Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/dR4Pwnlx_8RqaTKDeqZ9Qjuulbo.roa
File: dR4Pwnlx_8RqaTKDeqZ9Qjuulbo.roa (raw, json)
Hash identifier: JtFKd/9pgPhrKVUFWckZkFm2J1iEq4DcCtlrblWpp/Y=
Subject key identifier: 75:1E:0F:C2:79:71:FF:C4:6A:69:32:83:7A:A6:7D:42:3B:AE:95:BA
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: D0
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/dR4Pwnlx_8RqaTKDeqZ9Qjuulbo.roa
Signing time: Sun 03 Mar 2024 07:55:03 +0000
ROA not before: Sun 03 Mar 2024 07:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 03 Mar 2024 11:55:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 208 (0xd0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Mar 3 07:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=751E0FC27971FFC46A6932837AA67D423BAE95BA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:6e:0f:34:a0:9a:26:da:4b:7d:e7:88:a2:ff:
c3:d8:f3:ce:9d:22:33:f9:89:31:73:b6:c7:4f:ab:
15:43:d7:51:2f:3b:fa:d8:26:63:a4:80:8f:03:d4:
8f:f4:51:1f:90:ab:71:69:a4:7d:69:b8:01:8c:01:
43:ea:7f:3d:19:d3:54:3f:64:29:5c:6c:2c:b0:f6:
ce:43:e9:47:2e:93:b1:b5:30:cb:b6:78:74:0d:54:
7e:c0:c0:7d:f4:38:b7:60:7e:1f:c8:0b:8a:84:a5:
be:a9:45:2c:8b:09:97:fd:48:0d:c8:8b:10:6c:e6:
e7:6c:30:8e:74:6f:5a:38:a9:86:08:cf:35:8c:89:
87:93:4a:90:fa:d1:ff:b5:93:1d:b3:df:f8:59:a1:
27:f2:05:d2:e3:00:64:48:21:0d:22:f1:b0:00:a0:
2a:2a:1e:80:0f:5e:ab:0a:32:f3:fe:57:3c:c1:6e:
a0:bd:54:79:ed:99:b6:ae:b7:6c:59:19:38:be:94:
33:d3:ae:b7:01:79:7b:74:d5:b7:c2:ec:c2:95:72:
e3:5e:ee:f2:c9:7c:0e:55:4f:0d:aa:10:ce:bf:21:
d6:5e:86:6e:ee:e7:e3:a6:6f:b1:cc:67:4b:52:56:
42:84:9b:d4:72:2e:22:61:09:2c:6d:aa:bc:40:7c:
ee:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:1E:0F:C2:79:71:FF:C4:6A:69:32:83:7A:A6:7D:42:3B:AE:95:BA
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/dR4Pwnlx_8RqaTKDeqZ9Qjuulbo.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
30:f0:29:9c:27:17:6c:d2:09:00:c8:74:87:da:62:a0:c2:a9:
54:c6:7c:ba:2b:25:48:f9:2e:b8:c0:18:c3:59:b4:51:2d:51:
3c:08:25:87:56:62:fb:81:bc:94:b0:16:ad:f7:4f:0f:46:35:
3a:14:48:f4:cf:7c:a8:de:9e:35:5c:d1:ed:ef:29:c1:89:d4:
b9:05:38:81:69:99:80:55:64:83:4a:52:59:44:49:6f:ec:be:
dd:4c:9b:c7:0f:16:3e:8f:00:d6:9b:53:81:29:4e:fe:42:5a:
2a:15:55:0d:d7:83:bf:28:04:a3:34:52:2d:56:e0:91:f4:2d:
fe:5a:da:52:d6:66:25:7c:74:f7:26:b2:02:58:a1:da:8d:1f:
74:17:4b:6e:3b:ce:ec:78:d4:29:88:dd:0b:fd:2f:d0:ee:c1:
73:ec:c2:90:dd:7d:c5:cf:67:28:4f:4e:10:b4:3c:77:0e:ad:
ef:1d:bb:15:be:06:20:3b:9d:02:68:b1:46:e6:c2:a3:e8:7d:
8b:11:30:9d:84:8d:48:e4:dd:bf:e7:1d:ff:97:99:db:55:7f:
e9:81:71:fa:a3:14:97:56:dd:b8:7d:e5:12:2b:fc:94:38:8e:
c0:4e:22:61:bb:1b:13:2c:88:23:2c:d7:3a:23:5c:8d:96:ed:
a3:00:ae:09
-----BEGIN CERTIFICATE-----
MIIEojCCA4qgAwIBAgICANAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzFk
MTRlYmIyNTVkYzA1OGQ0YmZhNWE1MWM5M2Y3M2Y4MzBhYjg4ZjAeFw0yNDAzMDMw
NzU1MDNaFw0yNTA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKDc1MUUwRkMyNzk3MUZG
QzQ2QTY5MzI4MzdBQTY3RDQyM0JBRTk1QkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC7bg80oJom2kt954ii/8PY886dIjP5iTFztsdPqxVD11EvO/rY
JmOkgI8D1I/0UR+Qq3FppH1puAGMAUPqfz0Z01Q/ZClcbCyw9s5D6Ucuk7G1MMu2
eHQNVH7AwH30OLdgfh/IC4qEpb6pRSyLCZf9SA3IixBs5udsMI50b1o4qYYIzzWM
iYeTSpD60f+1kx2z3/hZoSfyBdLjAGRIIQ0i8bAAoCoqHoAPXqsKMvP+VzzBbqC9
VHntmbaut2xZGTi+lDPTrrcBeXt01bfC7MKVcuNe7vLJfA5VTw2qEM6/IdZehm7u
5+Omb7HMZ0tSVkKEm9RyLiJhCSxtqrxAfO6dAgMBAAGjggG+MIIBujAdBgNVHQ4E
FgQUdR4Pwnlx/8RqaTKDeqZ9QjuulbowHwYDVR0jBBgwFoAUcdFOuyVdwFjUv6Wl
HJP3P4MKuI8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL2NobG9lLnNvYm9ybm9zdC5uZXQvcnBraS9SSVBFLW5scnNz
Zi9jZEZPdXlWZHdGalV2NldsSEpQM1A0TUt1STguY3JsMGQGCCsGAQUFBwEBBFgw
VjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9jZEZPdXlWZHdGalV2NldsSEpQM1A0TUt1STguY2VyMA4GA1UdDwEB
/wQEAwIHgDBoBggrBgEFBQcBCwRcMFowWAYIKwYBBQUHMAuGTHJzeW5jOi8vY2hs
b2Uuc29ib3Jub3N0Lm5ldC9ycGtpL1JJUEUtbmxyc3NmL2RSNFB3bmx4XzhScWFU
S0RlcVo5UWp1dWxiby5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADC
aIEwDQYJKoZIhvcNAQELBQADggEBADDwKZwnF2zSCQDIdIfaYqDCqVTGfLorJUj5
LrjAGMNZtFEtUTwIJYdWYvuBvJSwFq33Tw9GNToUSPTPfKjenjVc0e3vKcGJ1LkF
OIFpmYBVZINKUllESW/svt1Mm8cPFj6PANabU4EpTv5CWioVVQ3Xg78oBKM0Ui1W
4JH0Lf5a2lLWZiV8dPcmsgJYodqNH3QXS247zux41CmI3Qv9L9DuwXPswpDdfcXP
ZyhPThC0PHcOre8duxW+BiA7nQJosUbmwqPofYsRMJ2EjUjk3b/nHf+XmdtVf+mB
cfqjFJdW3bh95RIr/JQ4jsBOImG7GxMsiCMs1zojXI2W7aMArgk=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:55 2024 by rpki-client on console-fra.rpki-client.org