Route Origin Authorization

$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/lfhzQfdOazamUvBgfk_vEvZJJVA.roa
File:                     lfhzQfdOazamUvBgfk_vEvZJJVA.roa (raw, json)
Hash identifier:          CRaa7EiQi7TIiz5frHzpg0ykVGILzvA539qT/umugtY=
Subject key identifier:   95:F8:73:41:F7:4E:6B:36:A6:52:F0:60:7E:4F:EF:12:F6:49:25:50
Certificate issuer:       /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial:       06C7
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access:      rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/lfhzQfdOazamUvBgfk_vEvZJJVA.roa
Signing time:             Mon 19 Aug 2024 23:55:04 +0000
ROA not before:           Mon 19 Aug 2024 23:55:04 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     15562
IP address blocks:        194.104.129.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 20 Aug 2024 03:55:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1735 (0x6c7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
        Validity
            Not Before: Aug 19 23:55:04 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=95F87341F74E6B36A652F0607E4FEF12F6492550
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:64:ea:5a:95:63:70:18:c5:f3:0b:22:99:55:
                    f5:c1:93:c0:84:cf:d2:cd:1f:46:5e:1e:41:64:a0:
                    47:49:7d:b3:71:40:04:63:74:fd:f5:6e:4a:69:2a:
                    eb:fe:17:09:54:68:0a:ba:33:4d:f0:34:c5:9b:cc:
                    17:ea:c9:a3:99:7d:fe:a3:aa:79:b9:92:5b:eb:e4:
                    3a:6a:31:38:6a:c9:37:2d:7a:6a:cb:19:8d:fe:5e:
                    3f:76:99:92:e6:66:bc:9e:74:2a:7c:74:6a:9d:33:
                    ea:ac:0c:7f:12:63:1b:6c:8f:1c:70:f4:c5:81:3e:
                    51:1d:91:38:2f:6f:41:78:90:88:bd:9e:df:58:75:
                    08:49:6b:8b:c1:ca:d2:dd:e8:f4:15:f1:91:85:db:
                    32:d2:6c:2d:bc:e9:f1:af:8c:8d:c1:47:c4:35:58:
                    b0:49:53:8c:16:8e:ab:0f:28:8c:b1:ee:d5:be:35:
                    2b:10:8d:4e:6c:65:f7:ab:df:88:06:89:19:b1:5a:
                    26:2f:9b:2d:ab:57:45:a6:70:2d:2c:ca:b6:16:0d:
                    a3:70:e1:0e:3a:9e:cb:7d:13:7c:66:80:6b:54:95:
                    40:aa:7d:f2:85:54:0e:c6:7c:3f:d4:4c:52:a7:18:
                    fc:86:8b:4f:73:1b:b9:6b:e6:2c:24:c5:e7:5d:47:
                    55:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:F8:73:41:F7:4E:6B:36:A6:52:F0:60:7E:4F:EF:12:F6:49:25:50
            X509v3 Authority Key Identifier:
                keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/lfhzQfdOazamUvBgfk_vEvZJJVA.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.104.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:f8:e8:f8:89:da:19:b7:92:38:e8:1c:d6:f2:22:50:4d:30:
         13:0f:91:af:58:77:f5:e1:de:22:1c:3f:76:15:d1:9b:15:8e:
         6c:a0:b6:62:d6:6f:d0:0a:c7:c3:fc:99:18:aa:a2:0d:08:60:
         1d:d3:9f:6d:07:db:14:ae:eb:fa:0c:93:88:cc:67:0a:ff:06:
         33:bd:7f:44:5b:a2:ea:14:95:b0:d5:3a:cb:74:e7:2d:b9:3c:
         2d:ae:46:ec:b8:f0:ff:80:b3:72:23:f2:d4:de:b5:42:f2:59:
         d0:57:2e:9a:83:2c:94:89:d1:20:18:18:c7:eb:7f:e1:9e:7e:
         2b:c8:64:30:19:c3:a8:3b:db:05:94:c6:13:8d:ff:08:9d:8c:
         dc:8d:01:a4:03:70:ff:e4:83:96:4c:2c:1c:25:03:c9:23:65:
         5f:b2:22:c0:65:21:cc:13:0c:87:4e:57:57:7d:ff:0e:b4:c5:
         a3:74:8e:da:50:7e:15:49:8c:9e:05:4c:db:16:85:0e:a6:20:
         fe:f6:96:d4:32:49:1e:53:21:cc:89:58:61:54:89:c5:d6:70:
         7a:e1:55:25:68:1b:2c:10:11:77:d7:0b:4d:f5:d5:a0:c4:6c:
         eb:9d:e9:78:d3:f1:99:31:9b:dd:f0:b4:d6:ce:d2:45:20:1b:
         20:30:7b:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 20 08:01:56 2024 by rpki-client on console-ams.rpki-client.org