Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/YwpuLNuddv1SkP7v79c1OTm0EtE.roa
File: YwpuLNuddv1SkP7v79c1OTm0EtE.roa (raw, json)
Hash identifier: N32bQt11JTVG6F+HF8K8d3xuoRNcAqccixsDEN3KCQU=
Subject key identifier: 63:0A:6E:2C:DB:9D:76:FD:52:90:FE:EF:EF:D7:35:39:39:B4:12:D1
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 070F
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/YwpuLNuddv1SkP7v79c1OTm0EtE.roa
Signing time: Tue 27 Aug 2024 23:55:03 +0000
ROA not before: Tue 27 Aug 2024 23:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 28 Aug 2024 03:55:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1807 (0x70f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Aug 27 23:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=630A6E2CDB9D76FD5290FEEFEFD7353939B412D1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:66:0b:90:15:93:64:26:93:61:d9:0a:b0:cc:
a0:00:ce:da:9d:85:1b:3e:4d:b4:1d:c9:ea:6b:fa:
e7:c5:43:36:3a:20:7a:60:15:a8:88:8f:40:41:51:
dd:be:d3:3a:47:35:c0:71:36:4f:8b:e8:21:c1:1c:
b7:75:37:5f:93:40:f1:8f:08:3c:5a:5e:58:dc:08:
f8:7c:4a:78:f3:81:50:69:08:07:8f:73:04:93:6e:
05:1e:c2:0f:29:82:f0:69:54:29:33:ab:d6:b9:16:
fb:8c:9d:cd:16:0e:1b:77:b0:7a:ed:1c:65:1c:48:
b5:94:2b:c5:e2:d5:a6:99:04:00:24:32:fb:a8:83:
97:97:5d:3f:a2:10:93:44:6c:ac:da:22:41:90:ef:
2b:9e:5c:f2:68:96:d9:b2:49:2a:a5:3d:e7:f2:a0:
60:18:26:9c:f1:63:1c:81:79:ee:0e:53:cf:18:c6:
92:8f:32:f0:08:0d:dd:8b:b8:34:3a:f8:ee:36:ee:
6e:99:62:2c:4a:33:87:31:67:5a:a5:48:78:60:41:
a4:2a:fc:63:01:4c:ea:85:49:9a:74:34:db:db:53:
6d:ff:9c:e8:c9:6e:9a:b9:95:9e:e4:0e:58:0f:0b:
5f:d0:6f:e9:11:60:1b:4e:22:72:09:0c:d8:3a:a0:
60:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:0A:6E:2C:DB:9D:76:FD:52:90:FE:EF:EF:D7:35:39:39:B4:12:D1
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/YwpuLNuddv1SkP7v79c1OTm0EtE.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
15:61:35:11:0a:c9:2b:ec:c2:7e:7f:7c:00:92:81:1f:03:fd:
e8:7f:20:80:8d:0d:8f:36:22:78:b3:3e:87:da:35:a9:39:06:
1d:9d:dd:62:86:ab:c6:05:b4:d3:ec:f6:a9:29:b5:4d:d1:34:
36:ea:bd:93:c0:5b:8e:80:4e:fa:69:dd:73:93:e7:37:90:67:
43:54:63:78:45:0d:4f:3a:e4:c0:39:fd:6b:b1:2b:13:e3:9f:
9b:3b:62:0f:09:22:d7:8f:f9:cd:6d:9d:7f:a9:19:ec:28:36:
0b:df:7a:30:36:b3:42:ca:6b:ac:29:79:b4:dc:e7:e8:27:c6:
c8:1c:78:34:95:ae:27:d6:a3:cb:d7:96:ed:21:19:9b:cc:06:
ec:e2:69:f1:f9:a7:c9:f5:07:1d:96:8b:56:29:4d:a3:27:97:
e5:40:c8:fb:cb:80:6c:51:7e:bf:28:cd:9b:45:f5:81:d3:af:
b1:7c:4d:b9:33:35:06:d5:93:38:1d:26:e3:6f:9f:a7:d2:ef:
ed:8e:fb:e7:d6:89:eb:9e:3d:19:1b:60:3c:42:94:dc:a1:cf:
65:fb:35:a2:44:c5:54:2e:ad:cd:e7:4b:20:37:1d:e6:aa:2e:
a0:16:c9:fe:a7:07:56:65:28:ee:ea:5a:3c:06:00:cd:52:9f:
18:4e:de:97
-----BEGIN CERTIFICATE-----
MIIEojCCA4qgAwIBAgICBw8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzFk
MTRlYmIyNTVkYzA1OGQ0YmZhNWE1MWM5M2Y3M2Y4MzBhYjg4ZjAeFw0yNDA4Mjcy
MzU1MDNaFw0yNTA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKDYzMEE2RTJDREI5RDc2
RkQ1MjkwRkVFRkVGRDczNTM5MzlCNDEyRDEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDDZguQFZNkJpNh2QqwzKAAztqdhRs+TbQdyepr+ufFQzY6IHpg
FaiIj0BBUd2+0zpHNcBxNk+L6CHBHLd1N1+TQPGPCDxaXljcCPh8SnjzgVBpCAeP
cwSTbgUewg8pgvBpVCkzq9a5FvuMnc0WDht3sHrtHGUcSLWUK8Xi1aaZBAAkMvuo
g5eXXT+iEJNEbKzaIkGQ7yueXPJoltmySSqlPefyoGAYJpzxYxyBee4OU88YxpKP
MvAIDd2LuDQ6+O427m6ZYixKM4cxZ1qlSHhgQaQq/GMBTOqFSZp0NNvbU23/nOjJ
bpq5lZ7kDlgPC1/Qb+kRYBtOInIJDNg6oGCjAgMBAAGjggG+MIIBujAdBgNVHQ4E
FgQUYwpuLNuddv1SkP7v79c1OTm0EtEwHwYDVR0jBBgwFoAUcdFOuyVdwFjUv6Wl
HJP3P4MKuI8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL2NobG9lLnNvYm9ybm9zdC5uZXQvcnBraS9SSVBFLW5scnNz
Zi9jZEZPdXlWZHdGalV2NldsSEpQM1A0TUt1STguY3JsMGQGCCsGAQUFBwEBBFgw
VjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9jZEZPdXlWZHdGalV2NldsSEpQM1A0TUt1STguY2VyMA4GA1UdDwEB
/wQEAwIHgDBoBggrBgEFBQcBCwRcMFowWAYIKwYBBQUHMAuGTHJzeW5jOi8vY2hs
b2Uuc29ib3Jub3N0Lm5ldC9ycGtpL1JJUEUtbmxyc3NmL1l3cHVMTnVkZHYxU2tQ
N3Y3OWMxT1RtMEV0RS5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADC
aIEwDQYJKoZIhvcNAQELBQADggEBABVhNREKySvswn5/fACSgR8D/eh/IICNDY82
InizPofaNak5Bh2d3WKGq8YFtNPs9qkptU3RNDbqvZPAW46ATvpp3XOT5zeQZ0NU
Y3hFDU865MA5/WuxKxPjn5s7Yg8JIteP+c1tnX+pGewoNgvfejA2s0LKa6wpebTc
5+gnxsgceDSVrifWo8vXlu0hGZvMBuziafH5p8n1Bx2Wi1YpTaMnl+VAyPvLgGxR
fr8ozZtF9YHTr7F8TbkzNQbVkzgdJuNvn6fS7+2O++fWieuePRkbYDxClNyhz2X7
NaJExVQurc3nSyA3HeaqLqAWyf6nB1ZlKO7qWjwGAM1SnxhO3pc=
-----END CERTIFICATE-----
Generated at Wed Aug 28 07:05:42 2024 by rpki-client on console-ams.rpki-client.org