Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/hDZCJ_re-uPdQII9GcdD48WFzyc.roa
File: hDZCJ_re-uPdQII9GcdD48WFzyc.roa (raw, json)
Hash identifier: 87VAPzvVZDGi1MrZVDLYMHLH/Kan5d7BfkuxoNkjRgA=
Subject key identifier: 84:36:42:27:FA:DE:FA:E3:DD:40:82:3D:19:C7:43:E3:C5:85:CF:27
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 074E
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/hDZCJ_re-uPdQII9GcdD48WFzyc.roa
Signing time: Tue 03 Sep 2024 23:55:03 +0000
ROA not before: Tue 03 Sep 2024 23:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 04 Sep 2024 03:55:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1870 (0x74e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Sep 3 23:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=84364227FADEFAE3DD40823D19C743E3C585CF27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:4c:71:52:51:48:eb:5d:a8:e3:d8:1b:db:2f:
cd:2c:13:e8:c1:7b:25:57:a0:b5:45:12:8c:02:2c:
ee:b7:09:f9:8b:68:58:2c:ca:c7:39:a7:3f:25:7f:
17:eb:31:ad:02:f8:84:4f:d7:97:2d:f1:c2:26:f4:
87:88:03:b2:31:01:c3:d7:c8:3c:fe:4c:72:04:5d:
2e:5c:66:82:23:8a:99:8d:15:f9:e9:6b:db:76:99:
62:b9:1c:70:86:9c:54:f9:ce:bd:e8:1c:66:ac:93:
35:4d:2f:5a:ac:84:bf:85:d9:25:f5:2e:96:07:d4:
03:c2:18:55:9b:97:87:7e:73:d4:7c:27:d9:a7:a2:
8f:46:f7:b1:32:20:0b:14:cb:4c:8a:af:28:33:3f:
d6:84:f0:64:0d:46:f5:27:1b:d4:1b:e6:e4:22:5c:
fd:23:37:1c:a7:17:d8:8a:55:cc:51:d2:31:1f:a0:
0d:04:c2:8a:d1:2f:5f:f2:18:10:9b:b3:e4:3d:c1:
67:64:8a:bf:ef:d4:6a:c4:67:2a:ff:cd:e8:84:11:
56:3d:87:af:8a:22:6f:e8:12:51:26:32:df:11:34:
60:fe:6d:91:84:50:8a:1f:ba:e2:1c:f2:3a:3f:c3:
5d:a4:cb:65:9e:88:35:cd:9a:7c:5a:dd:e0:50:f5:
4a:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:36:42:27:FA:DE:FA:E3:DD:40:82:3D:19:C7:43:E3:C5:85:CF:27
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/hDZCJ_re-uPdQII9GcdD48WFzyc.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
98:ad:9e:d1:e5:52:15:11:64:d9:fe:66:f4:03:69:80:6e:15:
ee:da:2d:68:1e:b1:73:17:58:16:6f:07:6a:92:ec:60:87:23:
97:00:52:59:54:9f:20:2c:0d:73:49:2d:7c:39:1e:e5:e2:65:
95:1d:d3:5c:03:f5:4c:57:ba:88:c1:a8:a8:22:e2:dd:dc:f5:
12:eb:02:34:75:83:cc:62:7e:05:69:e4:a2:23:d0:5e:a3:0e:
26:26:9c:48:ac:1f:0e:d7:81:79:ee:05:b7:ea:5f:2c:d5:84:
