Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/lajSn-4nmVI4i8XNOOogeHY-DoM.roa
File: lajSn-4nmVI4i8XNOOogeHY-DoM.roa (raw, json)
Hash identifier: 0e4wpKd99eZ/n8saNtuCGieWySAzXenH7f56nc7Ufsk=
Subject key identifier: 95:A8:D2:9F:EE:27:99:52:38:8B:C5:CD:38:EA:20:78:76:3E:0E:83
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 07AE
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/lajSn-4nmVI4i8XNOOogeHY-DoM.roa
Signing time: Sat 14 Sep 2024 15:55:02 +0000
ROA not before: Sat 14 Sep 2024 15:55:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 14 Sep 2024 19:55:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1966 (0x7ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Sep 14 15:55:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=95A8D29FEE279952388BC5CD38EA2078763E0E83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:6a:c8:1a:6d:d1:cd:f6:a6:e8:1c:59:ac:de:
16:c6:0a:27:f2:fa:26:f4:95:84:f8:39:50:ea:2c:
8b:f6:c2:62:10:c2:a6:2c:03:20:fc:a6:5c:23:5b:
92:6b:39:6f:91:31:88:41:8a:f4:6a:c3:60:4e:77:
10:71:0e:79:03:1f:6d:f1:d4:58:da:cd:c2:ae:6b:
52:9c:dc:27:7b:89:e5:bb:0c:44:ed:3e:41:52:83:
a3:ef:94:56:2c:9c:d6:1b:7e:27:3f:55:09:80:4d:
0c:70:e5:ea:56:34:05:0b:85:c8:bb:e4:59:1e:2d:
55:c7:df:6b:c9:25:7a:46:5d:01:64:65:fd:5d:c0:
70:60:ac:45:60:59:48:54:bd:47:de:4d:b3:e0:06:
a3:8b:3f:8c:26:57:1f:c7:49:1c:f8:23:a8:e4:9c:
ad:fd:3c:07:09:b5:ee:84:f0:d6:97:cc:c9:13:79:
64:c1:2c:fb:c0:0b:e1:89:97:2a:a0:b9:48:77:a4:
b3:dd:18:6b:17:79:80:27:92:45:1e:77:e2:3f:7b:
55:16:2e:0c:63:36:c4:87:5a:48:6f:a4:2f:28:5a:
69:a0:f8:bb:4f:d2:d3:10:2f:82:49:49:ce:d9:aa:
69:a9:d2:a5:12:74:12:bc:2c:5e:7b:0e:93:79:32:
d9:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:A8:D2:9F:EE:27:99:52:38:8B:C5:CD:38:EA:20:78:76:3E:0E:83
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/lajSn-4nmVI4i8XNOOogeHY-DoM.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:33:75:42:a8:45:12:10:cf:0d:c6:73:01:05:e5:6c:ae:58:
70:ba:0b:a6:37:db:d5:1d:f2:19:43:0a:b4:44:ab:61:02:a8:
52:2c:b1:87:ac:13:77:d4:6b:76:59:98:e7:15:8c:74:c6:79:
1d:92:c8:ea:c1:a9:4e:1d:42:d4:47:fb:fc:69:b6:39:a9:78:
07:fc:53:0a:40:65:50:e0:ef:83:bc:02:22:74:bf:c7:78:66:
39:ca:13:f1:f6:63:d8:ed:7d:b6:30:61:85:8e:cf:f9:4e:41:
