Route Origin Authorization

$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/X1BrC3rpY9ou4e32KePy6NRcb2s.roa
File:                     X1BrC3rpY9ou4e32KePy6NRcb2s.roa (raw, json)
Hash identifier:          fmikp4MMvLKWK8yQ5Tbe2S6XVR2x4Y+OAshF+oygNCU=
Subject key identifier:   5F:50:6B:0B:7A:E9:63:DA:2E:E1:ED:F6:29:E3:F2:E8:D4:5C:6F:6B
Certificate issuer:       /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial:       08C2
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access:      rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/X1BrC3rpY9ou4e32KePy6NRcb2s.roa
Signing time:             Tue 15 Oct 2024 07:55:03 +0000
ROA not before:           Tue 15 Oct 2024 07:55:03 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     15562
IP address blocks:        194.104.129.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 15 Oct 2024 11:55:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2242 (0x8c2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
        Validity
            Not Before: Oct 15 07:55:03 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=5F506B0B7AE963DA2EE1EDF629E3F2E8D45C6F6B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:04:0d:06:1f:5b:2c:73:a1:90:26:6d:d3:a5:
                    55:6f:d5:45:04:4b:82:43:dc:83:c2:1a:14:f1:dc:
                    8a:b2:4f:0f:49:61:25:d8:7b:46:8b:9f:41:01:26:
                    b1:af:7f:d2:a6:e6:3e:96:44:a2:10:3e:8d:0f:9b:
                    be:16:da:36:4d:10:52:2f:89:ab:5f:99:f9:30:50:
                    8b:1d:94:bc:f5:d5:1e:e4:cb:d7:63:dc:22:10:1c:
                    44:f0:88:5d:a3:d3:24:0a:64:3a:5b:f1:39:b1:a1:
                    6f:2b:6e:1f:03:86:03:be:37:6f:c2:b8:10:67:48:
                    ad:b2:ba:de:1a:eb:75:50:ba:1b:bf:5c:01:11:8f:
                    15:c4:a8:65:a4:04:30:86:aa:21:dd:36:77:5b:82:
                    d8:b1:bc:26:0f:c4:88:e7:8b:33:48:4f:6a:ea:e5:
                    19:d0:59:c9:a3:4f:35:2b:51:c9:05:32:49:f9:05:
                    ad:3a:7d:c6:fe:b2:ad:18:41:f3:0f:0b:bd:62:82:
                    2d:92:a9:44:d4:81:85:7c:03:e0:9a:6e:82:7a:23:
                    9d:48:26:ff:99:40:a1:d2:22:81:11:0b:04:34:db:
                    64:73:e9:d0:1e:7d:d2:9e:57:ad:5c:f7:f1:89:e3:
                    cb:b3:36:5f:e2:94:96:22:06:42:8e:eb:51:f7:dd:
                    74:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:50:6B:0B:7A:E9:63:DA:2E:E1:ED:F6:29:E3:F2:E8:D4:5C:6F:6B
            X509v3 Authority Key Identifier:
                keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/X1BrC3rpY9ou4e32KePy6NRcb2s.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.104.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:74:fb:c4:6c:73:d1:57:05:60:f8:40:84:bf:6f:2d:c7:13:
         0c:13:3a:be:9d:bb:7e:6e:ca:23:a8:48:18:3e:0e:54:e8:86:
         f9:be:8b:fe:f1:e5:5d:0b:ab:44:45:1a:c3:9f:b9:43:db:d6:
         5d:c7:8c:46:4f:8b:2b:89:e3:f2:de:76:a3:92:81:f8:9d:e4:
         ce:80:4d:6d:83:45:63:fb:8d:d4:2a:93:ba:cb:09:0d:0e:62:
         79:de:af:a9:0c:fa:3c:7a:1d:de:fe:46:75:d7:e5:2f:9b:ac:
         37:9f:90:83:ae:74:85:0f:2f:5a:51:1a:28:43:93:57:8c:d8:
         6d:51:b3:b9:59:72:12:4d:49:ad:13:07:f9:b1:84:0d:13:51:
         f3:8f:03:4c:25:c0:3c:67:53:fc:7c:54:97:f1:7b:57:16:9e:
         19:48:be:26:6b:5f:a5:69:7b:d3:2c:8b:5e:71:6d:50:0e:6e:
         97:5b:af:2f:e8:95:bd:6d:ba:2b:b9:3b:35:10:4e:49:c4:3b:
         fd:45:dc:79:a2:f9:52:b7:33:99:8d:9f:a6:a3:ee:f8:b7:6a:
         72:31:b1:27:4d:3f:7c:59:d6:d0:4d:95:67:27:34:d9:fa:e3:
         ca:29:d4:a4:12:3e:93:f6:3d:df:ca:60:c4:74:52:6b:a9:4c:
         a6:64:5c:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 15 14:28:58 2024 by rpki-client on console-fra.rpki-client.org