a9:36:7b:fc:78:20:26:a9:af:fe:c0:ea:9c:01:39:03:70:bf:
0a:e6:e0:9f:d9:86:1e:16:3a:ba:5b:19:2a:e1:7f:d1:07:85:
04:11:df:25:fc:ff:fc:ba:b2:ef:98:71:c2:40:47:4e:50:ff:
50:32:9a:38:71:36:a3:3a:cd:06:7b:ed:db:c9:2c:09:1d:70:
71:2c:c3:10:66:d7:01:73:ca:1a:3f:ee:03:55:96:a7:79:8f:
80:0d:6c:13:3a:ce:cc:9e:eb:de:57:d6:7c:84:ed:b2:d1:0e:
07:d9:26:84:13:bb:62:3d:c2:10:84:92:24:46:41:ba:72:6b:
6a:4b:e6:43:5e:7e:89:f2:73:7f:8e:84:77:d9:30:fa:aa:92:
91:b8:45:bc
-----BEGIN CERTIFICATE-----
MIIEojCCA4qgAwIBAgICB04wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzFk
MTRlYmIyNTVkYzA1OGQ0YmZhNWE1MWM5M2Y3M2Y4MzBhYjg4ZjAeFw0yNDA5MDMy
MzU1MDNaFw0yNTA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKDg0MzY0MjI3RkFERUZB
RTNERDQwODIzRDE5Qzc0M0UzQzU4NUNGMjcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDBTHFSUUjrXajj2BvbL80sE+jBeyVXoLVFEowCLO63CfmLaFgs
ysc5pz8lfxfrMa0C+IRP15ct8cIm9IeIA7IxAcPXyDz+THIEXS5cZoIjipmNFfnp
a9t2mWK5HHCGnFT5zr3oHGaskzVNL1qshL+F2SX1LpYH1APCGFWbl4d+c9R8J9mn
oo9G97EyIAsUy0yKrygzP9aE8GQNRvUnG9Qb5uQiXP0jNxynF9iKVcxR0jEfoA0E
worRL1/yGBCbs+Q9wWdkir/v1GrEZyr/zeiEEVY9h6+KIm/oElEmMt8RNGD+bZGE
UIofuuIc8jo/w12ky2WeiDXNmnxa3eBQ9UrZAgMBAAGjggG+MIIBujAdBgNVHQ4E
FgQUhDZCJ/re+uPdQII9GcdD48WFzycwHwYDVR0jBBgwFoAUcdFOuyVdwFjUv6Wl
HJP3P4MKuI8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL2NobG9lLnNvYm9ybm9zdC5uZXQvcnBraS9SSVBFLW5scnNz
Zi9jZEZPdXlWZHdGalV2NldsSEpQM1A0TUt1STguY3JsMGQGCCsGAQUFBwEBBFgw
VjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9jZEZPdXlWZHdGalV2NldsSEpQM1A0TUt1STguY2VyMA4GA1UdDwEB
/wQEAwIHgDBoBggrBgEFBQcBCwRcMFowWAYIKwYBBQUHMAuGTHJzeW5jOi8vY2hs
b2Uuc29ib3Jub3N0Lm5ldC9ycGtpL1JJUEUtbmxyc3NmL2hEWkNKX3JlLXVQZFFJ
STlHY2RENDhXRnp5Yy5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADC
aIEwDQYJKoZIhvcNAQELBQADggEBAJitntHlUhURZNn+ZvQDaYBuFe7aLWgesXMX
WBZvB2qS7GCHI5cAUllUnyAsDXNJLXw5HuXiZZUd01wD9UxXuojBqKgi4t3c9RLr
AjR1g8xifgVp5KIj0F6jDiYmnEisHw7XgXnuBbfqXyzVhKk2e/x4ICapr/7A6pwB
OQNwvwrm4J/Zhh4WOrpbGSrhf9EHhQQR3yX8//y6su+YccJAR05Q/1AymjhxNqM6
zQZ77dvJLAkdcHEswxBm1wFzyho/7gNVlqd5j4ANbBM6zsye695X1nyE7bLRDgfZ
JoQTu2I9whCEkiRGQbpya2pL5kNefonyc3+OhHfZMPqqkpG4Rbw=
-----END CERTIFICATE-----
Generated at Wed Sep 4 06:04:20 2024 by rpki-client on console-fra.rpki-client.org