Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/c3zomCqOm_8l6N8qVm6G4-MLlag.roa
File: c3zomCqOm_8l6N8qVm6G4-MLlag.roa (raw, json)
Hash identifier: JFzeRO1+mlBteOATXz9vp3t2enkWoTFSbgtVODdbFGQ=
Subject key identifier: 73:7C:E8:98:2A:8E:9B:FF:25:E8:DF:2A:56:6E:86:E3:E3:0B:95:A8
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 02A4
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/c3zomCqOm_8l6N8qVm6G4-MLlag.roa
Signing time: Wed 24 Apr 2024 07:55:04 +0000
ROA not before: Wed 24 Apr 2024 07:55:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 24 Apr 2024 11:55:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 676 (0x2a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Apr 24 07:55:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=737CE8982A8E9BFF25E8DF2A566E86E3E30B95A8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:88:30:1a:d7:68:7d:87:b9:21:ab:63:c9:81:
59:79:c1:c1:fe:5c:91:ca:97:d9:bd:1e:68:c1:ce:
6d:16:bd:6f:2c:96:b3:ff:f3:fa:d3:68:50:89:6a:
1d:22:2e:bd:2f:11:f0:51:84:56:9f:34:8f:08:33:
33:50:55:b0:92:68:31:fd:04:a8:bf:f8:e5:fb:10:
32:39:3f:47:c2:dd:96:e7:15:40:b9:fe:8c:39:2a:
fa:7f:53:ba:33:e1:43:6f:66:bd:09:12:59:59:c1:
32:63:21:3f:f5:2c:ad:d5:09:4a:5c:3e:78:e2:12:
4b:af:c6:24:25:75:8d:25:33:52:31:f3:7d:c3:21:
6a:f9:81:16:b0:6a:1e:e2:1c:95:02:3a:ae:40:a3:
37:bd:da:dc:06:8b:83:9f:1c:9e:6e:c7:a0:65:09:
2a:7c:c2:a2:eb:de:0a:94:3d:4e:45:fc:30:32:8a:
d3:e6:63:58:80:8a:b1:e6:b9:50:bf:29:2d:70:e7:
50:92:51:c6:69:82:6f:56:f0:81:0c:dd:f3:6c:ae:
b5:d7:f8:55:e0:41:c8:a2:f3:60:f9:77:08:d0:ff:
df:b0:63:d0:27:fb:88:35:7c:91:99:78:5d:75:9d:
43:92:e1:23:b1:b8:eb:83:41:9e:c7:76:8d:31:0b:
d7:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:7C:E8:98:2A:8E:9B:FF:25:E8:DF:2A:56:6E:86:E3:E3:0B:95:A8
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/c3zomCqOm_8l6N8qVm6G4-MLlag.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:33:65:29:4a:9b:67:77:db:0b:92:06:45:60:78:41:f1:01:
8c:d7:c4:11:8a:d6:1e:0b:e3:9b:b7:62:a5:df:bb:df:56:41:
61:df:92:ad:29:08:89:62:94:0c:ac:4d:c9:06:a8:1e:1d:5e:
e0:f9:97:93:ae:14:4d:77:f5:30:1d:2d:34:7c:06:40:76:63:
a4:69:77:ae:14:50:19:6b:f5:ff:92:68:f5:fd:fa:40:81:04:
3f:3a:33:90:59:18:4a:d9:36:29:02:f1:b0:14:50:84:37:10:
23:2b:39:98:4c:b1:3f:16:1f:e8:a7:8d:00:f7:c9:84:d2:ab:
12:3a:f4:00:43:81:77:ff:f8:8e:14:a5:00:7a:e2:5d:0a:a0:
d5:0a:4d:2f:23:94:cd:13:8d:3a:c6:74:69:b8:2d:06:5a:b5:
6d:70:50:c0:d7:30:1e:9a:a5:54:cd:d2:31:48:1a:f8:a4:83:
9d:fc:24:2c:b5:6d:0a:91:94:d4:b0:60:15:e1:64:e0:f0:a9:
89:82:cf:2d:c7:58:44:e0:bf:ef:49:85:03:7e:25:d4:28:6f:
f7:d6:65:41:7d:41:a1:73:77:79:56:a8:c4:2c:c4:fe:78:4a:
fa:28:3f:60:90:e6:e0:32:58:f4:02:4e:62:7f:8b:44:c6:72:
8e:25:f4:5e
-----BEGIN CERTIFICATE-----
MIIEojCCA4qgAwIBAgICAqQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzFk
MTRlYmIyNTVkYzA1OGQ0YmZhNWE1MWM5M2Y3M2Y4MzBhYjg4ZjAeFw0yNDA0MjQw
NzU1MDRaFw0yNTA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKDczN0NFODk4MkE4RTlC
RkYyNUU4REYyQTU2NkU4NkUzRTMwQjk1QTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCoiDAa12h9h7khq2PJgVl5wcH+XJHKl9m9HmjBzm0WvW8slrP/
8/rTaFCJah0iLr0vEfBRhFafNI8IMzNQVbCSaDH9BKi/+OX7EDI5P0fC3ZbnFUC5
/ow5Kvp/U7oz4UNvZr0JEllZwTJjIT/1LK3VCUpcPnjiEkuvxiQldY0lM1Ix833D
IWr5gRawah7iHJUCOq5Aoze92twGi4OfHJ5ux6BlCSp8wqLr3gqUPU5F/DAyitPm
Y1iAirHmuVC/KS1w51CSUcZpgm9W8IEM3fNsrrXX+FXgQcii82D5dwjQ/9+wY9An
+4g1fJGZeF11nUOS4SOxuOuDQZ7Hdo0xC9eXAgMBAAGjggG+MIIBujAdBgNVHQ4E
FgQUc3zomCqOm/8l6N8qVm6G4+MLlagwHwYDVR0jBBgwFoAUcdFOuyVdwFjUv6Wl
HJP3P4MKuI8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL2NobG9lLnNvYm9ybm9zdC5uZXQvcnBraS9SSVBFLW5scnNz
Zi9jZEZPdXlWZHdGalV2NldsSEpQM1A0TUt1STguY3JsMGQGCCsGAQUFBwEBBFgw
VjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9jZEZPdXlWZHdGalV2NldsSEpQM1A0TUt1STguY2VyMA4GA1UdDwEB
/wQEAwIHgDBoBggrBgEFBQcBCwRcMFowWAYIKwYBBQUHMAuGTHJzeW5jOi8vY2hs
b2Uuc29ib3Jub3N0Lm5ldC9ycGtpL1JJUEUtbmxyc3NmL2Mzem9tQ3FPbV84bDZO
OHFWbTZHNC1NTGxhZy5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADC
aIEwDQYJKoZIhvcNAQELBQADggEBACozZSlKm2d32wuSBkVgeEHxAYzXxBGK1h4L
45u3YqXfu99WQWHfkq0pCIlilAysTckGqB4dXuD5l5OuFE139TAdLTR8BkB2Y6Rp
d64UUBlr9f+SaPX9+kCBBD86M5BZGErZNikC8bAUUIQ3ECMrOZhMsT8WH+injQD3
yYTSqxI69ABDgXf/+I4UpQB64l0KoNUKTS8jlM0TjTrGdGm4LQZatW1wUMDXMB6a
pVTN0jFIGvikg538JCy1bQqRlNSwYBXhZODwqYmCzy3HWETgv+9JhQN+JdQob/fW
ZUF9QaFzd3lWqMQsxP54SvooP2CQ5uAyWPQCTmJ/i0TGco4l9F4=
-----END CERTIFICATE-----
Generated at Wed Apr 24 14:49:09 2024 by rpki-client on console-ams.rpki-client.org