Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/W6uKoAOOXPjBFkIe8HMqQYrOnhg.roa
File: W6uKoAOOXPjBFkIe8HMqQYrOnhg.roa (raw, json)
Hash identifier: 411YKcsDrYpPbhigKQj0mw8JzmqviuN6k59CViyf+ps=
Subject key identifier: 5B:AB:8A:A0:03:8E:5C:F8:C1:16:42:1E:F0:73:2A:41:8A:CE:9E:18
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0193
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/W6uKoAOOXPjBFkIe8HMqQYrOnhg.roa
Signing time: Sun 24 Mar 2024 23:55:03 +0000
ROA not before: Sun 24 Mar 2024 23:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 25 Mar 2024 03:55:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 403 (0x193)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Mar 24 23:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5BAB8AA0038E5CF8C116421EF0732A418ACE9E18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:46:d4:39:5f:44:c4:81:0f:f1:11:76:0d:7c:
fb:5c:5f:14:37:04:5e:ad:ea:77:ee:e3:e8:9f:c3:
79:a9:3d:c4:6e:db:24:00:09:56:97:55:ff:7a:c1:
9b:c7:67:04:42:5f:9e:95:cb:6d:fe:b1:ec:2e:07:
97:0e:a4:2c:8d:2a:9c:60:57:3f:c0:6c:88:ba:a1:
ba:a4:10:9e:6d:2f:85:52:e3:25:f6:ed:0a:e5:bd:
7b:62:5f:7f:8d:dd:90:11:e9:81:b7:34:0c:08:8b:
3c:03:69:a2:63:cf:15:74:3f:7a:da:b3:db:84:64:
22:cc:6e:47:6d:dc:09:ce:c4:f7:b7:b8:72:3f:01:
96:60:0c:a4:60:00:ae:b7:43:ce:36:10:44:81:82:
07:70:f6:87:e9:6d:60:d5:46:69:b5:8b:87:b5:3d:
d4:96:67:b7:c8:8b:5b:75:a7:15:c5:47:56:85:be:
4e:ec:0c:ad:f1:39:0f:ba:1f:55:8b:8a:de:cc:2e:
9e:1f:f0:10:b1:46:a4:28:02:b5:eb:9a:35:06:86:
d2:f5:5a:ee:28:a7:ee:9b:63:32:35:ba:51:99:07:
1c:3a:5a:18:26:1f:52:f8:e7:91:94:b1:e1:6d:9f:
20:15:8b:bb:d5:14:f0:7a:17:cc:0d:98:03:ce:e0:
e0:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:AB:8A:A0:03:8E:5C:F8:C1:16:42:1E:F0:73:2A:41:8A:CE:9E:18
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/W6uKoAOOXPjBFkIe8HMqQYrOnhg.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
d0:a4:83:c1:f2:c1:54:3d:18:a3:91:0a:8b:da:45:4e:64:6d:
d6:eb:18:e8:21:63:79:45:8e:2c:ea:e0:d3:30:a8:a2:b2:b6:
68:2f:2f:ef:51:24:51:ee:99:9a:ee:56:1b:6c:95:93:d6:93:
d6:f3:90:2a:52:10:27:23:ba:11:ce:94:f8:0f:82:26:82:43:
b0:35:b5:57:b2:59:e6:bf:b1:76:47:bf:9c:ba:6a:1d:3a:cb:
22:28:61:27:be:ce:45:5b:d2:b4:9e:2c:31:9a:dd:06:c7:16:
