Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/l2elog5hFO_bzioDx8kH-tOl9jI.roa
File: l2elog5hFO_bzioDx8kH-tOl9jI.roa (raw, json)
Hash identifier: hEQjEN8w6lQh6JEMLIrjxmT/k/7UU4ve0DvfuEQuzJQ=
Subject key identifier: 97:67:A5:A2:0E:61:14:EF:DB:CE:2A:03:C7:C9:07:FA:D3:A5:F6:32
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 05EC
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/l2elog5hFO_bzioDx8kH-tOl9jI.roa
Signing time: Fri 26 Jul 2024 15:55:03 +0000
ROA not before: Fri 26 Jul 2024 15:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 26 Jul 2024 19:55:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1516 (0x5ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Jul 26 15:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9767A5A20E6114EFDBCE2A03C7C907FAD3A5F632
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:33:a1:d2:73:e2:5b:8d:16:a3:79:07:b6:33:
9f:a9:53:54:45:aa:04:50:b2:8c:17:bd:33:bb:8c:
49:f8:d0:ac:5a:d2:4c:0c:e0:a7:ef:1f:90:dd:4b:
99:89:b2:71:3d:0f:6d:00:1c:38:8c:98:c6:ff:c6:
15:84:e9:d5:ce:91:13:ec:76:9c:49:23:de:66:b1:
c9:43:56:be:7d:47:d4:d2:1b:f9:2a:87:fb:eb:42:
04:50:51:c3:83:fe:bf:88:f1:30:96:f9:94:c0:90:
b6:48:86:c4:4f:ec:70:b3:47:20:0b:9d:a5:8f:81:
76:28:5a:7d:21:4e:1f:4d:f4:8c:3a:1b:9c:b3:0e:
e5:96:1c:8f:c6:8a:55:f9:86:06:33:bf:cf:9f:fd:
61:bd:35:fc:37:48:3f:6a:1b:d1:27:bf:c2:ee:da:
89:53:55:2a:7e:59:29:20:94:46:3a:9d:3e:bc:20:
37:ab:2f:0a:5e:c6:0c:67:a8:bf:04:9f:82:47:7c:
ae:93:04:39:b0:08:d3:4f:33:30:b5:05:3f:9e:16:
b6:1e:d0:21:0e:82:f6:4c:fa:32:e9:00:03:d6:90:
99:b7:00:a9:27:56:e2:46:c2:d5:ec:08:f0:b5:a8:
5f:4c:f7:64:5e:00:3d:b0:01:ff:7d:60:bb:22:48:
e9:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:67:A5:A2:0E:61:14:EF:DB:CE:2A:03:C7:C9:07:FA:D3:A5:F6:32
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/l2elog5hFO_bzioDx8kH-tOl9jI.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:a7:46:61:d1:90:e2:a8:59:fa:13:f6:cb:00:c1:b1:1b:a9:
b9:bb:75:ec:41:3d:73:0d:4a:5e:01:1f:c6:1c:9a:2a:f5:f5:
71:f3:49:fb:e0:9f:d2:61:89:0b:be:fc:0f:a3:bd:b9:bc:ca:
0f:a3:93:6c:4d:31:0e:df:13:6f:a2:2b:8a:dd:eb:c0:bf:cc:
05:79:ab:c4:b5:07:a7:05:f7:25:af:1d:55:4f:3a:76:38:00:
6a:4c:b4:36:e9:7c:dc:66:15:d8:05:b7:cd:6a:83:ae:c1:af:
08:69:9f:e0:29:f9:38:50:20:0d:8f:18:bb:45:8e:4a:27:5d:
d6:3d:3c:26:21:6b:8a:f7:1c:1a:6d:5c:d1:f1:56:49:41:b8:
2e:2e:80:ad:7c:1f:75:67:b0:79:54:11:18:64:6c:94:8b:b9:
63:2e:fc:b3:d6:4c:36:29:88:dd:6e:7e:cb:8c:c4:db:1b:aa:
04:af:af:fa:14:e2:14:dc:1a:76:90:03:59:05:de:b3:45:53:
c2:71:dd:c5:19:de:18:29:27:2a:cb:f9:5b:bd:df:05:7e:3c:
ab:e9:0c:cd:7e:28:ad:59:f9:71:f5:25:6d:00:c6:20:d2:29:
a5:7c:ba:9e:6d:ec:1f:59:29:b5:6f:37:39:9f:04:38:be:2e:
aa:ce:94:43
-----BEGIN CERTIFICATE-----
MIIEojCCA4qgAwIBAgICBewwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzFk
MTRlYmIyNTVkYzA1OGQ0YmZhNWE1MWM5M2Y3M2Y4MzBhYjg4ZjAeFw0yNDA3MjYx
NTU1MDNaFw0yNTA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKDk3NjdBNUEyMEU2MTE0
RUZEQkNFMkEwM0M3QzkwN0ZBRDNBNUY2MzIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCzM6HSc+JbjRajeQe2M5+pU1RFqgRQsowXvTO7jEn40Kxa0kwM
4KfvH5DdS5mJsnE9D20AHDiMmMb/xhWE6dXOkRPsdpxJI95msclDVr59R9TSG/kq
h/vrQgRQUcOD/r+I8TCW+ZTAkLZIhsRP7HCzRyALnaWPgXYoWn0hTh9N9Iw6G5yz
DuWWHI/GilX5hgYzv8+f/WG9Nfw3SD9qG9Env8Lu2olTVSp+WSkglEY6nT68IDer
LwpexgxnqL8En4JHfK6TBDmwCNNPMzC1BT+eFrYe0CEOgvZM+jLpAAPWkJm3AKkn
VuJGwtXsCPC1qF9M92ReAD2wAf99YLsiSOkjAgMBAAGjggG+MIIBujAdBgNVHQ4E
FgQUl2elog5hFO/bzioDx8kH+tOl9jIwHwYDVR0jBBgwFoAUcdFOuyVdwFjUv6Wl
HJP3P4MKuI8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL2NobG9lLnNvYm9ybm9zdC5uZXQvcnBraS9SSVBFLW5scnNz
Zi9jZEZPdXlWZHdGalV2NldsSEpQM1A0TUt1STguY3JsMGQGCCsGAQUFBwEBBFgw
VjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9jZEZPdXlWZHdGalV2NldsSEpQM1A0TUt1STguY2VyMA4GA1UdDwEB
/wQEAwIHgDBoBggrBgEFBQcBCwRcMFowWAYIKwYBBQUHMAuGTHJzeW5jOi8vY2hs
b2Uuc29ib3Jub3N0Lm5ldC9ycGtpL1JJUEUtbmxyc3NmL2wyZWxvZzVoRk9fYnpp
b0R4OGtILXRPbDlqSS5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADC
aIEwDQYJKoZIhvcNAQELBQADggEBAC+nRmHRkOKoWfoT9ssAwbEbqbm7dexBPXMN
Sl4BH8Ycmir19XHzSfvgn9JhiQu+/A+jvbm8yg+jk2xNMQ7fE2+iK4rd68C/zAV5
q8S1B6cF9yWvHVVPOnY4AGpMtDbpfNxmFdgFt81qg67Brwhpn+Ap+ThQIA2PGLtF
jkonXdY9PCYha4r3HBptXNHxVklBuC4ugK18H3VnsHlUERhkbJSLuWMu/LPWTDYp
iN1ufsuMxNsbqgSvr/oU4hTcGnaQA1kF3rNFU8Jx3cUZ3hgpJyrL+Vu93wV+PKvp
DM1+KK1Z+XH1JW0AxiDSKaV8up5t7B9ZKbVvNzmfBDi+LqrOlEM=
-----END CERTIFICATE-----
Generated at Fri Jul 26 21:40:04 2024 by rpki-client on console-fra.rpki-client.org