Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/hycV58lMfIKrSTmXU99Uk_bJEOo.roa
File: hycV58lMfIKrSTmXU99Uk_bJEOo.roa (raw, json)
Hash identifier: o6f9RdRVRUVvIF46XoCd3bN5FRr4kAZ452EX8DqfKuo=
Subject key identifier: 87:27:15:E7:C9:4C:7C:82:AB:49:39:97:53:DF:54:93:F6:C9:10:EA
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0A19
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/hycV58lMfIKrSTmXU99Uk_bJEOo.roa
Signing time: Fri 22 Nov 2024 07:55:03 +0000
ROA not before: Fri 22 Nov 2024 07:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 22 Nov 2024 11:55:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2585 (0xa19)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Nov 22 07:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=872715E7C94C7C82AB49399753DF5493F6C910EA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:1d:96:44:32:82:be:9d:77:cf:62:bf:32:a2:
af:da:a5:36:0e:b7:34:0b:e5:f5:7b:3f:2c:13:4f:
85:61:a0:f5:8b:ea:69:26:9b:7b:c3:8a:a2:a1:d3:
e3:3a:5d:01:19:99:f1:c0:e0:aa:ae:e3:f6:53:fc:
8a:46:e7:7e:da:da:73:94:93:07:36:99:2b:f8:ff:
e8:ea:0f:d3:44:bf:c5:8e:a8:8e:38:b1:62:d0:4c:
97:41:41:cd:c6:de:09:ee:c8:19:c0:b3:6e:98:38:
8b:41:46:a8:9e:87:89:b7:5f:be:d9:c9:7a:03:6b:
31:11:0c:72:ac:9d:7a:87:7c:e3:7b:c5:8d:a8:51:
44:78:dd:d1:46:d2:44:f5:7f:a1:b4:47:b1:4a:cd:
c4:d6:23:04:95:da:78:e3:f8:be:d6:88:b5:62:b1:
c9:94:d1:fa:b4:c9:6b:fd:3a:48:b9:4b:6b:43:1b:
f0:2c:10:3d:4b:9f:22:85:2f:ae:a8:89:e4:2a:71:
f2:1f:bb:16:98:e1:b1:1c:76:37:b9:7c:7d:24:e0:
e4:a9:bb:bb:c7:1b:ec:5f:89:30:96:0b:01:6e:db:
18:b1:39:d1:56:60:76:bf:ea:61:a7:6e:ea:f4:2b:
3f:0d:a6:89:d0:70:30:c1:a2:19:72:ea:04:c1:ac:
c8:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:27:15:E7:C9:4C:7C:82:AB:49:39:97:53:DF:54:93:F6:C9:10:EA
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/hycV58lMfIKrSTmXU99Uk_bJEOo.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
28:30:8d:75:a5:29:27:aa:2d:97:b3:65:11:a4:fb:c7:2d:8b:
8e:80:e4:e1:f5:13:af:96:b7:70:7e:aa:29:b8:c6:7a:2c:f0:
5a:35:6d:f4:33:1d:39:70:fd:8f:74:9b:ea:db:e8:df:e2:41:
cb:3f:79:82:a8:8a:cb:03:c4:d7:bf:39:8a:7c:3b:9b:60:c2:
39:be:ed:2c:ff:31:3d:68:4a:5b:33:53:92:3b:0a:eb:c7:f6:
97:b7:d7:1e:92:7e:51:b6:f9:9c:d0:e3:01:30:8a:da:69:93:
39:93:a7:6c:4d:98:da:b7:6b:92:fd:80:fa:27:20:d7:31:c2:
0d:7e:7a:78:66:e3:2c:dd:c3:8e:75:77:9e:2e:dd:08:97:0f:
75:33:be:7a:33:cd:52:d3:a5:dd:9a:cd:8f:92:37:f5:4b:cc:
be:ed:ba:90:2d:a6:9b:b2:30:b6:cc:f5:22:10:eb:90:06:99:
73:12:6e:bf:0b:d6:ec:e8:fe:56:f9:c4:f8:b5:5d:1e:40:e4:
86:69:be:af:66:ba:89:5e:98:55:36:9c:68:85:cc:c9:5b:3a:
db:51:5c:2a:e0:07:10:a0:94:a2:ac:01:05:cb:d8:06:7d:04:
82:5d:27:45:4e:99:37:26:14:7e:99:6e:01:14:78:95:03:4f:
84:29:1d:1f
-----BEGIN CERTIFICATE-----
MIIEojCCA4qgAwIBAgICChkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzFk
MTRlYmIyNTVkYzA1OGQ0YmZhNWE1MWM5M2Y3M2Y4MzBhYjg4ZjAeFw0yNDExMjIw
NzU1MDNaFw0yNTA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKDg3MjcxNUU3Qzk0QzdD
ODJBQjQ5Mzk5NzUzREY1NDkzRjZDOTEwRUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDIHZZEMoK+nXfPYr8yoq/apTYOtzQL5fV7PywTT4VhoPWL6mkm
m3vDiqKh0+M6XQEZmfHA4Kqu4/ZT/IpG537a2nOUkwc2mSv4/+jqD9NEv8WOqI44
sWLQTJdBQc3G3gnuyBnAs26YOItBRqieh4m3X77ZyXoDazERDHKsnXqHfON7xY2o
UUR43dFG0kT1f6G0R7FKzcTWIwSV2njj+L7WiLViscmU0fq0yWv9Oki5S2tDG/As
ED1LnyKFL66oieQqcfIfuxaY4bEcdje5fH0k4OSpu7vHG+xfiTCWCwFu2xixOdFW
YHa/6mGnbur0Kz8NponQcDDBohly6gTBrMj/AgMBAAGjggG+MIIBujAdBgNVHQ4E
FgQUhycV58lMfIKrSTmXU99Uk/bJEOowHwYDVR0jBBgwFoAUcdFOuyVdwFjUv6Wl
HJP3P4MKuI8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL2NobG9lLnNvYm9ybm9zdC5uZXQvcnBraS9SSVBFLW5scnNz
Zi9jZEZPdXlWZHdGalV2NldsSEpQM1A0TUt1STguY3JsMGQGCCsGAQUFBwEBBFgw
VjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9jZEZPdXlWZHdGalV2NldsSEpQM1A0TUt1STguY2VyMA4GA1UdDwEB
/wQEAwIHgDBoBggrBgEFBQcBCwRcMFowWAYIKwYBBQUHMAuGTHJzeW5jOi8vY2hs
b2Uuc29ib3Jub3N0Lm5ldC9ycGtpL1JJUEUtbmxyc3NmL2h5Y1Y1OGxNZklLclNU
bVhVOTlVa19iSkVPby5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADC
aIEwDQYJKoZIhvcNAQELBQADggEBACgwjXWlKSeqLZezZRGk+8cti46A5OH1E6+W
t3B+qim4xnos8Fo1bfQzHTlw/Y90m+rb6N/iQcs/eYKoissDxNe/OYp8O5tgwjm+
7Sz/MT1oSlszU5I7CuvH9pe31x6SflG2+ZzQ4wEwitppkzmTp2xNmNq3a5L9gPon
INcxwg1+enhm4yzdw451d54u3QiXD3UzvnozzVLTpd2azY+SN/VLzL7tupAtppuy
MLbM9SIQ65AGmXMSbr8L1uzo/lb5xPi1XR5A5IZpvq9muolemFU2nGiFzMlbOttR
XCrgBxCglKKsAQXL2AZ9BIJdJ0VOmTcmFH6ZbgEUeJUDT4QpHR8=
-----END CERTIFICATE-----
Generated at Fri Nov 22 15:07:43 2024 by rpki-client on console-ams.rpki-client.org