Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/iEUtYaTCpZWEx8F0WrtCJcTBly8.roa
File: iEUtYaTCpZWEx8F0WrtCJcTBly8.roa (raw, json)
Hash identifier: jjXC4xnPzCXz4AncVqJMcAjsfVx0Yeg0HvXkopWp+jk=
Subject key identifier: 88:45:2D:61:A4:C2:A5:95:84:C7:C1:74:5A:BB:42:25:C4:C1:97:2F
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0622
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/iEUtYaTCpZWEx8F0WrtCJcTBly8.roa
Signing time: Thu 01 Aug 2024 15:55:03 +0000
ROA not before: Thu 01 Aug 2024 15:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 01 Aug 2024 19:55:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1570 (0x622)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Aug 1 15:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=88452D61A4C2A59584C7C1745ABB4225C4C1972F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:e3:87:7e:af:76:99:f3:d2:ea:4f:b5:bc:ee:
66:36:6c:aa:53:50:17:4f:92:36:33:5d:da:94:15:
2a:62:2b:a1:40:df:83:d1:07:8c:c9:fd:f3:7f:15:
6f:0d:d3:50:62:e2:32:ed:fa:73:cc:f4:8c:ca:29:
2f:5d:1e:70:ca:d1:f5:3c:bd:81:f9:e4:2c:a4:68:
df:21:07:03:a5:50:8f:2f:8f:6b:44:96:d0:5c:1a:
0d:d7:95:fa:40:3f:3b:49:1c:7d:ec:0a:85:88:7f:
c0:40:65:d9:7c:c3:7f:0d:88:5b:96:2b:60:cb:65:
bd:fa:f0:34:89:fd:22:a1:ca:d7:92:cb:f1:e3:86:
8b:c6:00:24:22:df:a5:ae:f4:44:6d:6c:8e:ff:c7:
e3:6f:7f:a1:c1:1c:9a:89:8d:6b:96:2e:dc:ea:f1:
be:2f:53:ef:4d:ab:4a:d4:23:c9:7f:ba:9a:e1:9b:
07:c7:eb:a6:73:6e:b9:39:82:ba:01:b8:f2:0c:47:
25:63:5e:36:83:e4:58:88:ed:93:a7:de:12:ae:05:
2f:1e:b4:ab:99:a1:eb:b6:2c:c3:07:71:a9:6d:15:
ca:23:5f:28:83:90:a8:89:58:60:d6:a4:a1:0c:ea:
b9:16:49:f5:2d:2b:67:eb:1f:e5:47:03:3b:b5:d2:
22:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:45:2D:61:A4:C2:A5:95:84:C7:C1:74:5A:BB:42:25:C4:C1:97:2F
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/iEUtYaTCpZWEx8F0WrtCJcTBly8.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
dd:f1:92:5d:15:75:75:fc:75:dd:7c:ee:7d:9d:0b:40:3c:f8:
19:8f:1d:88:86:b6:cb:52:db:cc:86:e7:e9:8c:d2:43:7e:5c:
5e:d5:2c:dd:ed:a9:37:a4:c6:20:05:87:7b:a9:9a:1f:76:56:
bf:27:15:88:04:0e:ba:ac:f6:ba:5f:3e:05:2b:17:fc:ad:00:
26:f3:2c:91:88:ff:df:c0:ae:ff:4e:1c:88:62:4a:29:f0:f4:
d2:ca:be:e6:da:4d:7d:22:26:17:de:ff:da:0d:04:67:df:aa:
