Route Origin Authorization

$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/lrstQmaJ6NQqFbJO_wzYA_Nh72k.roa
File:                     lrstQmaJ6NQqFbJO_wzYA_Nh72k.roa (raw, json)
Hash identifier:          Ib1CQyQwmvGTwIx/773GZ31dJnEsWo6Ti9C1Z0O2d78=
Subject key identifier:   96:BB:2D:42:66:89:E8:D4:2A:15:B2:4E:FF:0C:D8:03:F3:61:EF:69
Certificate issuer:       /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial:       0619
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access:      rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/lrstQmaJ6NQqFbJO_wzYA_Nh72k.roa
Signing time:             Wed 31 Jul 2024 15:55:04 +0000
ROA not before:           Wed 31 Jul 2024 15:55:04 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     15562
IP address blocks:        194.104.129.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 31 Jul 2024 19:55:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1561 (0x619)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
        Validity
            Not Before: Jul 31 15:55:04 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=96BB2D426689E8D42A15B24EFF0CD803F361EF69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:c5:d6:9c:7d:80:25:df:20:45:c6:57:10:29:
                    ee:65:b7:01:44:01:26:4b:78:c1:a5:fa:80:9f:84:
                    eb:cc:44:1e:fc:b1:0f:c0:52:99:fc:e5:9c:94:b8:
                    f8:32:7a:7a:5a:a4:82:d9:a4:bc:32:c6:c0:56:8f:
                    8b:10:12:20:a7:6b:33:61:a4:27:87:3e:e5:02:d1:
                    1f:09:5a:f9:ff:9b:12:a5:0e:0f:38:29:b5:fd:99:
                    07:a4:db:5d:b8:f2:6b:18:9e:f2:a5:3c:d9:de:4f:
                    46:e7:ca:79:df:c1:73:da:c8:23:33:a2:c3:fd:d4:
                    d9:76:ca:27:99:e6:7b:f4:c4:8a:1b:67:7c:ec:2b:
                    cb:a4:a8:be:ec:8b:cd:dd:90:04:6b:5d:a2:6d:70:
                    ac:dc:e5:05:53:3c:d1:46:89:93:49:47:66:ef:80:
                    d2:01:26:39:d8:25:41:2c:0c:7e:44:84:52:a5:11:
                    f9:c7:ac:5c:36:b5:34:50:02:9d:27:bb:77:7b:c9:
                    fd:b6:07:eb:61:cb:38:5c:32:d9:12:ed:4f:56:98:
                    ed:18:89:4f:e0:72:6e:1c:b9:27:80:cb:9b:a3:ea:
                    03:39:2d:aa:c8:25:58:1c:9a:03:dd:eb:82:23:82:
                    54:03:87:9b:86:6f:1e:1e:96:2a:90:b6:54:bc:19:
                    e9:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:BB:2D:42:66:89:E8:D4:2A:15:B2:4E:FF:0C:D8:03:F3:61:EF:69
            X509v3 Authority Key Identifier:
                keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/lrstQmaJ6NQqFbJO_wzYA_Nh72k.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.104.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:72:83:b2:64:e3:64:9f:2a:f2:c2:e4:f0:fc:4a:ff:85:e3:
         a5:8e:37:e2:02:71:44:38:b2:c9:98:3e:33:c9:5a:42:16:03:
         79:2a:70:c6:b1:5b:6a:4d:7c:fc:32:2f:7b:65:ae:34:30:0d:
         1a:65:11:64:29:7a:9a:55:17:56:30:e1:5d:ba:7f:81:c2:a5:
         1b:8c:48:d7:b8:be:5c:b2:43:e3:99:88:1b:53:80:9a:a7:99:
         3d:46:3c:f4:32:64:87:38:c0:db:e6:a4:45:f1:e6:20:11:ee:
         2a:3f:88:9d:51:14:d2:f2:09:15:42:62:a7:e7:37:30:4a:1a:
         19:a7:26:53:54:9f:84:7a:20:d6:c8:dd:6c:4e:5d:a0:79:7c:
         2a:65:b2:c1:4c:4f:1c:3e:0b:18:fe:90:83:b4:c5:c5:59:8f:
         55:98:af:72:cc:a8:cf:96:45:ca:d8:8e:b4:cb:9f:22:40:af:
         30:5d:d2:77:12:01:20:37:95:c3:5d:4b:5e:b0:af:75:e2:d7:
         1f:24:c3:36:d4:0f:11:d7:4a:80:7f:ac:d4:5b:a9:8f:9d:1e:
         b8:86:88:e0:79:fe:af:37:5d:8d:26:02:40:eb:d0:21:a3:f5:
         92:89:f7:b0:b5:5b:e4:69:4c:b7:c4:4b:c9:a4:ae:20:48:68:
         f3:15:55:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 31 22:25:19 2024 by rpki-client on console-ams.rpki-client.org