Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/aCyQMMxHfOIwA85MYYrMJIbX1fY.roa
File: aCyQMMxHfOIwA85MYYrMJIbX1fY.roa (raw, json)
Hash identifier: 0luAI1CzhJ6/3uZ3SVAlnP3G/Yr9Z+H4i56sHjSElho=
Subject key identifier: 68:2C:90:30:CC:47:7C:E2:30:03:CE:4C:61:8A:CC:24:86:D7:D5:F6
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: A9
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/aCyQMMxHfOIwA85MYYrMJIbX1fY.roa
Signing time: Tue 27 Feb 2024 23:55:02 +0000
ROA not before: Tue 27 Feb 2024 23:55:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 28 Feb 2024 03:55:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 169 (0xa9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Feb 27 23:55:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=682C9030CC477CE23003CE4C618ACC2486D7D5F6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a7:d6:ee:74:8b:38:c6:b2:38:1f:4f:2b:87:
1c:5f:33:89:ad:63:47:d3:20:4a:2e:fa:8e:97:52:
fc:bf:64:8c:63:6e:c0:c6:c5:3d:8d:ef:03:81:e8:
8d:57:08:83:94:bc:11:50:48:5d:b2:2f:0b:15:87:
1b:1d:bb:29:2f:6a:3f:91:f7:3b:8b:f3:9c:c0:0d:
f4:d7:13:8a:49:fb:45:a2:42:aa:11:5e:ef:2a:24:
16:3a:7c:85:1f:b8:19:50:11:5b:df:0b:7b:02:b4:
a9:50:79:38:4f:6c:82:04:90:c7:ef:8f:a2:2c:66:
49:5d:36:0e:50:90:9f:34:e0:e9:fe:86:f5:2d:f8:
02:53:fa:05:e1:c5:46:09:a0:4c:1a:45:38:a8:c2:
66:99:17:70:f2:dd:8f:5d:ef:c3:c2:28:d8:e0:33:
e4:a1:b0:ad:3d:d7:1f:70:83:9d:5a:d0:69:ef:98:
ba:23:3f:ae:16:17:fb:d0:db:7f:4e:e1:c8:26:85:
24:de:b9:d5:f7:58:e5:fd:b1:6e:58:0e:39:66:df:
7d:81:9c:7c:f7:8a:41:23:65:90:69:f5:11:2c:2c:
b4:ab:38:19:83:fa:2d:71:7b:6d:07:de:b0:5d:e7:
1b:d5:18:89:51:a7:f5:1a:ee:3c:e0:2c:80:59:0b:
00:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:2C:90:30:CC:47:7C:E2:30:03:CE:4C:61:8A:CC:24:86:D7:D5:F6
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/aCyQMMxHfOIwA85MYYrMJIbX1fY.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:26:7d:1f:e9:f3:ad:61:ea:ee:32:58:8d:a0:1f:6e:ce:b2:
f5:10:db:8e:b5:8a:54:c3:1d:45:32:02:8f:30:c3:78:02:4e:
e6:65:e9:86:a2:6c:b6:ac:56:90:f9:7f:ea:5b:28:4d:91:ff:
a0:e7:f4:2f:a2:cd:90:ff:36:2e:54:c7:01:49:a2:dc:da:1c:
43:e2:bf:c0:68:5c:7c:5e:29:fa:8e:7d:4f:5b:79:2a:1c:3b:
72:79:02:ca:c8:c9:79:e4:f0:33:07:e0:fb:74:48:8e:a1:fd:
35:88:4c:35:39:36:25:4f:3a:ca:18:2f:1a:bb:6e:55:3d:79:
01:f6:0c:b5:47:e1:98:7e:15:bb:df:ef:ea:01:b9:b6:6b:49:
18:c6:32:b0:58:e4:c5:df:7d:ca:28:c8:1d:9c:da:62:2a:7a:
4b:0d:aa:53:03:27:58:e0:75:ab:3e:12:78:bc:34:30:08:4f:
c7:65:b7:fa:b6:d0:1b:ff:8e:05:09:62:7d:f3:2f:8f:e6:20:
52:f2:02:e6:67:d9:b8:c5:2b:48:99:14:e8:63:f7:72:88:75:
ba:c7:8d:8d:1c:12:1c:45:40:08:24:51:0e:f9:61:b2:df:fd:
0a:a5:5d:b2:9b:95:95:0f:f7:cf:03:e9:4b:55:33:8d:6a:e0:
35:0b:ea:d0
-----BEGIN CERTIFICATE-----
MIIEojCCA4qgAwIBAgICAKkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzFk
MTRlYmIyNTVkYzA1OGQ0YmZhNWE1MWM5M2Y3M2Y4MzBhYjg4ZjAeFw0yNDAyMjcy
MzU1MDJaFw0yNTA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKDY4MkM5MDMwQ0M0NzdD
RTIzMDAzQ0U0QzYxOEFDQzI0ODZEN0Q1RjYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC/p9budIs4xrI4H08rhxxfM4mtY0fTIEou+o6XUvy/ZIxjbsDG
xT2N7wOB6I1XCIOUvBFQSF2yLwsVhxsduykvaj+R9zuL85zADfTXE4pJ+0WiQqoR
Xu8qJBY6fIUfuBlQEVvfC3sCtKlQeThPbIIEkMfvj6IsZkldNg5QkJ804On+hvUt
+AJT+gXhxUYJoEwaRTiowmaZF3Dy3Y9d78PCKNjgM+ShsK091x9wg51a0GnvmLoj
P64WF/vQ239O4cgmhSTeudX3WOX9sW5YDjlm332BnHz3ikEjZZBp9REsLLSrOBmD
+i1xe20H3rBd5xvVGIlRp/Ua7jzgLIBZCwCJAgMBAAGjggG+MIIBujAdBgNVHQ4E
FgQUaCyQMMxHfOIwA85MYYrMJIbX1fYwHwYDVR0jBBgwFoAUcdFOuyVdwFjUv6Wl
HJP3P4MKuI8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL2NobG9lLnNvYm9ybm9zdC5uZXQvcnBraS9SSVBFLW5scnNz
Zi9jZEZPdXlWZHdGalV2NldsSEpQM1A0TUt1STguY3JsMGQGCCsGAQUFBwEBBFgw
VjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9jZEZPdXlWZHdGalV2NldsSEpQM1A0TUt1STguY2VyMA4GA1UdDwEB
/wQEAwIHgDBoBggrBgEFBQcBCwRcMFowWAYIKwYBBQUHMAuGTHJzeW5jOi8vY2hs
b2Uuc29ib3Jub3N0Lm5ldC9ycGtpL1JJUEUtbmxyc3NmL2FDeVFNTXhIZk9Jd0E4
NU1ZWXJNSkliWDFmWS5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADC
aIEwDQYJKoZIhvcNAQELBQADggEBAI8mfR/p861h6u4yWI2gH27OsvUQ2461ilTD
HUUyAo8ww3gCTuZl6YaibLasVpD5f+pbKE2R/6Dn9C+izZD/Ni5UxwFJotzaHEPi
v8BoXHxeKfqOfU9beSocO3J5AsrIyXnk8DMH4Pt0SI6h/TWITDU5NiVPOsoYLxq7
blU9eQH2DLVH4Zh+Fbvf7+oBubZrSRjGMrBY5MXffcooyB2c2mIqeksNqlMDJ1jg
das+Eni8NDAIT8dlt/q20Bv/jgUJYn3zL4/mIFLyAuZn2bjFK0iZFOhj93KIdbrH
jY0cEhxFQAgkUQ75YbLf/QqlXbKblZUP988D6UtVM41q4DUL6tA=
-----END CERTIFICATE-----
Generated at Wed Feb 28 05:12:58 2024 by rpki-client on console-ams.rpki-client.org