18:48:8f:58:8e:70:ae:65:9c:65:1b:0d:ad:2d:d3:ed:19:a5:
12:d9:ed:94:6b:e0:ba:47:b4:37:c6:8c:2c:59:06:7c:f4:84:
99:c2:dd:be:3c:85:59:c9:d1:16:ec:d2:eb:f5:77:58:25:58:
a8:eb:bd:9a:f0:86:3e:0c:6b:07:7a:0b:86:95:fd:c2:5b:b1:
ed:ae:31:f4:12:53:78:65:c1:2f:6d:18:ec:1e:af:4d:a4:bf:
bf:9b:05:3d:6c:2e:b0:a9:d6:47:b4:ba:90:d8:9d:56:e3:1f:
4b:01:10:69:d7:32:9a:93:44:d3:95:42:c2:7a:2e:79:89:f5:
30:9d:6d:ca:c5:91:40:0b:b5:83:b6:0c:c0:fb:5f:8a:91:9d:
89:f5:51:29
-----BEGIN CERTIFICATE-----
MIIEojCCA4qgAwIBAgICBiIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzFk
MTRlYmIyNTVkYzA1OGQ0YmZhNWE1MWM5M2Y3M2Y4MzBhYjg4ZjAeFw0yNDA4MDEx
NTU1MDNaFw0yNTA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKDg4NDUyRDYxQTRDMkE1
OTU4NEM3QzE3NDVBQkI0MjI1QzRDMTk3MkYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDP44d+r3aZ89LqT7W87mY2bKpTUBdPkjYzXdqUFSpiK6FA34PR
B4zJ/fN/FW8N01Bi4jLt+nPM9IzKKS9dHnDK0fU8vYH55CykaN8hBwOlUI8vj2tE
ltBcGg3XlfpAPztJHH3sCoWIf8BAZdl8w38NiFuWK2DLZb368DSJ/SKhyteSy/Hj
hovGACQi36Wu9ERtbI7/x+Nvf6HBHJqJjWuWLtzq8b4vU+9Nq0rUI8l/uprhmwfH
66Zzbrk5groBuPIMRyVjXjaD5FiI7ZOn3hKuBS8etKuZoeu2LMMHcaltFcojXyiD
kKiJWGDWpKEM6rkWSfUtK2frH+VHAzu10iJbAgMBAAGjggG+MIIBujAdBgNVHQ4E
FgQUiEUtYaTCpZWEx8F0WrtCJcTBly8wHwYDVR0jBBgwFoAUcdFOuyVdwFjUv6Wl
HJP3P4MKuI8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL2NobG9lLnNvYm9ybm9zdC5uZXQvcnBraS9SSVBFLW5scnNz
Zi9jZEZPdXlWZHdGalV2NldsSEpQM1A0TUt1STguY3JsMGQGCCsGAQUFBwEBBFgw
VjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9jZEZPdXlWZHdGalV2NldsSEpQM1A0TUt1STguY2VyMA4GA1UdDwEB
/wQEAwIHgDBoBggrBgEFBQcBCwRcMFowWAYIKwYBBQUHMAuGTHJzeW5jOi8vY2hs
b2Uuc29ib3Jub3N0Lm5ldC9ycGtpL1JJUEUtbmxyc3NmL2lFVXRZYVRDcFpXRXg4
RjBXcnRDSmNUQmx5OC5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADC
aIEwDQYJKoZIhvcNAQELBQADggEBAN3xkl0VdXX8dd187n2dC0A8+BmPHYiGtstS
28yG5+mM0kN+XF7VLN3tqTekxiAFh3upmh92Vr8nFYgEDrqs9rpfPgUrF/ytACbz
LJGI/9/Arv9OHIhiSinw9NLKvubaTX0iJhfe/9oNBGffqhhIj1iOcK5lnGUbDa0t
0+0ZpRLZ7ZRr4LpHtDfGjCxZBnz0hJnC3b48hVnJ0Rbs0uv1d1glWKjrvZrwhj4M
awd6C4aV/cJbse2uMfQSU3hlwS9tGOwer02kv7+bBT1sLrCp1ke0upDYnVbjH0sB
EGnXMpqTRNOVQsJ6LnmJ9TCdbcrFkUALtYO2DMD7X4qRnYn1USk=
-----END CERTIFICATE-----
Generated at Thu Aug 1 21:00:55 2024 by rpki-client on console-fra.rpki-client.org