Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/_oabYEJ1JMSc0hAEeCB-jGebAJM.roa
File: _oabYEJ1JMSc0hAEeCB-jGebAJM.roa (raw, json)
Hash identifier: bzLuL7f7P9an3kvMcBYl+web9A+BQ2QjNCIGgvU3I2Q=
Subject key identifier: FE:86:9B:60:42:75:24:C4:9C:D2:10:04:78:20:7E:8C:67:9B:00:93
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 09BF
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/_oabYEJ1JMSc0hAEeCB-jGebAJM.roa
Signing time: Tue 12 Nov 2024 07:55:03 +0000
ROA not before: Tue 12 Nov 2024 07:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 12 Nov 2024 11:55:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2495 (0x9bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Nov 12 07:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=FE869B60427524C49CD2100478207E8C679B0093
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:99:c2:43:b5:88:b6:ab:b2:85:0c:32:c0:b0:
7f:26:63:c0:da:63:6a:f1:e1:83:a1:ea:e7:58:4e:
3d:f6:2a:d6:a0:c9:5a:5e:62:49:ad:6b:6f:1b:89:
68:de:54:65:fc:b7:72:05:01:7e:9c:8b:ff:0a:2e:
76:bb:43:59:cf:8c:52:0a:da:22:e3:e7:80:e2:93:
0d:f6:88:9e:c4:d7:a1:0b:11:7e:fd:cf:14:73:88:
65:53:8f:09:a1:19:b6:69:56:8d:80:96:3a:f6:7d:
03:fe:0b:42:4a:2e:f7:1d:61:37:0d:7d:99:3b:de:
1b:d9:d2:9c:05:22:27:2b:25:db:77:3e:82:54:0b:
55:46:64:74:c2:2f:2a:20:5b:86:07:39:19:f7:3f:
30:1c:51:b3:e1:bb:49:42:7a:53:bf:bc:49:19:51:
89:98:d1:e1:71:c8:ab:d7:51:b7:88:81:35:ee:fd:
b0:2e:e6:3e:29:c3:aa:17:3c:30:84:fe:4f:66:93:
d4:a9:23:14:f5:69:37:e1:58:21:0f:5c:ea:20:20:
e7:db:da:5a:bd:4d:83:a7:d9:95:ae:0d:6d:7d:b9:
17:75:cf:c8:61:99:17:5e:e8:77:b3:40:db:00:7c:
66:92:48:ff:8c:3f:7a:b1:0e:b2:6b:cd:5a:2c:b9:
05:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:86:9B:60:42:75:24:C4:9C:D2:10:04:78:20:7E:8C:67:9B:00:93
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/_oabYEJ1JMSc0hAEeCB-jGebAJM.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
89:73:a4:7e:6d:cf:29:a6:01:ec:d1:0e:52:b2:ab:a2:53:e6:
ef:0a:cc:65:39:35:bc:4e:4a:9c:c2:37:57:20:2d:cb:53:37:
0a:7c:41:74:a4:e0:33:31:63:37:c4:c2:72:25:d7:53:72:30:
b9:53:7d:2a:35:12:9d:ee:63:ed:e3:3f:84:1f:28:7f:7f:74:
7e:e3:49:cf:9a:6a:ba:a1:ce:8f:1b:5a:83:f5:2f:8f:3e:77:
68:a7:5c:a7:25:46:fd:2b:ae:d9:6c:b5:37:c3:4e:26:cc:f7:
