Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/jCu1rEVFWnWx7Cl895xmgG9FPhs.roa
File: jCu1rEVFWnWx7Cl895xmgG9FPhs.roa (raw, json)
Hash identifier: uWr+IoGf+3uGncb+FBxxhGZgnZ8ENTQ4QF97b3IO8qQ=
Subject key identifier: 8C:2B:B5:AC:45:45:5A:75:B1:EC:29:7C:F7:9C:66:80:6F:45:3E:1B
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0466
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/jCu1rEVFWnWx7Cl895xmgG9FPhs.roa
Signing time: Thu 13 Jun 2024 07:55:03 +0000
ROA not before: Thu 13 Jun 2024 07:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 13 Jun 2024 11:55:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1126 (0x466)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Jun 13 07:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8C2BB5AC45455A75B1EC297CF79C66806F453E1B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:4e:e7:29:ce:38:83:78:56:cb:66:6c:f9:5c:
4a:a1:45:d4:77:00:03:f3:bb:d8:6a:6c:68:9b:db:
a2:e5:a9:29:bf:a3:38:de:3c:4b:dd:4d:6c:0a:7d:
5c:81:08:df:a0:e0:f6:0b:89:bf:e1:c2:de:bc:53:
4b:9e:c8:e4:f6:78:56:cf:d2:49:b6:a4:25:f6:90:
f1:76:38:ab:0b:04:e9:b2:09:a9:d5:88:4c:b8:9b:
28:a0:a0:e6:93:2c:aa:fc:02:13:f5:7d:b4:60:b2:
42:ff:cc:b5:bd:98:11:bf:4c:41:51:98:61:0b:40:
30:88:16:8f:83:68:59:e8:6f:5d:6a:ea:7b:9a:d7:
77:f8:24:d4:69:2d:e1:83:cc:f9:12:20:38:9b:1d:
69:55:d9:0a:55:7e:65:a6:9a:53:fb:af:5f:46:5a:
5c:30:01:75:59:71:05:8a:78:8f:ad:87:ae:43:a0:
b3:bc:9a:0f:aa:9c:e4:8c:65:ac:b8:1d:44:c9:40:
65:52:ff:b5:14:f8:95:5c:9b:75:12:86:84:2e:22:
e6:a7:e8:7d:58:03:8e:8d:01:c1:66:d9:3f:66:c7:
d1:43:1e:c5:01:bf:4f:a0:39:6e:21:9b:de:b4:c1:
ce:1a:9a:e0:7e:e1:ef:d1:3b:c0:77:1a:61:39:b4:
a3:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:2B:B5:AC:45:45:5A:75:B1:EC:29:7C:F7:9C:66:80:6F:45:3E:1B
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/jCu1rEVFWnWx7Cl895xmgG9FPhs.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
d7:e9:02:46:58:d5:4b:81:29:3f:83:bc:21:7f:63:d8:6f:1f:
4e:09:2c:3f:2a:10:f0:31:83:c4:4b:54:af:b8:da:e7:ff:b4:
b7:a3:40:c5:29:d0:cd:4f:3e:6c:d7:bb:40:a7:5d:b4:c1:3e:
d3:4b:48:1a:05:21:13:07:82:db:6a:b3:16:40:fe:ea:1e:5c:
55:21:c1:80:12:a3:fb:46:35:55:ef:bb:d8:38:0c:92:58:b8:
74:ca:68:e5:7d:1a:04:1c:64:60:af:81:f3:b1:9c:d4:4d:5c:
d1:f0:9a:d2:1a:e1:5e:e4:d8:6d:6d:1f:a2:04:de:3e:bb:09:
9d:83:80:2a:49:c4:02:03:30:96:dc:f8:b5:70:29:bb:18:5b:
24:0c:96:48:64:73:bd:c5:ef:85:99:c7:3b:56:69:df:7f:01:
2c:cf:3a:7f:43:05:fb:ab:65:b6:f0:ef:ce:96:10:57:bc:20:
5d:ad:45:3e:20:6b:ae:fc:11:c4:5f:cf:13:1f:4e:fa:1b:23:
5f:aa:cb:bd:01:7e:9d:c6:e2:e3:c9:f4:cb:6c:f7:89:93:2e:
aa:fa:b3:f1:ae:f2:a5:25:14:9f:f0:2d:c0:7c:9d:68:3a:f6:
e5:5a:2d:7d:b3:d7:e6:3b:3f:05:e6:7f:9f:77:a7:4f:f0:ce:
c2:f3:28:2f
-----BEGIN CERTIFICATE-----
MIIEojCCA4qgAwIBAgICBGYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzFk
MTRlYmIyNTVkYzA1OGQ0YmZhNWE1MWM5M2Y3M2Y4MzBhYjg4ZjAeFw0yNDA2MTMw
NzU1MDNaFw0yNTA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKDhDMkJCNUFDNDU0NTVB
NzVCMUVDMjk3Q0Y3OUM2NjgwNkY0NTNFMUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCiTucpzjiDeFbLZmz5XEqhRdR3AAPzu9hqbGib26LlqSm/ozje
PEvdTWwKfVyBCN+g4PYLib/hwt68U0ueyOT2eFbP0km2pCX2kPF2OKsLBOmyCanV
iEy4myigoOaTLKr8AhP1fbRgskL/zLW9mBG/TEFRmGELQDCIFo+DaFnob11q6nua
13f4JNRpLeGDzPkSIDibHWlV2QpVfmWmmlP7r19GWlwwAXVZcQWKeI+th65DoLO8
mg+qnOSMZay4HUTJQGVS/7UU+JVcm3UShoQuIuan6H1YA46NAcFm2T9mx9FDHsUB
v0+gOW4hm960wc4amuB+4e/RO8B3GmE5tKNVAgMBAAGjggG+MIIBujAdBgNVHQ4E
FgQUjCu1rEVFWnWx7Cl895xmgG9FPhswHwYDVR0jBBgwFoAUcdFOuyVdwFjUv6Wl
HJP3P4MKuI8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL2NobG9lLnNvYm9ybm9zdC5uZXQvcnBraS9SSVBFLW5scnNz
Zi9jZEZPdXlWZHdGalV2NldsSEpQM1A0TUt1STguY3JsMGQGCCsGAQUFBwEBBFgw
VjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9jZEZPdXlWZHdGalV2NldsSEpQM1A0TUt1STguY2VyMA4GA1UdDwEB
/wQEAwIHgDBoBggrBgEFBQcBCwRcMFowWAYIKwYBBQUHMAuGTHJzeW5jOi8vY2hs
b2Uuc29ib3Jub3N0Lm5ldC9ycGtpL1JJUEUtbmxyc3NmL2pDdTFyRVZGV25XeDdD
bDg5NXhtZ0c5RlBocy5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADC
aIEwDQYJKoZIhvcNAQELBQADggEBANfpAkZY1UuBKT+DvCF/Y9hvH04JLD8qEPAx
g8RLVK+42uf/tLejQMUp0M1PPmzXu0CnXbTBPtNLSBoFIRMHgttqsxZA/uoeXFUh
wYASo/tGNVXvu9g4DJJYuHTKaOV9GgQcZGCvgfOxnNRNXNHwmtIa4V7k2G1tH6IE
3j67CZ2DgCpJxAIDMJbc+LVwKbsYWyQMlkhkc73F74WZxztWad9/ASzPOn9DBfur
Zbbw786WEFe8IF2tRT4ga678EcRfzxMfTvobI1+qy70Bfp3G4uPJ9Mts94mTLqr6
s/Gu8qUlFJ/wLcB8nWg69uVaLX2z1+Y7PwXmf593p0/wzsLzKC8=
-----END CERTIFICATE-----
Generated at Thu Jun 13 16:34:25 2024 by rpki-client on console-ams.rpki-client.org