Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/euqUbSroMF_8dnJrdr5ZsbKAcTU.roa
File: euqUbSroMF_8dnJrdr5ZsbKAcTU.roa (raw, json)
Hash identifier: d6eyPZNL6QRPbDip48kxsct35/sDWHqfvby+DOzyFxg=
Subject key identifier: 7A:EA:94:6D:2A:E8:30:5F:FC:76:72:6B:76:BE:59:B1:B2:80:71:35
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 02D4
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/euqUbSroMF_8dnJrdr5ZsbKAcTU.roa
Signing time: Mon 29 Apr 2024 15:55:03 +0000
ROA not before: Mon 29 Apr 2024 15:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 29 Apr 2024 19:55:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 724 (0x2d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Apr 29 15:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7AEA946D2AE8305FFC76726B76BE59B1B2807135
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:af:a0:12:9d:5a:f0:fc:59:05:24:be:a6:0c:
46:60:8c:d9:12:0e:c3:a5:2b:08:17:e3:4f:a5:3f:
5f:42:2e:75:d8:82:20:94:d8:c1:b2:5e:5b:ca:1a:
10:b2:c7:3c:13:a0:5c:e3:f8:71:b9:50:1f:7a:75:
23:ed:0b:55:e1:c5:9f:2b:0e:36:51:eb:23:0f:b8:
0c:d4:bb:fe:8d:dd:f8:b0:0f:75:17:b5:31:74:b0:
08:44:c0:92:e6:ac:d7:cb:4f:b5:11:d1:99:a4:9a:
85:a4:f2:2e:3e:c2:e1:a3:77:33:6e:a7:e2:c7:6e:
93:63:ce:ee:64:17:32:d9:38:16:ca:ff:20:99:c3:
be:33:67:97:b2:82:da:d1:29:d6:0c:40:59:e7:c7:
46:c9:fa:20:90:b4:df:c2:f0:c7:c1:d0:fb:59:40:
bd:3a:62:8e:be:f3:af:de:11:1d:20:b6:b7:0f:83:
7c:b3:5e:59:ab:9a:e6:a3:c7:2f:94:61:a1:da:08:
96:73:ab:e0:38:cf:ba:49:9f:fb:82:e1:a4:69:6b:
b0:a6:f4:66:13:47:90:1d:f5:03:4b:97:0d:c8:e9:
05:cf:f5:34:b5:81:ff:d1:79:b9:ac:fe:6d:a0:95:
53:20:63:96:b7:57:c4:89:92:d3:67:97:19:f2:0b:
dd:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:EA:94:6D:2A:E8:30:5F:FC:76:72:6B:76:BE:59:B1:B2:80:71:35
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/euqUbSroMF_8dnJrdr5ZsbKAcTU.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
cc:24:a3:c5:19:98:2c:5f:65:50:63:9f:e7:00:de:f2:7b:47:
4b:b1:3d:dd:64:3c:97:41:cd:72:1a:a4:53:ab:f9:8f:f8:f9:
b9:65:4c:6a:ba:10:80:a4:09:6f:39:39:90:b1:1c:00:27:6c:
4a:7e:42:ca:ae:ff:54:0a:9a:f3:b4:5c:9b:f3:c1:da:02:ad:
6d:96:78:08:ec:d6:cc:36:91:74:3d:16:6e:60:ad:3d:b5:bb:
b3:1a:7f:16:4f:11:c0:f1:77:5e:55:04:1d:d9:cb:2b:1f:01:
40:e8:17:d8:02:b6:ed:cb:35:4f:ca:99:d9:a7:87:c5:94:2a:
4b:69:87:f4:8f:8a:71:6e:27:1c:7a:af:8e:16:34:ba:0d:4d:
9a:af:05:20:ed:7a:64:4c:5e:cd:cf:b6:98:7b:39:10:49:bb:
e4:84:b5:31:a1:53:98:b0:ad:3e:22:f3:de:c6:4e:63:25:1e:
27:13:48:e8:30:cd:ab:b8:1a:08:85:de:5c:b6:f7:17:75:d5:
20:18:c3:9b:a8:69:9b:b4:e1:67:37:ea:93:79:f9:f2:fc:e0:
4d:05:b3:b7:2c:a2:86:2c:35:ef:45:22:3c:1f:63:99:1d:38:
47:31:0c:f6:3e:03:87:a9:b9:af:f7:5a:c1:59:cf:e6:7e:42:
a9:26:7a:c2
-----BEGIN CERTIFICATE-----
MIIEojCCA4qgAwIBAgICAtQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzFk
MTRlYmIyNTVkYzA1OGQ0YmZhNWE1MWM5M2Y3M2Y4MzBhYjg4ZjAeFw0yNDA0Mjkx
NTU1MDNaFw0yNTA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKDdBRUE5NDZEMkFFODMw
NUZGQzc2NzI2Qjc2QkU1OUIxQjI4MDcxMzUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQD5r6ASnVrw/FkFJL6mDEZgjNkSDsOlKwgX40+lP19CLnXYgiCU
2MGyXlvKGhCyxzwToFzj+HG5UB96dSPtC1XhxZ8rDjZR6yMPuAzUu/6N3fiwD3UX
tTF0sAhEwJLmrNfLT7UR0ZmkmoWk8i4+wuGjdzNup+LHbpNjzu5kFzLZOBbK/yCZ
w74zZ5eygtrRKdYMQFnnx0bJ+iCQtN/C8MfB0PtZQL06Yo6+86/eER0gtrcPg3yz
Xlmrmuajxy+UYaHaCJZzq+A4z7pJn/uC4aRpa7Cm9GYTR5Ad9QNLlw3I6QXP9TS1
gf/Rebms/m2glVMgY5a3V8SJktNnlxnyC93DAgMBAAGjggG+MIIBujAdBgNVHQ4E
FgQUeuqUbSroMF/8dnJrdr5ZsbKAcTUwHwYDVR0jBBgwFoAUcdFOuyVdwFjUv6Wl
HJP3P4MKuI8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL2NobG9lLnNvYm9ybm9zdC5uZXQvcnBraS9SSVBFLW5scnNz
Zi9jZEZPdXlWZHdGalV2NldsSEpQM1A0TUt1STguY3JsMGQGCCsGAQUFBwEBBFgw
VjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9jZEZPdXlWZHdGalV2NldsSEpQM1A0TUt1STguY2VyMA4GA1UdDwEB
/wQEAwIHgDBoBggrBgEFBQcBCwRcMFowWAYIKwYBBQUHMAuGTHJzeW5jOi8vY2hs
b2Uuc29ib3Jub3N0Lm5ldC9ycGtpL1JJUEUtbmxyc3NmL2V1cVViU3JvTUZfOGRu
SnJkcjVac2JLQWNUVS5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADC
aIEwDQYJKoZIhvcNAQELBQADggEBAMwko8UZmCxfZVBjn+cA3vJ7R0uxPd1kPJdB
zXIapFOr+Y/4+bllTGq6EICkCW85OZCxHAAnbEp+Qsqu/1QKmvO0XJvzwdoCrW2W
eAjs1sw2kXQ9Fm5grT21u7MafxZPEcDxd15VBB3ZyysfAUDoF9gCtu3LNU/Kmdmn
h8WUKktph/SPinFuJxx6r44WNLoNTZqvBSDtemRMXs3Ptph7ORBJu+SEtTGhU5iw
rT4i897GTmMlHicTSOgwzau4GgiF3ly29xd11SAYw5uoaZu04Wc36pN5+fL84E0F
s7csooYsNe9FIjwfY5kdOEcxDPY+A4epua/3WsFZz+Z+QqkmesI=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:55 2024 by rpki-client on console-fra.rpki-client.org