Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/XuA5_hZsNwjGX_t2yAFaJD0uSrM.roa
File: XuA5_hZsNwjGX_t2yAFaJD0uSrM.roa (raw, json)
Hash identifier: r1ccJINYfKk6Er/HVdn+e9PI9YLaJ3vx10Mq3Ot1neo=
Subject key identifier: 5E:E0:39:FE:16:6C:37:08:C6:5F:FB:76:C8:01:5A:24:3D:2E:4A:B3
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0127
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/XuA5_hZsNwjGX_t2yAFaJD0uSrM.roa
Signing time: Tue 12 Mar 2024 23:55:03 +0000
ROA not before: Tue 12 Mar 2024 23:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 13 Mar 2024 03:55:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 295 (0x127)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Mar 12 23:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5EE039FE166C3708C65FFB76C8015A243D2E4AB3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:60:58:28:0a:10:5f:3b:b2:ca:27:23:df:bc:
3f:06:4e:9f:c7:2e:a0:09:41:5f:f5:50:1c:d8:92:
f5:5f:39:8d:ac:05:11:9d:0a:41:06:74:15:bf:bd:
95:84:35:10:38:e7:97:21:e3:8b:f0:28:8a:e3:d3:
63:45:86:fc:23:4a:e6:4a:f9:92:eb:1e:cb:20:e3:
bc:65:6b:c5:16:29:2a:4d:90:b3:7e:a6:d8:80:95:
a2:b4:ed:19:e6:18:85:3d:bb:1c:0b:d3:95:25:ef:
15:e8:de:d5:99:ce:6a:fe:a8:c3:92:81:f9:8d:ac:
e8:33:a5:20:c5:ac:a7:82:55:9f:da:3d:44:cc:2d:
c0:f4:48:7d:ad:e5:dc:16:1c:73:03:f6:e1:56:e7:
2d:20:70:88:91:e0:d9:dc:b5:28:bc:4e:e0:72:d9:
28:20:32:3f:9d:5e:d3:3e:61:c5:49:82:29:41:7c:
d8:b0:7f:b1:e3:64:d9:48:d9:16:7c:ac:85:6a:06:
56:1f:53:92:75:db:5b:46:77:94:50:6a:5f:d3:e2:
7c:7e:6e:c4:80:0c:7b:67:9a:24:ee:33:68:c4:ba:
4b:33:29:dc:27:39:ac:b9:d2:4a:2b:81:d2:1f:f7:
bf:01:f1:1c:e3:d5:79:9c:12:bd:dc:82:a9:9d:8a:
3e:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:E0:39:FE:16:6C:37:08:C6:5F:FB:76:C8:01:5A:24:3D:2E:4A:B3
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/XuA5_hZsNwjGX_t2yAFaJD0uSrM.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:57:39:43:da:75:c1:75:31:c5:0c:fa:2b:fe:e3:fe:3d:05:
5d:81:51:54:6f:e6:b9:c1:33:45:f5:4a:f6:0a:6e:f2:00:8f:
93:80:4e:1d:7f:73:bc:73:22:f4:d9:5e:e8:97:51:94:e2:0b:
a0:0d:d8:e2:25:37:40:a8:22:88:0e:c2:33:82:3c:61:68:88:
d8:6e:8c:0b:47:eb:fb:9f:55:92:8f:38:75:2e:92:1c:8f:c7:
d8:31:08:4d:b5:9b:2a:52:c2:ee:f3:5a:f6:31:85:32:13:dd:
