Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/XXK1OgI2RkLZ1zJgOsa6H9-MVWo.roa
File: XXK1OgI2RkLZ1zJgOsa6H9-MVWo.roa (raw, json)
Hash identifier: clcRRLHbuKkPht5EZBbX+QftbPz6ijtb1ENFM5giAyY=
Subject key identifier: 5D:72:B5:3A:02:36:46:42:D9:D7:32:60:3A:C6:BA:1F:DF:8C:55:6A
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0490
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/XXK1OgI2RkLZ1zJgOsa6H9-MVWo.roa
Signing time: Mon 17 Jun 2024 23:55:03 +0000
ROA not before: Mon 17 Jun 2024 23:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 18 Jun 2024 03:55:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1168 (0x490)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Jun 17 23:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5D72B53A02364642D9D732603AC6BA1FDF8C556A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:9a:de:16:bd:f2:65:b2:75:20:2d:7a:dc:46:
db:d5:c0:b8:34:b5:b7:17:00:28:b5:96:b6:5b:6b:
9c:5d:1b:a8:e4:ff:6c:6a:13:1d:ab:31:dd:98:e0:
e1:cd:df:f5:ff:8f:91:4f:1e:b1:8d:b4:2c:c6:e0:
88:c1:44:0d:78:7e:eb:0d:57:d2:0f:44:98:a3:ab:
04:5a:e0:59:51:b3:27:47:2a:e9:ed:e3:93:eb:cd:
48:93:b8:a8:3c:43:95:e7:5e:b6:cf:3b:a5:f8:68:
37:03:d7:9b:22:70:90:1b:68:de:cb:2d:d9:90:f6:
4c:3e:b8:09:a8:d4:88:5a:48:2c:92:23:81:51:a8:
85:18:94:4b:2f:3b:ad:ba:cf:c1:87:20:6c:20:01:
fb:68:91:68:6f:ff:cb:78:b6:42:b8:7c:3a:88:aa:
34:dd:74:db:f3:63:f8:16:4d:b9:1f:db:00:7a:60:
89:57:d7:d9:46:63:e3:0f:a6:c8:8f:e3:46:6d:8f:
f7:0f:de:e7:8c:ca:1b:08:c6:60:ec:e2:62:f5:0e:
dd:82:e3:db:bc:49:ea:17:4d:dd:2c:fa:f2:d5:7b:
dc:7d:9a:46:60:3b:59:6e:4c:97:f2:ce:24:78:a3:
8e:28:ad:7e:64:b8:7b:64:1e:95:4f:98:9b:c8:99:
a9:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:72:B5:3A:02:36:46:42:D9:D7:32:60:3A:C6:BA:1F:DF:8C:55:6A
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/XXK1OgI2RkLZ1zJgOsa6H9-MVWo.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:62:fc:a2:6d:14:7a:f9:b9:b1:ee:07:3a:12:be:e2:8e:41:
fc:d7:3e:10:fd:4b:ad:f1:4e:03:92:93:09:41:8b:6f:87:ae:
30:43:de:ea:d8:3d:2d:0f:0c:80:73:12:8b:63:61:8f:2f:b7:
0e:84:ba:37:0b:54:ae:61:cc:9a:05:29:e4:44:4d:9e:5b:76:
ea:43:fc:14:76:47:5e:e3:e2:c7:b5:aa:b9:a9:ff:4e:d3:a4:
36:2a:44:ef:8c:b0:24:bf:3f:16:6d:d0:d4:92:df:08:e9:ea:
3d:26:b9:d9:ac:f3:8d:30:b1:bc:fd:fc:8d:65:a3:89:26:fe:
0b:4c:a8:c2:30:03:e8:ab:d3:fe:af:a4:14:3c:61:88:77:60:
71:08:64:73:ed:5e:61:fa:f2:ab:a4:32:f6:fc:d2:f2:3f:4d:
18:51:62:08:bf:75:2c:84:78:36:a4:ba:27:f9:48:87:bc:af:
74:78:ed:bf:ff:83:45:13:44:ca:78:86:a2:37:83:e5:af:c6:
43:32:d8:6f:91:c5:7f:25:7b:b6:c6:b6:30:2b:71:55:77:b2:
a6:a9:8f:6e:01:f8:05:46:a1:4b:82:92:ca:54:b0:2b:a6:cc:
4a:60:2c:aa:2c:38:61:08:48:54:7c:08:6e:7e:4c:e6:9e:34:
3c:ba:5d:5e
-----BEGIN CERTIFICATE-----
MIIEojCCA4qgAwIBAgICBJAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzFk
MTRlYmIyNTVkYzA1OGQ0YmZhNWE1MWM5M2Y3M2Y4MzBhYjg4ZjAeFw0yNDA2MTcy
MzU1MDNaFw0yNTA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKDVENzJCNTNBMDIzNjQ2
NDJEOUQ3MzI2MDNBQzZCQTFGREY4QzU1NkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDWmt4WvfJlsnUgLXrcRtvVwLg0tbcXACi1lrZba5xdG6jk/2xq
Ex2rMd2Y4OHN3/X/j5FPHrGNtCzG4IjBRA14fusNV9IPRJijqwRa4FlRsydHKunt
45PrzUiTuKg8Q5XnXrbPO6X4aDcD15sicJAbaN7LLdmQ9kw+uAmo1IhaSCySI4FR
qIUYlEsvO626z8GHIGwgAftokWhv/8t4tkK4fDqIqjTddNvzY/gWTbkf2wB6YIlX
19lGY+MPpsiP40Ztj/cP3ueMyhsIxmDs4mL1Dt2C49u8SeoXTd0s+vLVe9x9mkZg
O1luTJfyziR4o44orX5kuHtkHpVPmJvImanXAgMBAAGjggG+MIIBujAdBgNVHQ4E
FgQUXXK1OgI2RkLZ1zJgOsa6H9+MVWowHwYDVR0jBBgwFoAUcdFOuyVdwFjUv6Wl
HJP3P4MKuI8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL2NobG9lLnNvYm9ybm9zdC5uZXQvcnBraS9SSVBFLW5scnNz
Zi9jZEZPdXlWZHdGalV2NldsSEpQM1A0TUt1STguY3JsMGQGCCsGAQUFBwEBBFgw
VjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9jZEZPdXlWZHdGalV2NldsSEpQM1A0TUt1STguY2VyMA4GA1UdDwEB
/wQEAwIHgDBoBggrBgEFBQcBCwRcMFowWAYIKwYBBQUHMAuGTHJzeW5jOi8vY2hs
b2Uuc29ib3Jub3N0Lm5ldC9ycGtpL1JJUEUtbmxyc3NmL1hYSzFPZ0kyUmtMWjF6
SmdPc2E2SDktTVZXby5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADC
aIEwDQYJKoZIhvcNAQELBQADggEBAGpi/KJtFHr5ubHuBzoSvuKOQfzXPhD9S63x
TgOSkwlBi2+HrjBD3urYPS0PDIBzEotjYY8vtw6EujcLVK5hzJoFKeRETZ5bdupD
/BR2R17j4se1qrmp/07TpDYqRO+MsCS/PxZt0NSS3wjp6j0mudms840wsbz9/I1l
o4km/gtMqMIwA+ir0/6vpBQ8YYh3YHEIZHPtXmH68qukMvb80vI/TRhRYgi/dSyE
eDakuif5SIe8r3R47b//g0UTRMp4hqI3g+WvxkMy2G+RxX8le7bGtjArcVV3sqap
j24B+AVGoUuCkspUsCumzEpgLKosOGEISFR8CG5+TOaeNDy6XV4=
-----END CERTIFICATE-----
Generated at Tue Jun 18 06:40:39 2024 by rpki-client on console-fra.rpki-client.org