Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/WzoJmeGx5ISea7GTHRgdu-vYByk.roa
File: WzoJmeGx5ISea7GTHRgdu-vYByk.roa (raw, json)
Hash identifier: YFqI+aCJckRCd7OZNRiYPx04KVVm+zEYk9qArIt19Hw=
Subject key identifier: 5B:3A:09:99:E1:B1:E4:84:9E:6B:B1:93:1D:18:1D:BB:EB:D8:07:29
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 01D2
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/WzoJmeGx5ISea7GTHRgdu-vYByk.roa
Signing time: Sun 31 Mar 2024 23:55:04 +0000
ROA not before: Sun 31 Mar 2024 23:55:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Apr 2024 03:55:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 466 (0x1d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Mar 31 23:55:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5B3A0999E1B1E4849E6BB1931D181DBBEBD80729
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c9:9a:c0:61:82:a5:bd:3f:db:f8:10:b5:69:
cb:70:95:7c:0f:a5:4f:20:e9:ec:41:e3:00:af:9a:
bf:f6:d2:ba:02:a7:2e:31:25:0d:37:b0:61:97:fc:
fb:2b:dd:e9:85:a5:c0:2f:23:53:2e:d7:ad:0d:fb:
3b:83:ba:bb:d9:b8:c4:dd:d0:51:d1:fb:7e:60:83:
7d:53:c7:28:f2:5c:6d:94:e6:49:57:04:4b:ed:9e:
2d:74:c6:c3:85:13:86:82:5e:df:89:b8:76:72:2a:
96:4e:89:51:d1:2a:f3:f8:85:a0:91:17:4d:37:05:
ae:21:3f:a3:f6:47:5a:6b:72:13:a0:6b:20:69:37:
be:65:b4:30:87:09:99:9e:12:88:ae:3d:52:38:b6:
49:9a:48:4e:c4:2e:18:70:09:54:d3:90:11:6c:78:
81:75:d8:65:ad:ae:1d:4b:52:04:57:69:f8:fc:45:
81:a8:48:a9:df:03:7e:94:44:20:5b:e0:e6:61:20:
64:5c:61:70:4c:60:a8:88:0e:9f:02:91:a3:84:dd:
4c:68:d7:b6:f9:d2:81:85:fd:02:f7:83:d7:15:0c:
33:55:a7:25:da:32:3f:b5:1e:ed:ec:dd:f8:4a:70:
cf:e0:e8:7c:15:49:5a:22:ca:c3:9f:f8:b8:38:42:
c9:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:3A:09:99:E1:B1:E4:84:9E:6B:B1:93:1D:18:1D:BB:EB:D8:07:29
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/WzoJmeGx5ISea7GTHRgdu-vYByk.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
01:7b:8b:65:a2:96:bc:d3:02:db:ab:5a:67:14:f0:4b:c3:31:
de:c2:eb:34:cf:74:04:38:e2:8a:76:fc:b3:48:8c:3f:c0:eb:
f6:00:76:5c:27:bf:01:6b:a2:7c:66:d4:ef:6c:f8:f4:8c:fc:
f6:00:9b:d4:ae:e6:54:69:5a:ab:b5:18:11:89:93:97:be:85:
97:99:30:20:15:cc:77:cc:b5:8c:ac:5e:38:21:e0:88:98:df:
c7:d2:f9:81:1a:03:bb:f8:b3:09:6c:37:6f:37:5d:f7:69:fe:
52:e3:b7:f7:2c:d9:3e:9c:70:2f:0a:e7:97:8c:09:3e:40:74:
20:4c:f7:05:bb:a0:f8:f7:69:78:5d:42:2d:9d:6b:62:55:e9:
af:c6:a2:33:9e:16:49:52:3c:ac:58:dd:c9:e8:7e:54:02:3f:
a0:69:65:11:fe:44:80:e4:38:a9:39:20:4b:d9:d7:32:bd:57:
b7:1a:93:73:54:90:e7:58:60:c2:d9:8a:e4:5a:1b:1d:02:cc:
e0:aa:93:5d:58:42:46:a8:26:c5:83:97:15:18:8a:b5:31:46:
a0:51:99:61:50:0c:e7:7c:e4:94:5a:3d:a3:15:7e:e6:6b:63:
5c:cc:dd:ad:8b:ec:67:c5:87:6f:c6:65:bf:0d:6c:c5:19:d0:
0d:94:6b:87
-----BEGIN CERTIFICATE-----
MIIEojCCA4qgAwIBAgICAdIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzFk
MTRlYmIyNTVkYzA1OGQ0YmZhNWE1MWM5M2Y3M2Y4MzBhYjg4ZjAeFw0yNDAzMzEy
MzU1MDRaFw0yNTA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKDVCM0EwOTk5RTFCMUU0
ODQ5RTZCQjE5MzFEMTgxREJCRUJEODA3MjkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDLyZrAYYKlvT/b+BC1actwlXwPpU8g6exB4wCvmr/20roCpy4x
JQ03sGGX/Psr3emFpcAvI1Mu160N+zuDurvZuMTd0FHR+35gg31TxyjyXG2U5klX
BEvtni10xsOFE4aCXt+JuHZyKpZOiVHRKvP4haCRF003Ba4hP6P2R1prchOgayBp
N75ltDCHCZmeEoiuPVI4tkmaSE7ELhhwCVTTkBFseIF12GWtrh1LUgRXafj8RYGo
SKnfA36URCBb4OZhIGRcYXBMYKiIDp8CkaOE3Uxo17b50oGF/QL3g9cVDDNVpyXa
Mj+1Hu3s3fhKcM/g6HwVSVoiysOf+Lg4QsnPAgMBAAGjggG+MIIBujAdBgNVHQ4E
FgQUWzoJmeGx5ISea7GTHRgdu+vYBykwHwYDVR0jBBgwFoAUcdFOuyVdwFjUv6Wl
HJP3P4MKuI8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL2NobG9lLnNvYm9ybm9zdC5uZXQvcnBraS9SSVBFLW5scnNz
Zi9jZEZPdXlWZHdGalV2NldsSEpQM1A0TUt1STguY3JsMGQGCCsGAQUFBwEBBFgw
VjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9jZEZPdXlWZHdGalV2NldsSEpQM1A0TUt1STguY2VyMA4GA1UdDwEB
/wQEAwIHgDBoBggrBgEFBQcBCwRcMFowWAYIKwYBBQUHMAuGTHJzeW5jOi8vY2hs
b2Uuc29ib3Jub3N0Lm5ldC9ycGtpL1JJUEUtbmxyc3NmL1d6b0ptZUd4NUlTZWE3
R1RIUmdkdS12WUJ5ay5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADC
aIEwDQYJKoZIhvcNAQELBQADggEBAAF7i2WilrzTAturWmcU8EvDMd7C6zTPdAQ4
4op2/LNIjD/A6/YAdlwnvwFronxm1O9s+PSM/PYAm9Su5lRpWqu1GBGJk5e+hZeZ
MCAVzHfMtYysXjgh4IiY38fS+YEaA7v4swlsN283Xfdp/lLjt/cs2T6ccC8K55eM
CT5AdCBM9wW7oPj3aXhdQi2da2JV6a/GojOeFklSPKxY3cnoflQCP6BpZRH+RIDk
OKk5IEvZ1zK9V7cak3NUkOdYYMLZiuRaGx0CzOCqk11YQkaoJsWDlxUYirUxRqBR
mWFQDOd85JRaPaMVfuZrY1zM3a2L7GfFh2/GZb8NbMUZ0A2Ua4c=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:55 2024 by rpki-client on console-fra.rpki-client.org