bd:72:a8:c0:30:f2:87:db:ad:88:23:8a:e6:79:86:a6:db:b7:
18:91:93:38:c2:a1:25:25:e3:06:dc:47:63:6c:b6:45:4a:2e:
ba:e3:30:39:34:b6:92:11:2f:ad:16:37:9c:af:bb:87:4a:d5:
84:bb:3b:ea:13:88:84:af:2e:ad:16:4f:ce:9e:7a:95:c7:84:
4b:6a:47:34:39:5b:dd:01:c1:62:56:b8:a3:e6:11:cf:a0:ed:
d4:4d:0f:e5:03:3e:ec:af:f9:50:6d:45:af:f3:a7:cc:ff:fc:
80:70:ed:76:70:1b:5d:6b:d8:2d:e4:13:4a:87:1e:c4:75:3f:
7e:b3:02:c7:69:46:35:74:17:b0:21:59:30:92:4a:81:ce:6a:
48:c8:e1:32
-----BEGIN CERTIFICATE-----
MIIEojCCA4qgAwIBAgICAScwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzFk
MTRlYmIyNTVkYzA1OGQ0YmZhNWE1MWM5M2Y3M2Y4MzBhYjg4ZjAeFw0yNDAzMTIy
MzU1MDNaFw0yNTA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKDVFRTAzOUZFMTY2QzM3
MDhDNjVGRkI3NkM4MDE1QTI0M0QyRTRBQjMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDSYFgoChBfO7LKJyPfvD8GTp/HLqAJQV/1UBzYkvVfOY2sBRGd
CkEGdBW/vZWENRA455ch44vwKIrj02NFhvwjSuZK+ZLrHssg47xla8UWKSpNkLN+
ptiAlaK07RnmGIU9uxwL05Ul7xXo3tWZzmr+qMOSgfmNrOgzpSDFrKeCVZ/aPUTM
LcD0SH2t5dwWHHMD9uFW5y0gcIiR4NnctSi8TuBy2SggMj+dXtM+YcVJgilBfNiw
f7HjZNlI2RZ8rIVqBlYfU5J121tGd5RQal/T4nx+bsSADHtnmiTuM2jEukszKdwn
Oay50korgdIf978B8Rzj1XmcEr3cgqmdij6rAgMBAAGjggG+MIIBujAdBgNVHQ4E
FgQUXuA5/hZsNwjGX/t2yAFaJD0uSrMwHwYDVR0jBBgwFoAUcdFOuyVdwFjUv6Wl
HJP3P4MKuI8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL2NobG9lLnNvYm9ybm9zdC5uZXQvcnBraS9SSVBFLW5scnNz
Zi9jZEZPdXlWZHdGalV2NldsSEpQM1A0TUt1STguY3JsMGQGCCsGAQUFBwEBBFgw
VjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9jZEZPdXlWZHdGalV2NldsSEpQM1A0TUt1STguY2VyMA4GA1UdDwEB
/wQEAwIHgDBoBggrBgEFBQcBCwRcMFowWAYIKwYBBQUHMAuGTHJzeW5jOi8vY2hs
b2Uuc29ib3Jub3N0Lm5ldC9ycGtpL1JJUEUtbmxyc3NmL1h1QTVfaFpzTndqR1hf
dDJ5QUZhSkQwdVNyTS5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADC
aIEwDQYJKoZIhvcNAQELBQADggEBAF1XOUPadcF1McUM+iv+4/49BV2BUVRv5rnB
M0X1SvYKbvIAj5OATh1/c7xzIvTZXuiXUZTiC6AN2OIlN0CoIogOwjOCPGFoiNhu
jAtH6/ufVZKPOHUukhyPx9gxCE21mypSwu7zWvYxhTIT3b1yqMAw8ofbrYgjiuZ5
hqbbtxiRkzjCoSUl4wbcR2NstkVKLrrjMDk0tpIRL60WN5yvu4dK1YS7O+oTiISv
Lq0WT86eepXHhEtqRzQ5W90BwWJWuKPmEc+g7dRND+UDPuyv+VBtRa/zp8z//IBw
7XZwG11r2C3kE0qHHsR1P36zAsdpRjV0F7AhWTCSSoHOakjI4TI=
-----END CERTIFICATE-----
Generated at Wed Mar 13 05:09:39 2024 by rpki-client on console-ams.rpki-client.org