1f:b3:44:ca:9b:a5:57:06:6a:fa:b3:74:c2:b5:24:14:76:eb:
0e:f5:8d:d3:c9:72:32:4c:93:a4:f1:7b:ce:e6:30:40:50:9e:
b1:cf:48:3d:b3:ea:2e:68:f3:e6:ca:d9:11:ed:95:53:24:28:
42:ed:b5:89:09:82:98:a7:f9:21:6a:ec:84:68:b8:b8:9c:03:
9e:d3:75:59:13:5b:e5:c7:f8:00:0f:05:55:4d:34:3b:cd:08:
a5:78:65:e2:15:37:d9:ef:0d:c5:16:fc:07:e2:4d:07:96:ba:
fc:d3:9e:78:3a:f8:b3:ed:92:c6:aa:e7:65:13:dc:fb:81:c5:
85:27:92:61:ea:0c:64:7d:de:06:0a:02:d6:53:97:15:73:66:
ad:32:80:a8
-----BEGIN CERTIFICATE-----
MIIEojCCA4qgAwIBAgICB64wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzFk
MTRlYmIyNTVkYzA1OGQ0YmZhNWE1MWM5M2Y3M2Y4MzBhYjg4ZjAeFw0yNDA5MTQx
NTU1MDJaFw0yNTA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKDk1QThEMjlGRUUyNzk5
NTIzODhCQzVDRDM4RUEyMDc4NzYzRTBFODMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDQasgabdHN9qboHFms3hbGCify+ib0lYT4OVDqLIv2wmIQwqYs
AyD8plwjW5JrOW+RMYhBivRqw2BOdxBxDnkDH23x1FjazcKua1Kc3Cd7ieW7DETt
PkFSg6PvlFYsnNYbfic/VQmATQxw5epWNAULhci75FkeLVXH32vJJXpGXQFkZf1d
wHBgrEVgWUhUvUfeTbPgBqOLP4wmVx/HSRz4I6jknK39PAcJte6E8NaXzMkTeWTB
LPvAC+GJlyqguUh3pLPdGGsXeYAnkkUed+I/e1UWLgxjNsSHWkhvpC8oWmmg+LtP
0tMQL4JJSc7Zqmmp0qUSdBK8LF57DpN5MtmzAgMBAAGjggG+MIIBujAdBgNVHQ4E
FgQUlajSn+4nmVI4i8XNOOogeHY+DoMwHwYDVR0jBBgwFoAUcdFOuyVdwFjUv6Wl
HJP3P4MKuI8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL2NobG9lLnNvYm9ybm9zdC5uZXQvcnBraS9SSVBFLW5scnNz
Zi9jZEZPdXlWZHdGalV2NldsSEpQM1A0TUt1STguY3JsMGQGCCsGAQUFBwEBBFgw
VjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9jZEZPdXlWZHdGalV2NldsSEpQM1A0TUt1STguY2VyMA4GA1UdDwEB
/wQEAwIHgDBoBggrBgEFBQcBCwRcMFowWAYIKwYBBQUHMAuGTHJzeW5jOi8vY2hs
b2Uuc29ib3Jub3N0Lm5ldC9ycGtpL1JJUEUtbmxyc3NmL2xhalNuLTRubVZJNGk4
WE5PT29nZUhZLURvTS5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADC
aIEwDQYJKoZIhvcNAQELBQADggEBALwzdUKoRRIQzw3GcwEF5WyuWHC6C6Y329Ud
8hlDCrREq2ECqFIssYesE3fUa3ZZmOcVjHTGeR2SyOrBqU4dQtRH+/xptjmpeAf8
UwpAZVDg74O8AiJ0v8d4ZjnKE/H2Y9jtfbYwYYWOz/lOQR+zRMqbpVcGavqzdMK1
JBR26w71jdPJcjJMk6Txe87mMEBQnrHPSD2z6i5o8+bK2RHtlVMkKELttYkJgpin
+SFq7IRouLicA57TdVkTW+XH+AAPBVVNNDvNCKV4ZeIVN9nvDcUW/AfiTQeWuvzT
nng6+LPtksaq52UT3PuBxYUnkmHqDGR93gYKAtZTlxVzZq0ygKg=
-----END CERTIFICATE-----
Generated at Sat Sep 14 21:01:30 2024 by rpki-client on console-ams.rpki-client.org