Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/jM-r5ao0Q1Wl-iesfSo5s0duYao.roa
File: jM-r5ao0Q1Wl-iesfSo5s0duYao.roa (raw, json)
Hash identifier: f/jGfZ7n8l+WiXMclWuPS/eVb4raUvmM7o6HfeNSGdY=
Subject key identifier: 8C:CF:AB:E5:AA:34:43:55:A5:FA:27:AC:7D:2A:39:B3:47:6E:61:AA
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0514
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/jM-r5ao0Q1Wl-iesfSo5s0duYao.roa
Signing time: Tue 02 Jul 2024 15:55:03 +0000
ROA not before: Tue 02 Jul 2024 15:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jul 2024 19:55:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1300 (0x514)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Jul 2 15:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8CCFABE5AA344355A5FA27AC7D2A39B3476E61AA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b6:71:49:d1:81:53:57:58:1a:4c:54:37:80:
ea:ed:31:91:c6:4f:b4:c4:12:3c:c6:37:0f:24:20:
9b:b1:70:59:80:e7:f0:48:86:0c:86:29:01:a5:c5:
fe:98:5b:6c:ec:1f:ac:6d:c0:b0:c5:a7:1f:f1:49:
e1:21:20:f8:68:4c:99:36:75:bd:5d:9f:f8:39:b7:
b5:6e:72:1a:f6:c1:95:22:6d:01:3f:02:a7:13:d1:
91:74:6c:ca:01:3f:95:16:45:7b:8c:04:27:de:b5:
05:05:5d:45:87:79:3f:b7:18:cf:e9:a9:80:14:43:
d4:28:fc:7d:5c:55:e6:33:41:e6:6e:aa:9c:20:41:
5f:81:91:cc:46:e2:07:7c:93:18:70:ca:02:e9:f4:
a2:c1:0f:6a:1c:44:94:c6:9c:c7:03:1d:ff:19:37:
4c:8a:8c:c3:a9:9a:ae:e0:83:a8:72:92:06:e4:d5:
be:dc:af:cc:ad:7e:09:a7:b5:ca:a3:5d:64:c7:01:
ab:a6:8e:6e:c0:02:0f:17:62:2b:96:0f:6e:cc:01:
c3:fa:c2:94:76:35:e3:58:b8:d2:31:a4:cf:30:df:
9b:8b:ea:d6:34:89:b5:d6:9f:c4:aa:2e:50:b8:21:
fe:a6:9a:06:05:49:99:9d:eb:da:be:30:ac:9f:db:
02:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:CF:AB:E5:AA:34:43:55:A5:FA:27:AC:7D:2A:39:B3:47:6E:61:AA
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/jM-r5ao0Q1Wl-iesfSo5s0duYao.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
96:96:ef:b5:ac:08:84:f1:3e:e7:70:bd:1b:a5:87:4b:4d:8e:
50:a2:86:b7:21:2f:9d:c2:7e:0c:12:bb:da:e5:57:28:72:f3:
e1:29:a4:1b:77:ba:32:9a:a6:c5:ea:11:30:29:62:13:df:28:
3f:51:df:83:2d:80:11:74:17:aa:c2:0d:53:6a:2c:17:5f:4f:
29:b1:40:8d:04:5f:84:4c:cc:79:50:0f:46:4a:97:cb:10:70:
db:a8:83:ed:5a:e6:ca:0e:06:8b:4d:df:e1:56:0b:aa:1a:b9:
7e:56:be:4c:2f:1d:18:91:86:f6:bf:6c:81:5c:27:c8:58:30:
4c:14:78:61:ff:d4:d4:a5:cc:ce:87:c8:00:39:9c:d5:60:e8:
e8:2f:6a:9a:79:15:ab:80:eb:33:50:1a:19:14:4d:9a:76:05:
58:71:1c:6c:90:37:69:53:b5:53:66:fd:ab:27:82:f1:7f:2c:
ba:2e:4c:b6:26:81:f0:40:3b:4a:af:d5:a2:36:1f:89:b9:f2:
a1:9a:46:e3:a5:f5:cd:dc:62:26:c7:a4:32:d1:59:c5:6f:ba:
69:6c:79:7d:28:02:1b:83:40:13:de:57:0d:6f:c3:e8:ca:b4:
1e:be:6a:ed:6f:3e:d5:5a:2d:c4:40:c4:45:82:d5:7a:f0:53:
2e:19:71:da
-----BEGIN CERTIFICATE-----
MIIEojCCA4qgAwIBAgICBRQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzFk
MTRlYmIyNTVkYzA1OGQ0YmZhNWE1MWM5M2Y3M2Y4MzBhYjg4ZjAeFw0yNDA3MDIx
NTU1MDNaFw0yNTA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKDhDQ0ZBQkU1QUEzNDQz
NTVBNUZBMjdBQzdEMkEzOUIzNDc2RTYxQUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDEtnFJ0YFTV1gaTFQ3gOrtMZHGT7TEEjzGNw8kIJuxcFmA5/BI
hgyGKQGlxf6YW2zsH6xtwLDFpx/xSeEhIPhoTJk2db1dn/g5t7Vuchr2wZUibQE/
AqcT0ZF0bMoBP5UWRXuMBCfetQUFXUWHeT+3GM/pqYAUQ9Qo/H1cVeYzQeZuqpwg
QV+BkcxG4gd8kxhwygLp9KLBD2ocRJTGnMcDHf8ZN0yKjMOpmq7gg6hykgbk1b7c
r8ytfgmntcqjXWTHAaumjm7AAg8XYiuWD27MAcP6wpR2NeNYuNIxpM8w35uL6tY0
ibXWn8SqLlC4If6mmgYFSZmd69q+MKyf2wJNAgMBAAGjggG+MIIBujAdBgNVHQ4E
FgQUjM+r5ao0Q1Wl+iesfSo5s0duYaowHwYDVR0jBBgwFoAUcdFOuyVdwFjUv6Wl
HJP3P4MKuI8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL2NobG9lLnNvYm9ybm9zdC5uZXQvcnBraS9SSVBFLW5scnNz
Zi9jZEZPdXlWZHdGalV2NldsSEpQM1A0TUt1STguY3JsMGQGCCsGAQUFBwEBBFgw
VjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9jZEZPdXlWZHdGalV2NldsSEpQM1A0TUt1STguY2VyMA4GA1UdDwEB
/wQEAwIHgDBoBggrBgEFBQcBCwRcMFowWAYIKwYBBQUHMAuGTHJzeW5jOi8vY2hs
b2Uuc29ib3Jub3N0Lm5ldC9ycGtpL1JJUEUtbmxyc3NmL2pNLXI1YW8wUTFXbC1p
ZXNmU281czBkdVlhby5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADC
aIEwDQYJKoZIhvcNAQELBQADggEBAJaW77WsCITxPudwvRulh0tNjlCihrchL53C
fgwSu9rlVyhy8+EppBt3ujKapsXqETApYhPfKD9R34MtgBF0F6rCDVNqLBdfTymx
QI0EX4RMzHlQD0ZKl8sQcNuog+1a5soOBotN3+FWC6oauX5WvkwvHRiRhva/bIFc
J8hYMEwUeGH/1NSlzM6HyAA5nNVg6Ogvapp5FauA6zNQGhkUTZp2BVhxHGyQN2lT
tVNm/asngvF/LLouTLYmgfBAO0qv1aI2H4m58qGaRuOl9c3cYibHpDLRWcVvumls
eX0oAhuDQBPeVw1vw+jKtB6+au1vPtVaLcRAxEWC1XrwUy4Zcdo=
-----END CERTIFICATE-----
Generated at Tue Jul 2 21:48:52 2024 by rpki-client on console-ams.rpki-client.org