Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/anvh4PG9IvaEZBDbpn3lSMLRwL8.roa
File: anvh4PG9IvaEZBDbpn3lSMLRwL8.roa (raw, json)
Hash identifier: s0dMFXNTpXF6H5QLJIPF+5MK4p3pYBw50ULXYnSqYYQ=
Subject key identifier: 6A:7B:E1:E0:F1:BD:22:F6:84:64:10:DB:A6:7D:E5:48:C2:D1:C0:BF
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 026B
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/anvh4PG9IvaEZBDbpn3lSMLRwL8.roa
Signing time: Wed 17 Apr 2024 23:55:03 +0000
ROA not before: Wed 17 Apr 2024 23:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 18 Apr 2024 03:55:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 619 (0x26b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Apr 17 23:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6A7BE1E0F1BD22F6846410DBA67DE548C2D1C0BF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ab:0e:a6:63:2c:7f:43:2c:25:55:72:2e:6c:
85:d2:4f:6b:dd:ae:54:90:84:ac:21:83:46:ea:98:
3a:ea:b9:b9:b7:4d:cc:2d:b8:2b:8f:12:a4:bb:fe:
19:53:a0:af:52:35:38:a5:d5:d9:66:3d:8f:9c:36:
4b:1b:5e:f4:a6:c4:dc:9c:c1:03:24:2f:93:ff:3a:
65:f5:94:a7:8c:a6:89:6b:71:94:11:c0:90:21:8b:
fb:19:7a:27:04:10:b4:af:44:b0:7d:0d:54:c3:6c:
16:95:c7:0c:ea:a7:d8:6f:6d:76:e0:d9:bc:7e:43:
a1:5b:a5:37:68:26:b6:f1:2c:b5:df:4e:dd:3c:96:
e8:3e:f6:b7:90:19:ec:5c:60:0d:94:af:39:2b:1e:
f6:31:59:bc:8a:e1:4b:ce:94:06:54:cd:95:13:da:
b5:e7:f9:a3:a5:92:06:af:75:a3:79:d4:7b:63:4e:
10:98:11:9b:1a:ed:30:93:de:98:07:fe:f1:ff:56:
03:1c:61:92:12:09:e8:17:c3:bf:e6:c5:15:34:49:
f7:87:1d:b6:5d:c3:2c:34:75:52:fe:89:73:9f:81:
81:d5:30:16:18:59:27:5e:2a:46:15:8c:ea:1c:60:
f1:99:33:19:a6:d9:88:49:a9:8e:5b:04:f3:74:e0:
10:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:7B:E1:E0:F1:BD:22:F6:84:64:10:DB:A6:7D:E5:48:C2:D1:C0:BF
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/anvh4PG9IvaEZBDbpn3lSMLRwL8.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
d8:37:4d:6f:a0:97:0b:b2:22:ed:d3:16:5e:68:dd:75:f8:2f:
3b:1c:23:9b:f2:19:d9:7d:e2:e9:47:29:fb:f5:76:0b:f6:f3:
af:d0:63:17:d7:98:fc:b7:da:8f:fb:af:80:b3:bb:4c:b2:55:
10:9f:25:f4:d1:30:12:a3:1c:cc:97:8c:6b:bf:72:1c:43:1c:
4d:2d:2c:c6:4e:c4:fd:e8:88:87:a6:50:2f:27:3b:54:11:c0:
c1:7d:d6:8c:8c:9a:0a:cd:6f:aa:47:be:a5:f0:8b:2a:ce:59:
2d:7c:8a:1d:d7:b5:ae:a8:a7:0a:13:4e:05:4d:93:3d:f0:7e:
38:7e:0b:2b:a6:a3:ef:54:74:47:82:22:66:24:50:06:9e:a8:
1f:57:f0:76:0f:4f:92:c6:bb:ab:14:a9:68:a1:e0:8f:cf:eb:
53:e2:f9:b7:34:88:68:ea:0a:f7:02:48:21:76:a4:8e:29:50:
84:8d:db:e7:f5:92:2f:d7:ea:10:07:0c:70:61:41:10:44:d6:
d1:ec:e4:ff:7f:63:3c:82:68:36:98:38:28:8b:24:b7:22:15:
90:34:5c:3e:e5:f7:aa:b3:a5:c0:5d:39:05:71:7d:c2:37:85:
d6:2f:16:68:89:e2:6d:a0:0d:8a:af:9e:ae:31:37:7e:27:67:
04:0f:8a:cd
-----BEGIN CERTIFICATE-----
MIIEojCCA4qgAwIBAgICAmswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzFk
MTRlYmIyNTVkYzA1OGQ0YmZhNWE1MWM5M2Y3M2Y4MzBhYjg4ZjAeFw0yNDA0MTcy
MzU1MDNaFw0yNTA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKDZBN0JFMUUwRjFCRDIy
RjY4NDY0MTBEQkE2N0RFNTQ4QzJEMUMwQkYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDLqw6mYyx/QywlVXIubIXST2vdrlSQhKwhg0bqmDrqubm3Tcwt
uCuPEqS7/hlToK9SNTil1dlmPY+cNksbXvSmxNycwQMkL5P/OmX1lKeMpolrcZQR
wJAhi/sZeicEELSvRLB9DVTDbBaVxwzqp9hvbXbg2bx+Q6FbpTdoJrbxLLXfTt08
lug+9reQGexcYA2UrzkrHvYxWbyK4UvOlAZUzZUT2rXn+aOlkgavdaN51HtjThCY
EZsa7TCT3pgH/vH/VgMcYZISCegXw7/mxRU0SfeHHbZdwyw0dVL+iXOfgYHVMBYY
WSdeKkYVjOocYPGZMxmm2YhJqY5bBPN04BD5AgMBAAGjggG+MIIBujAdBgNVHQ4E
FgQUanvh4PG9IvaEZBDbpn3lSMLRwL8wHwYDVR0jBBgwFoAUcdFOuyVdwFjUv6Wl
HJP3P4MKuI8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL2NobG9lLnNvYm9ybm9zdC5uZXQvcnBraS9SSVBFLW5scnNz
Zi9jZEZPdXlWZHdGalV2NldsSEpQM1A0TUt1STguY3JsMGQGCCsGAQUFBwEBBFgw
VjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9jZEZPdXlWZHdGalV2NldsSEpQM1A0TUt1STguY2VyMA4GA1UdDwEB
/wQEAwIHgDBoBggrBgEFBQcBCwRcMFowWAYIKwYBBQUHMAuGTHJzeW5jOi8vY2hs
b2Uuc29ib3Jub3N0Lm5ldC9ycGtpL1JJUEUtbmxyc3NmL2Fudmg0UEc5SXZhRVpC
RGJwbjNsU01MUndMOC5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADC
aIEwDQYJKoZIhvcNAQELBQADggEBANg3TW+glwuyIu3TFl5o3XX4LzscI5vyGdl9
4ulHKfv1dgv286/QYxfXmPy32o/7r4Czu0yyVRCfJfTRMBKjHMyXjGu/chxDHE0t
LMZOxP3oiIemUC8nO1QRwMF91oyMmgrNb6pHvqXwiyrOWS18ih3Xta6opwoTTgVN
kz3wfjh+Cyumo+9UdEeCImYkUAaeqB9X8HYPT5LGu6sUqWih4I/P61Pi+bc0iGjq
CvcCSCF2pI4pUISN2+f1ki/X6hAHDHBhQRBE1tHs5P9/YzyCaDaYOCiLJLciFZA0
XD7l96qzpcBdOQVxfcI3hdYvFmiJ4m2gDYqvnq4xN34nZwQPis0=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:55 2024 by rpki-client on console-fra.rpki-client.org