df:25:8a:d0:5b:c7:a2:46:d5:57:41:53:2c:72:5f:e0:75:d4:
37:b8:2f:87:c1:53:7d:7a:46:fa:c4:95:20:5b:2a:72:71:f8:
ff:4b:bc:2e:fa:e6:e7:1b:3d:6d:ca:9a:e5:e1:f6:a1:a2:6a:
15:18:a9:23:f3:32:69:f7:74:c6:f2:43:9e:c2:c0:64:4d:34:
99:55:1d:0b:cf:aa:20:35:72:17:d3:4b:e1:d4:7e:94:f0:4f:
0f:b8:25:85:97:e0:14:28:a1:60:92:ce:eb:9f:e7:fb:77:4e:
e9:a0:ff:18:6f:6f:22:9b:34:71:15:ba:34:dc:27:d2:9d:f7:
29:b4:7c:69:83:79:12:99:b3:57:57:f1:c7:fe:ae:e4:bc:5a:
a3:24:bd:ff
-----BEGIN CERTIFICATE-----
MIIEojCCA4qgAwIBAgICCb8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzFk
MTRlYmIyNTVkYzA1OGQ0YmZhNWE1MWM5M2Y3M2Y4MzBhYjg4ZjAeFw0yNDExMTIw
NzU1MDNaFw0yNTA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKEZFODY5QjYwNDI3NTI0
QzQ5Q0QyMTAwNDc4MjA3RThDNjc5QjAwOTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCxmcJDtYi2q7KFDDLAsH8mY8DaY2rx4YOh6udYTj32KtagyVpe
Ykmta28biWjeVGX8t3IFAX6ci/8KLna7Q1nPjFIK2iLj54Dikw32iJ7E16ELEX79
zxRziGVTjwmhGbZpVo2Aljr2fQP+C0JKLvcdYTcNfZk73hvZ0pwFIicrJdt3PoJU
C1VGZHTCLyogW4YHORn3PzAcUbPhu0lCelO/vEkZUYmY0eFxyKvXUbeIgTXu/bAu
5j4pw6oXPDCE/k9mk9SpIxT1aTfhWCEPXOogIOfb2lq9TYOn2ZWuDW19uRd1z8hh
mRde6HezQNsAfGaSSP+MP3qxDrJrzVosuQWDAgMBAAGjggG+MIIBujAdBgNVHQ4E
FgQU/oabYEJ1JMSc0hAEeCB+jGebAJMwHwYDVR0jBBgwFoAUcdFOuyVdwFjUv6Wl
HJP3P4MKuI8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL2NobG9lLnNvYm9ybm9zdC5uZXQvcnBraS9SSVBFLW5scnNz
Zi9jZEZPdXlWZHdGalV2NldsSEpQM1A0TUt1STguY3JsMGQGCCsGAQUFBwEBBFgw
VjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9jZEZPdXlWZHdGalV2NldsSEpQM1A0TUt1STguY2VyMA4GA1UdDwEB
/wQEAwIHgDBoBggrBgEFBQcBCwRcMFowWAYIKwYBBQUHMAuGTHJzeW5jOi8vY2hs
b2Uuc29ib3Jub3N0Lm5ldC9ycGtpL1JJUEUtbmxyc3NmL19vYWJZRUoxSk1TYzBo
QUVlQ0ItakdlYkFKTS5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADC
aIEwDQYJKoZIhvcNAQELBQADggEBAIlzpH5tzymmAezRDlKyq6JT5u8KzGU5NbxO
SpzCN1cgLctTNwp8QXSk4DMxYzfEwnIl11NyMLlTfSo1Ep3uY+3jP4QfKH9/dH7j
Sc+aarqhzo8bWoP1L48+d2inXKclRv0rrtlstTfDTibM998litBbx6JG1VdBUyxy
X+B11De4L4fBU316RvrElSBbKnJx+P9LvC765ucbPW3KmuXh9qGiahUYqSPzMmn3
dMbyQ57CwGRNNJlVHQvPqiA1chfTS+HUfpTwTw+4JYWX4BQooWCSzuuf5/t3Tumg
/xhvbyKbNHEVujTcJ9Kd9ym0fGmDeRKZs1dX8cf+ruS8WqMkvf8=
-----END CERTIFICATE-----
Generated at Tue Nov 12 16:12:35 2024 by rpki-client on console-fra.rpki-client.org