Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/dyMs43l3iYq_f24ayat6_nn0Eos.roa
File: dyMs43l3iYq_f24ayat6_nn0Eos.roa (raw, json)
Hash identifier: PGNA/g5SyZMH2f8iB5sIVc9Oe/EYmwbdhLECfxBTMHY=
Subject key identifier: 77:23:2C:E3:79:77:89:8A:BF:7F:6E:1A:C9:AB:7A:FE:79:F4:12:8B
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 086E
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/dyMs43l3iYq_f24ayat6_nn0Eos.roa
Signing time: Sat 05 Oct 2024 23:55:03 +0000
ROA not before: Sat 05 Oct 2024 23:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 06 Oct 2024 03:55:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2158 (0x86e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Oct 5 23:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=77232CE37977898ABF7F6E1AC9AB7AFE79F4128B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:36:a0:47:41:fe:e0:39:28:8e:a3:d9:76:89:
e9:68:11:1e:02:c3:05:62:71:c5:fd:13:c6:e1:53:
c0:4b:1e:60:ce:10:2c:9a:24:38:df:53:44:bc:c2:
12:ff:bc:61:33:39:8a:03:85:f2:28:93:3b:72:db:
fd:ae:90:ff:64:9d:d8:1d:73:8f:3e:7e:ec:31:c0:
c9:0a:f9:0d:c4:4d:ff:3d:bb:56:40:a8:80:38:c5:
fc:6b:0f:46:23:0e:34:2f:6b:a6:62:66:e5:ca:be:
5b:0b:2e:4c:1f:84:f9:2a:40:36:04:e4:a4:34:f0:
9b:37:53:ca:86:f8:21:75:04:80:7a:6b:65:a2:f9:
8c:4b:82:a7:19:8d:57:42:9c:3d:96:38:7d:22:5c:
4c:c9:63:8f:db:af:6d:90:2a:21:8c:5c:9d:1e:60:
37:8d:ae:ca:95:3c:92:dc:74:a9:25:45:18:76:0c:
ff:5a:a9:d8:02:26:cf:17:51:73:f4:40:db:a6:65:
4e:3c:bc:92:21:79:88:3f:02:5c:f2:7a:43:39:5a:
33:d2:66:77:6d:7a:30:de:9a:81:2a:92:5b:e4:9c:
d7:b0:5b:9a:41:50:18:3d:23:52:f1:54:d4:3e:95:
c2:e5:7e:2c:5f:3b:94:6d:d4:fc:9d:ff:ae:b3:f6:
3f:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:23:2C:E3:79:77:89:8A:BF:7F:6E:1A:C9:AB:7A:FE:79:F4:12:8B
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/dyMs43l3iYq_f24ayat6_nn0Eos.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
23:5e:6f:5d:52:6c:e6:74:08:cc:ef:28:f5:d2:b6:4f:70:7c:
17:31:96:e0:db:88:f4:72:e9:df:b4:31:e6:15:11:26:0e:c2:
0a:6f:15:31:20:93:ec:56:e1:26:17:4b:f5:f2:e5:75:bd:46:
3f:cb:cc:3f:ee:39:91:83:72:e1:19:5d:dd:f4:36:c5:6f:3f:
8d:f4:d6:49:c3:69:5b:6e:13:09:73:b8:26:bf:36:89:3d:e4:
ec:49:67:eb:05:ea:3e:0f:73:cf:d8:da:c6:b8:02:83:ef:19:
af:a9:3d:9c:0d:6b:17:c9:0b:3f:96:e1:43:2f:1a:56:89:69:
4f:83:7e:50:56:5d:e0:c9:b2:f8:bc:99:8b:07:73:09:ef:c0:
f8:74:b3:81:3f:5c:81:18:89:88:92:b2:c4:6c:46:63:f3:a2:
3a:d6:ee:ce:b8:c2:bf:0a:39:2d:7b:bb:f3:6c:bc:c6:4e:eb:
1c:77:6f:ea:bb:08:a2:e8:18:e2:be:e0:ff:fd:58:c6:d3:e2:
bc:5d:0b:58:e2:fb:68:f9:c0:73:18:0a:93:f2:57:76:64:72:
33:14:ed:02:ed:cc:0c:d2:4b:bf:3c:61:58:90:88:ac:ab:1e:
fe:9f:d3:a4:21:c3:0a:99:64:21:73:65:84:9e:94:e4:8e:cb:
0a:b9:d1:85
-----BEGIN CERTIFICATE-----
MIIEojCCA4qgAwIBAgICCG4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzFk
MTRlYmIyNTVkYzA1OGQ0YmZhNWE1MWM5M2Y3M2Y4MzBhYjg4ZjAeFw0yNDEwMDUy
MzU1MDNaFw0yNTA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKDc3MjMyQ0UzNzk3Nzg5
OEFCRjdGNkUxQUM5QUI3QUZFNzlGNDEyOEIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDlNqBHQf7gOSiOo9l2ieloER4CwwViccX9E8bhU8BLHmDOECya
JDjfU0S8whL/vGEzOYoDhfIokzty2/2ukP9kndgdc48+fuwxwMkK+Q3ETf89u1ZA
qIA4xfxrD0YjDjQva6ZiZuXKvlsLLkwfhPkqQDYE5KQ08Js3U8qG+CF1BIB6a2Wi
+YxLgqcZjVdCnD2WOH0iXEzJY4/br22QKiGMXJ0eYDeNrsqVPJLcdKklRRh2DP9a
qdgCJs8XUXP0QNumZU48vJIheYg/AlzyekM5WjPSZndtejDemoEqklvknNewW5pB
UBg9I1LxVNQ+lcLlfixfO5Rt1Pyd/66z9j+NAgMBAAGjggG+MIIBujAdBgNVHQ4E
FgQUdyMs43l3iYq/f24ayat6/nn0EoswHwYDVR0jBBgwFoAUcdFOuyVdwFjUv6Wl
HJP3P4MKuI8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL2NobG9lLnNvYm9ybm9zdC5uZXQvcnBraS9SSVBFLW5scnNz
Zi9jZEZPdXlWZHdGalV2NldsSEpQM1A0TUt1STguY3JsMGQGCCsGAQUFBwEBBFgw
VjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9jZEZPdXlWZHdGalV2NldsSEpQM1A0TUt1STguY2VyMA4GA1UdDwEB
/wQEAwIHgDBoBggrBgEFBQcBCwRcMFowWAYIKwYBBQUHMAuGTHJzeW5jOi8vY2hs
b2Uuc29ib3Jub3N0Lm5ldC9ycGtpL1JJUEUtbmxyc3NmL2R5TXM0M2wzaVlxX2Yy
NGF5YXQ2X25uMEVvcy5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADC
aIEwDQYJKoZIhvcNAQELBQADggEBACNeb11SbOZ0CMzvKPXStk9wfBcxluDbiPRy
6d+0MeYVESYOwgpvFTEgk+xW4SYXS/Xy5XW9Rj/LzD/uOZGDcuEZXd30NsVvP430
1knDaVtuEwlzuCa/Nok95OxJZ+sF6j4Pc8/Y2sa4AoPvGa+pPZwNaxfJCz+W4UMv
GlaJaU+DflBWXeDJsvi8mYsHcwnvwPh0s4E/XIEYiYiSssRsRmPzojrW7s64wr8K
OS17u/NsvMZO6xx3b+q7CKLoGOK+4P/9WMbT4rxdC1ji+2j5wHMYCpPyV3ZkcjMU
7QLtzAzSS788YViQiKyrHv6f06QhwwqZZCFzZYSelOSOywq50YU=
-----END CERTIFICATE-----
Generated at Sun Oct 6 05:42:06 2024 by rpki-client on console-fra.rpki-client.org