Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/bBGM-I5X7o5IzOgqt4M8eZNIKlc.roa
File: bBGM-I5X7o5IzOgqt4M8eZNIKlc.roa (raw, json)
Hash identifier: sU7cJ0DzHHg7B91hIRUpnXgsS4dueNLPPfeI+IVaSkg=
Subject key identifier: 6C:11:8C:F8:8E:57:EE:8E:48:CC:E8:2A:B7:83:3C:79:93:48:2A:57
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 090E
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/bBGM-I5X7o5IzOgqt4M8eZNIKlc.roa
Signing time: Wed 23 Oct 2024 15:55:02 +0000
ROA not before: Wed 23 Oct 2024 15:55:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 23 Oct 2024 19:55:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2318 (0x90e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Oct 23 15:55:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6C118CF88E57EE8E48CCE82AB7833C7993482A57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:1f:98:55:6f:e7:41:61:e9:22:8d:9d:57:07:
59:42:b9:ae:db:dc:b4:d8:82:67:23:20:c5:f6:5b:
93:56:b3:de:74:9b:8e:31:06:4e:37:af:23:bd:f9:
24:92:42:e0:2a:3e:5e:f2:6b:aa:a2:0b:e2:c0:96:
6c:f4:fc:2b:77:bb:69:78:90:16:97:da:01:21:49:
0b:b0:15:f4:c5:8b:0d:7b:0e:c3:6a:ac:ab:6b:08:
42:47:b4:a4:5d:39:b0:ea:61:0f:20:f7:94:ad:eb:
63:ce:b5:d6:f6:eb:e2:5a:58:a0:38:fd:76:bd:e3:
3c:7b:e1:f3:e4:fb:c8:3b:56:d9:c5:d0:b1:e1:70:
36:af:db:6b:fb:f9:4b:00:ba:81:bb:cf:ad:32:b4:
0a:21:c2:8f:e3:07:09:ca:f9:fe:1a:d3:74:a5:44:
54:35:df:b0:eb:22:8e:82:d0:84:d9:56:38:e5:6f:
7b:6f:23:e4:79:e9:45:f8:f2:80:2e:fd:22:0c:10:
fc:98:7e:e6:80:18:93:40:da:19:31:bb:a6:88:a5:
fa:a6:49:12:b4:55:f1:66:f9:4d:34:68:f8:03:df:
1b:2b:17:48:4f:40:eb:83:b8:60:2c:c0:bd:d2:48:
a4:37:9f:f6:fd:b7:69:91:c1:9f:c1:4e:d4:d7:38:
58:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:11:8C:F8:8E:57:EE:8E:48:CC:E8:2A:B7:83:3C:79:93:48:2A:57
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/bBGM-I5X7o5IzOgqt4M8eZNIKlc.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:66:73:d0:9d:ae:93:4d:2e:d6:bf:1e:04:cf:ba:44:c5:7a:
a8:ed:f2:95:59:4d:a8:54:98:a1:91:ee:eb:d6:cc:a2:a3:4d:
30:c0:c1:50:a9:98:15:85:2c:93:e7:e8:b5:97:3f:90:12:72:
fb:8a:dc:31:f1:75:e1:85:92:db:00:59:88:9a:be:26:3f:c5:
fa:44:50:cb:c4:b8:a9:36:2b:36:03:d9:e6:d0:ee:9b:c4:99:
2c:b8:52:a0:5a:e4:9b:42:66:bc:89:e6:d8:84:50:37:3d:83:
6d:87:cd:f2:af:a0:f0:ae:f3:04:c0:88:70:f6:3d:d8:48:c5:
68:db:bb:5a:5a:04:64:c0:6e:61:9b:3a:5b:32:4d:72:d4:e7:
eb:10:76:07:23:9b:14:63:d5:53:eb:a7:05:f5:5f:b6:5a:92:
ef:55:99:78:4d:1d:1a:26:fe:c1:b1:6f:32:cc:02:7b:d9:e8:
6f:13:9b:bf:7f:e3:7f:5d:be:d9:d3:b8:f8:3e:d5:ec:74:c3:
eb:be:76:f3:7a:b6:8e:02:e7:52:17:9f:be:42:4d:04:a0:ac:
0d:d4:7d:39:e2:5f:e3:cf:b4:7c:75:11:46:08:8a:b5:d8:8b:
ae:e6:1d:bf:b6:8b:09:09:81:33:c8:18:a4:dc:4a:19:e9:84:
cc:0f:3a:c4
-----BEGIN CERTIFICATE-----
MIIEojCCA4qgAwIBAgICCQ4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzFk
MTRlYmIyNTVkYzA1OGQ0YmZhNWE1MWM5M2Y3M2Y4MzBhYjg4ZjAeFw0yNDEwMjMx
NTU1MDJaFw0yNTA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKDZDMTE4Q0Y4OEU1N0VF
OEU0OENDRTgyQUI3ODMzQzc5OTM0ODJBNTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQD2H5hVb+dBYekijZ1XB1lCua7b3LTYgmcjIMX2W5NWs950m44x
Bk43ryO9+SSSQuAqPl7ya6qiC+LAlmz0/Ct3u2l4kBaX2gEhSQuwFfTFiw17DsNq
rKtrCEJHtKRdObDqYQ8g95St62POtdb26+JaWKA4/Xa94zx74fPk+8g7VtnF0LHh
cDav22v7+UsAuoG7z60ytAohwo/jBwnK+f4a03SlRFQ137DrIo6C0ITZVjjlb3tv
I+R56UX48oAu/SIMEPyYfuaAGJNA2hkxu6aIpfqmSRK0VfFm+U00aPgD3xsrF0hP
QOuDuGAswL3SSKQ3n/b9t2mRwZ/BTtTXOFjRAgMBAAGjggG+MIIBujAdBgNVHQ4E
FgQUbBGM+I5X7o5IzOgqt4M8eZNIKlcwHwYDVR0jBBgwFoAUcdFOuyVdwFjUv6Wl
HJP3P4MKuI8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL2NobG9lLnNvYm9ybm9zdC5uZXQvcnBraS9SSVBFLW5scnNz
Zi9jZEZPdXlWZHdGalV2NldsSEpQM1A0TUt1STguY3JsMGQGCCsGAQUFBwEBBFgw
VjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9jZEZPdXlWZHdGalV2NldsSEpQM1A0TUt1STguY2VyMA4GA1UdDwEB
/wQEAwIHgDBoBggrBgEFBQcBCwRcMFowWAYIKwYBBQUHMAuGTHJzeW5jOi8vY2hs
b2Uuc29ib3Jub3N0Lm5ldC9ycGtpL1JJUEUtbmxyc3NmL2JCR00tSTVYN281SXpP
Z3F0NE04ZVpOSUtsYy5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADC
aIEwDQYJKoZIhvcNAQELBQADggEBALRmc9CdrpNNLta/HgTPukTFeqjt8pVZTahU
mKGR7uvWzKKjTTDAwVCpmBWFLJPn6LWXP5AScvuK3DHxdeGFktsAWYiaviY/xfpE
UMvEuKk2KzYD2ebQ7pvEmSy4UqBa5JtCZryJ5tiEUDc9g22HzfKvoPCu8wTAiHD2
PdhIxWjbu1paBGTAbmGbOlsyTXLU5+sQdgcjmxRj1VPrpwX1X7Zaku9VmXhNHRom
/sGxbzLMAnvZ6G8Tm79/439dvtnTuPg+1ex0w+u+dvN6to4C51IXn75CTQSgrA3U
fTniX+PPtHx1EUYIirXYi67mHb+2iwkJgTPIGKTcShnphMwPOsQ=
-----END CERTIFICATE-----
Generated at Thu Oct 24 00:20:28 2024 by rpki-client on console-ams.rpki-client.org