Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/X1BrC3rpY9ou4e32KePy6NRcb2s.roa
File: X1BrC3rpY9ou4e32KePy6NRcb2s.roa (raw, json)
Hash identifier: fmikp4MMvLKWK8yQ5Tbe2S6XVR2x4Y+OAshF+oygNCU=
Subject key identifier: 5F:50:6B:0B:7A:E9:63:DA:2E:E1:ED:F6:29:E3:F2:E8:D4:5C:6F:6B
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 08C2
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/X1BrC3rpY9ou4e32KePy6NRcb2s.roa
Signing time: Tue 15 Oct 2024 07:55:03 +0000
ROA not before: Tue 15 Oct 2024 07:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 15 Oct 2024 11:55:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2242 (0x8c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Oct 15 07:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5F506B0B7AE963DA2EE1EDF629E3F2E8D45C6F6B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:04:0d:06:1f:5b:2c:73:a1:90:26:6d:d3:a5:
55:6f:d5:45:04:4b:82:43:dc:83:c2:1a:14:f1:dc:
8a:b2:4f:0f:49:61:25:d8:7b:46:8b:9f:41:01:26:
b1:af:7f:d2:a6:e6:3e:96:44:a2:10:3e:8d:0f:9b:
be:16:da:36:4d:10:52:2f:89:ab:5f:99:f9:30:50:
8b:1d:94:bc:f5:d5:1e:e4:cb:d7:63:dc:22:10:1c:
44:f0:88:5d:a3:d3:24:0a:64:3a:5b:f1:39:b1:a1:
6f:2b:6e:1f:03:86:03:be:37:6f:c2:b8:10:67:48:
ad:b2:ba:de:1a:eb:75:50:ba:1b:bf:5c:01:11:8f:
15:c4:a8:65:a4:04:30:86:aa:21:dd:36:77:5b:82:
d8:b1:bc:26:0f:c4:88:e7:8b:33:48:4f:6a:ea:e5:
19:d0:59:c9:a3:4f:35:2b:51:c9:05:32:49:f9:05:
ad:3a:7d:c6:fe:b2:ad:18:41:f3:0f:0b:bd:62:82:
2d:92:a9:44:d4:81:85:7c:03:e0:9a:6e:82:7a:23:
9d:48:26:ff:99:40:a1:d2:22:81:11:0b:04:34:db:
64:73:e9:d0:1e:7d:d2:9e:57:ad:5c:f7:f1:89:e3:
cb:b3:36:5f:e2:94:96:22:06:42:8e:eb:51:f7:dd:
74:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:50:6B:0B:7A:E9:63:DA:2E:E1:ED:F6:29:E3:F2:E8:D4:5C:6F:6B
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/X1BrC3rpY9ou4e32KePy6NRcb2s.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
07:74:fb:c4:6c:73:d1:57:05:60:f8:40:84:bf:6f:2d:c7:13:
0c:13:3a:be:9d:bb:7e:6e:ca:23:a8:48:18:3e:0e:54:e8:86:
f9:be:8b:fe:f1:e5:5d:0b:ab:44:45:1a:c3:9f:b9:43:db:d6:
5d:c7:8c:46:4f:8b:2b:89:e3:f2:de:76:a3:92:81:f8:9d:e4:
ce:80:4d:6d:83:45:63:fb:8d:d4:2a:93:ba:cb:09:0d:0e:62:
79:de:af:a9:0c:fa:3c:7a:1d:de:fe:46:75:d7:e5:2f:9b:ac:
37:9f:90:83:ae:74:85:0f:2f:5a:51:1a:28:43:93:57:8c:d8:
6d:51:b3:b9:59:72:12:4d:49:ad:13:07:f9:b1:84:0d:13:51:
f3:8f:03:4c:25:c0:3c:67:53:fc:7c:54:97:f1:7b:57:16:9e:
19:48:be:26:6b:5f:a5:69:7b:d3:2c:8b:5e:71:6d:50:0e:6e:
97:5b:af:2f:e8:95:bd:6d:ba:2b:b9:3b:35:10:4e:49:c4:3b:
fd:45:dc:79:a2:f9:52:b7:33:99:8d:9f:a6:a3:ee:f8:b7:6a:
72:31:b1:27:4d:3f:7c:59:d6:d0:4d:95:67:27:34:d9:fa:e3:
ca:29:d4:a4:12:3e:93:f6:3d:df:ca:60:c4:74:52:6b:a9:4c:
a6:64:5c:88
-----BEGIN CERTIFICATE-----
MIIEojCCA4qgAwIBAgICCMIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzFk
MTRlYmIyNTVkYzA1OGQ0YmZhNWE1MWM5M2Y3M2Y4MzBhYjg4ZjAeFw0yNDEwMTUw
NzU1MDNaFw0yNTA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKDVGNTA2QjBCN0FFOTYz
REEyRUUxRURGNjI5RTNGMkU4RDQ1QzZGNkIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDABA0GH1ssc6GQJm3TpVVv1UUES4JD3IPCGhTx3IqyTw9JYSXY
e0aLn0EBJrGvf9Km5j6WRKIQPo0Pm74W2jZNEFIviatfmfkwUIsdlLz11R7ky9dj
3CIQHETwiF2j0yQKZDpb8TmxoW8rbh8DhgO+N2/CuBBnSK2yut4a63VQuhu/XAER
jxXEqGWkBDCGqiHdNndbgtixvCYPxIjnizNIT2rq5RnQWcmjTzUrUckFMkn5Ba06
fcb+sq0YQfMPC71igi2SqUTUgYV8A+CaboJ6I51IJv+ZQKHSIoERCwQ022Rz6dAe
fdKeV61c9/GJ48uzNl/ilJYiBkKO61H33XSPAgMBAAGjggG+MIIBujAdBgNVHQ4E
FgQUX1BrC3rpY9ou4e32KePy6NRcb2swHwYDVR0jBBgwFoAUcdFOuyVdwFjUv6Wl
HJP3P4MKuI8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL2NobG9lLnNvYm9ybm9zdC5uZXQvcnBraS9SSVBFLW5scnNz
Zi9jZEZPdXlWZHdGalV2NldsSEpQM1A0TUt1STguY3JsMGQGCCsGAQUFBwEBBFgw
VjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9jZEZPdXlWZHdGalV2NldsSEpQM1A0TUt1STguY2VyMA4GA1UdDwEB
/wQEAwIHgDBoBggrBgEFBQcBCwRcMFowWAYIKwYBBQUHMAuGTHJzeW5jOi8vY2hs
b2Uuc29ib3Jub3N0Lm5ldC9ycGtpL1JJUEUtbmxyc3NmL1gxQnJDM3JwWTlvdTRl
MzJLZVB5Nk5SY2Iycy5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADC
aIEwDQYJKoZIhvcNAQELBQADggEBAAd0+8Rsc9FXBWD4QIS/by3HEwwTOr6du35u
yiOoSBg+DlTohvm+i/7x5V0Lq0RFGsOfuUPb1l3HjEZPiyuJ4/LedqOSgfid5M6A
TW2DRWP7jdQqk7rLCQ0OYnner6kM+jx6Hd7+RnXX5S+brDefkIOudIUPL1pRGihD
k1eM2G1Rs7lZchJNSa0TB/mxhA0TUfOPA0wlwDxnU/x8VJfxe1cWnhlIviZrX6Vp
e9Msi15xbVAObpdbry/olb1tuiu5OzUQTknEO/1F3Hmi+VK3M5mNn6aj7vi3anIx
sSdNP3xZ1tBNlWcnNNn648op1KQSPpP2Pd/KYMR0UmupTKZkXIg=
-----END CERTIFICATE-----
Generated at Tue Oct 15 14:28:58 2024 by rpki-client on console-fra.rpki-client.org