd:8b:18:ce:
39:9d:f1:8d:02:1a:fc:93:a6:3b:18:5a:c2:a1:22:
40:f2:54:cd:49:aa:a4:63:82:f9:5a:88:b9:c0:be:
b7:c2:57:a8:d1:35:c4:fe:13:d5:0c:49:0a:d1:1c:
f7:3d:e5:a7:5a:2f:30:29:90:43:04:5b:f1:de:17:
d6:4a:e0:32:0b:9d:77:69:98:39:36:7f:18:06:68:
4d:97:03:10:a0:eb:3d:af:03:0f:27:81:4c:3d:9a:
f8:8d:8b:71:d3:3b:8d:87:1e:4d:56:1b:be:74:cf:
a9:91:ff:e2:e1:24:9a:13:70:03:54:10:40:62:a7:
69:48:52:aa:60:17:8f:4f:bd:76:60:21:03:75:36:
9f:cc:96:48:6f:e7:b6:ed:0c:41:71:a6:06:2b:6f:
47:e0:b2:ea:92:08:53:0d:b4:e4:d2:9b:c7:58:4b:
f8:fd:e0:94:67:cf:42:c0:00:42:13:50:aa:1c:e0:
85:d7:d2:02:df:1f:6e:f2:02:c0:94:45:e5:7b:2e:
90:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:41:F6:2E:EE:A6:B6:F3:B0:28:E1:05:E2:14:30:09:BD:35:D9:50
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/W0H2Lu6mtvOwKOEF4hQwCb012VA.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:d3:62:24:6d:1f:7d:91:7c:04:52:36:6d:e2:ae:cf:d4:19:
eb:22:b6:3e:a7:c0:b5:8c:70:d0:5d:d5:26:53:9c:89:92:9d:
bc:ba:13:cd:d6:6b:91:69:b3:90:9b:d2:cd:1e:50:47:38:59:
29:83:6f:6a:1a:f1:67:65:bd:ea:10:54:30:5f:93:21:af:1e:
81:07:ec:65:a3:01:52:86:7f:57:ea:2f:fe:21:ee:4a:d5:93:
5e:12:09:a7:0f:94:5a:af:3a:19:41:47:20:e1:bd:3d:df:32:
d5:b0:50:e0:35:d8:88:91:ba:02:fe:99:65:06:15:6c:a8:3a:
4e:6c:a9:22:8e:7d:6f:aa:58:b9:40:24:85:e2:d8:66:e5:d1:
c3:e2:cb:9f:ea:58:b8:ab:b1:9a:35:36:b8:2a:06:8d:52:ca:
2a:1e:90:41:18:f5:c7:6d:b3:59:3b:5f:18:7d:32:80:b2:24:
d7:5c:3c:b2:df:51:68:ed:76:12:15:3b:9a:00:b8:c0:9d:b2:
fe:5c:ab:13:0a:48:ea:e1:33:da:7e:b0:b4:47:2f:1a:f3:d5:
6f:7e:f2:50:d3:99:60:d3:cc:47:df:45:e4:f8:f9:f4:c4:1b:
e1:d1:cf:ac:32:a0:55:38:a8:cc:40:9c:a0:a8:bc:a4:62:a2:
c7:d5:e7:6f
-----BEGIN CERTIFICATE-----
MIIEojCCA4qgAwIBAgICCC8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzFk
MTRlYmIyNTVkYzA1OGQ0YmZhNWE1MWM5M2Y3M2Y4MzBhYjg4ZjAeFw0yNDA5Mjgy
MzU1MDJaFw0yNTA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKDVCNDFGNjJFRUVBNkI2
RjNCMDI4RTEwNUUyMTQzMDA5QkQzNUQ5NTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCooE1bWyFV++frqTJTN5f1kRCc3jK0Dxbydk6XWgPdss+1VoAy
dS68WYgrJ8fIKqIIY5quzlPpvYsYzjmd8Y0CGvyTpjsYWsKhIkDyVM1JqqRjgvla
iLnAvrfCV6jRNcT+E9UMSQrRHPc95adaLzApkEMEW/HeF9ZK4DILnXdpmDk2fxgG
aE2XAxCg6z2vAw8ngUw9mviNi3HTO42HHk1WG750z6mR/+LhJJoTcANUEEBip2lI
UqpgF49PvXZgIQN1Np/Mlkhv57btDEFxpgYrb0fgsuqSCFMNtOTSm8dYS/j94JRn
z0LAAEITUKoc4IXX0gLfH27yAsCUReV7LpC5AgMBAAGjggG+MIIBujAdBgNVHQ4E
FgQUW0H2Lu6mtvOwKOEF4hQwCb012VAwHwYDVR0jBBgwFoAUcdFOuyVdwFjUv6Wl
HJP3P4MKuI8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL2NobG9lLnNvYm9ybm9zdC5uZXQvcnBraS9SSVBFLW5scnNz
Zi9jZEZPdXlWZHdGalV2NldsSEpQM1A0TUt1STguY3JsMGQGCCsGAQUFBwEBBFgw
VjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9jZEZPdXlWZHdGalV2NldsSEpQM1A0TUt1STguY2VyMA4GA1UdDwEB
/wQEAwIHgDBoBggrBgEFBQcBCwRcMFowWAYIKwYBBQUHMAuGTHJzeW5jOi8vY2hs
b2Uuc29ib3Jub3N0Lm5ldC9ycGtpL1JJUEUtbmxyc3NmL1cwSDJMdTZtdHZPd0tP
RUY0aFF3Q2IwMTJWQS5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADC
aIEwDQYJKoZIhvcNAQELBQADggEBAGrTYiRtH32RfARSNm3irs/UGesitj6nwLWM
cNBd1SZTnImSnby6E83Wa5Fps5Cb0s0eUEc4WSmDb2oa8WdlveoQVDBfkyGvHoEH
7GWjAVKGf1fqL/4h7krVk14SCacPlFqvOhlBRyDhvT3fMtWwUOA12IiRugL+mWUG
FWyoOk5sqSKOfW+qWLlAJIXi2Gbl0cPiy5/qWLirsZo1NrgqBo1SyioekEEY9cdt
s1k7Xxh9MoCyJNdcPLLfUWjtdhIVO5oAuMCdsv5cqxMKSOrhM9p+sLRHLxrz1W9+
8lDTmWDTzEffReT4+fTEG+HRz6wyoFU4qMxAnKCovKRiosfV528=
-----END CERTIFICATE-----
Generated at Sun Sep 29 04:46:50 2024 by rpki-client on console-fra.rpki-client.org