1f:60:83:e4:32:0d:70:77:ed:fd:2c:99:d4:44:78:a3:c9:03:
42:aa:5f:e9:cf:9e:2e:53:7d:3e:17:dd:f8:05:2f:c4:38:6e:
b2:26:39:6a:b0:db:1a:85:88:45:fb:61:5c:ce:8f:a2:81:73:
3f:d8:ff:01:14:3b:ab:65:60:df:28:1f:3f:5a:26:c2:f5:73:
b1:f1:d3:a5:7f:69:3c:1c:21:4c:f5:e9:b9:89:45:11:48:13:
0b:55:9f:31:5b:3e:ff:3e:c8:76:2e:55:8f:9b:c7:c6:d4:43:
a8:ae:87:9c:65:4c:3e:83:5b:4e:a1:4b:d8:ac:9a:8c:fa:7f:
e5:a3:e9:a4:c0:ed:ad:4c:c9:0c:f3:0c:4e:4f:90:2d:5c:d9:
d1:c9:59:35
-----BEGIN CERTIFICATE-----
MIIEojCCA4qgAwIBAgICAZMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzFk
MTRlYmIyNTVkYzA1OGQ0YmZhNWE1MWM5M2Y3M2Y4MzBhYjg4ZjAeFw0yNDAzMjQy
MzU1MDNaFw0yNTA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKDVCQUI4QUEwMDM4RTVD
RjhDMTE2NDIxRUYwNzMyQTQxOEFDRTlFMTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC+RtQ5X0TEgQ/xEXYNfPtcXxQ3BF6t6nfu4+ifw3mpPcRu2yQA
CVaXVf96wZvHZwRCX56Vy23+sewuB5cOpCyNKpxgVz/AbIi6obqkEJ5tL4VS4yX2
7QrlvXtiX3+N3ZAR6YG3NAwIizwDaaJjzxV0P3ras9uEZCLMbkdt3AnOxPe3uHI/
AZZgDKRgAK63Q842EESBggdw9ofpbWDVRmm1i4e1PdSWZ7fIi1t1pxXFR1aFvk7s
DK3xOQ+6H1WLit7MLp4f8BCxRqQoArXrmjUGhtL1Wu4op+6bYzI1ulGZBxw6Whgm
H1L455GUseFtnyAVi7vVFPB6F8wNmAPO4OBjAgMBAAGjggG+MIIBujAdBgNVHQ4E
FgQUW6uKoAOOXPjBFkIe8HMqQYrOnhgwHwYDVR0jBBgwFoAUcdFOuyVdwFjUv6Wl
HJP3P4MKuI8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL2NobG9lLnNvYm9ybm9zdC5uZXQvcnBraS9SSVBFLW5scnNz
Zi9jZEZPdXlWZHdGalV2NldsSEpQM1A0TUt1STguY3JsMGQGCCsGAQUFBwEBBFgw
VjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9jZEZPdXlWZHdGalV2NldsSEpQM1A0TUt1STguY2VyMA4GA1UdDwEB
/wQEAwIHgDBoBggrBgEFBQcBCwRcMFowWAYIKwYBBQUHMAuGTHJzeW5jOi8vY2hs
b2Uuc29ib3Jub3N0Lm5ldC9ycGtpL1JJUEUtbmxyc3NmL1c2dUtvQU9PWFBqQkZr
SWU4SE1xUVlyT25oZy5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADC
aIEwDQYJKoZIhvcNAQELBQADggEBANCkg8HywVQ9GKORCovaRU5kbdbrGOghY3lF
jizq4NMwqKKytmgvL+9RJFHumZruVhtslZPWk9bzkCpSECcjuhHOlPgPgiaCQ7A1
tVeyWea/sXZHv5y6ah06yyIoYSe+zkVb0rSeLDGa3QbHFh9gg+QyDXB37f0smdRE
eKPJA0KqX+nPni5TfT4X3fgFL8Q4brImOWqw2xqFiEX7YVzOj6KBcz/Y/wEUO6tl
YN8oHz9aJsL1c7Hx06V/aTwcIUz16bmJRRFIEwtVnzFbPv8+yHYuVY+bx8bUQ6iu
h5xlTD6DW06hS9ismoz6f+Wj6aTA7a1MyQzzDE5PkC1c2dHJWTU=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:55 2024 by rpki-client on console-fra.rpki-client.org