Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/lvG8FZ17qm61FYu_OZdQbUgQbXU.roa
File: lvG8FZ17qm61FYu_OZdQbUgQbXU.roa (raw, json)
Hash identifier: FTttwDNoB2ecgesleBsbHQwI5MiubMHPhGRjL452M3s=
Subject key identifier: 96:F1:BC:15:9D:7B:AA:6E:B5:15:8B:BF:39:97:50:6D:48:10:6D:75
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 060D
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/lvG8FZ17qm61FYu_OZdQbUgQbXU.roa
Signing time: Tue 30 Jul 2024 07:55:03 +0000
ROA not before: Tue 30 Jul 2024 07:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 30 Jul 2024 11:55:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1549 (0x60d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Jul 30 07:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=96F1BC159D7BAA6EB5158BBF3997506D48106D75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:3c:f6:80:cd:1e:02:5d:43:7a:a5:0a:a9:cf:
47:4f:a2:e1:24:3e:27:c9:b4:f2:89:03:4c:3b:59:
18:34:dd:da:83:90:18:cd:5d:8b:c2:fe:ba:c4:fd:
cf:2e:48:03:87:4c:53:6c:83:72:1a:31:b1:73:f8:
3f:7d:8b:52:9f:d1:9d:a7:87:24:b0:73:c5:bf:39:
d5:cf:8d:c1:a8:e9:ce:e3:3e:4e:0c:59:f5:b0:9e:
60:32:a0:8a:8d:38:90:e0:95:c0:0a:0c:9c:41:c8:
9b:2b:c3:4f:fd:9c:0f:ec:9a:4b:45:dd:b2:3f:1f:
5c:d9:99:b5:c2:33:0a:c1:c1:0e:b7:77:a4:cd:c2:
e6:56:38:7b:07:4f:69:96:0f:16:a2:09:c6:91:74:
91:99:09:d0:c4:a6:ee:c2:f9:8d:df:62:3b:98:e1:
7b:6b:70:24:54:c1:18:3f:de:ff:21:20:09:6e:71:
8f:3b:2c:4b:f7:91:ce:78:32:71:c8:d0:1d:43:a5:
96:70:61:5d:80:b3:93:fb:14:47:5f:65:43:0d:e7:
13:4f:db:62:2e:3d:fe:ad:97:97:90:3f:f0:dc:56:
bc:a4:1a:2f:60:9a:6e:bf:01:02:f1:b3:f5:9d:09:
f7:ef:c2:9a:d2:12:0a:ab:83:fa:d3:c4:69:11:48:
6b:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:F1:BC:15:9D:7B:AA:6E:B5:15:8B:BF:39:97:50:6D:48:10:6D:75
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/lvG8FZ17qm61FYu_OZdQbUgQbXU.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:a4:ac:c4:d6:32:86:6a:7e:67:b4:82:d6:11:b7:a0:20:3e:
26:84:38:53:46:cc:13:fc:cb:2d:91:64:68:65:be:22:f9:90:
ab:88:b3:4e:e5:f8:3c:bc:5a:f9:7f:cf:91:e0:f3:d3:3e:f2:
13:d1:ac:a5:8a:07:bc:59:4e:3a:a2:0f:bc:73:ed:9f:d7:8c:
2d:32:b2:95:25:f1:3f:8c:80:bd:29:5d:3c:31:b6:9f:d4:09:
5f:99:53:b4:5a:2b:36:70:e2:46:9e:0e:2e:20:6a:5c:19:33:
41:46:61:b6:5a:0d:53:d9:5b:4e:ae:68:08:d1:3c:f9:a1:99:
bc:49:90:7f:5d:d4:1c:53:26:fa:40:bf:e1:21:4f:0e:1b:2d:
ec:19:5e:80:d8:2c:67:70:45:d1:12:b3:77:05:dd:05:26:3b:
36:8b:91:ab:e1:af:dd:12:5a:dd:d6:a5:6c:7d:ff:fc:0a:7c:
77:67:ee:53:f9:9b:8b:64:a9:ae:19:7b:74:ef:c5:da:1c:3f:
c1:7b:fd:68:5d:b0:d0:29:8e:6e:74:e2:ce:d6:5b:72:24:4c:
c1:b2:0c:f8:3d:a3:92:56:89:c7:1b:15:0e:c5:66:d9:13:90:
6f:8d:c1:79:0f:0c:e7:73:27:b9:b6:9d:c2:15:41:17:4a:94:
df:1e:7f:91
-----BEGIN CERTIFICATE-----
MIIEojCCA4qgAwIBAgICBg0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzFk
MTRlYmIyNTVkYzA1OGQ0YmZhNWE1MWM5M2Y3M2Y4MzBhYjg4ZjAeFw0yNDA3MzAw
NzU1MDNaFw0yNTA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKDk2RjFCQzE1OUQ3QkFB
NkVCNTE1OEJCRjM5OTc1MDZENDgxMDZENzUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC2PPaAzR4CXUN6pQqpz0dPouEkPifJtPKJA0w7WRg03dqDkBjN
XYvC/rrE/c8uSAOHTFNsg3IaMbFz+D99i1Kf0Z2nhySwc8W/OdXPjcGo6c7jPk4M
WfWwnmAyoIqNOJDglcAKDJxByJsrw0/9nA/smktF3bI/H1zZmbXCMwrBwQ63d6TN
wuZWOHsHT2mWDxaiCcaRdJGZCdDEpu7C+Y3fYjuY4XtrcCRUwRg/3v8hIAlucY87
LEv3kc54MnHI0B1DpZZwYV2As5P7FEdfZUMN5xNP22IuPf6tl5eQP/DcVrykGi9g
mm6/AQLxs/WdCffvwprSEgqrg/rTxGkRSGvRAgMBAAGjggG+MIIBujAdBgNVHQ4E
FgQUlvG8FZ17qm61FYu/OZdQbUgQbXUwHwYDVR0jBBgwFoAUcdFOuyVdwFjUv6Wl
HJP3P4MKuI8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL2NobG9lLnNvYm9ybm9zdC5uZXQvcnBraS9SSVBFLW5scnNz
Zi9jZEZPdXlWZHdGalV2NldsSEpQM1A0TUt1STguY3JsMGQGCCsGAQUFBwEBBFgw
VjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9jZEZPdXlWZHdGalV2NldsSEpQM1A0TUt1STguY2VyMA4GA1UdDwEB
/wQEAwIHgDBoBggrBgEFBQcBCwRcMFowWAYIKwYBBQUHMAuGTHJzeW5jOi8vY2hs
b2Uuc29ib3Jub3N0Lm5ldC9ycGtpL1JJUEUtbmxyc3NmL2x2RzhGWjE3cW02MUZZ
dV9PWmRRYlVnUWJYVS5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADC
aIEwDQYJKoZIhvcNAQELBQADggEBAD+krMTWMoZqfme0gtYRt6AgPiaEOFNGzBP8
yy2RZGhlviL5kKuIs07l+Dy8Wvl/z5Hg89M+8hPRrKWKB7xZTjqiD7xz7Z/XjC0y
spUl8T+MgL0pXTwxtp/UCV+ZU7RaKzZw4kaeDi4galwZM0FGYbZaDVPZW06uaAjR
PPmhmbxJkH9d1BxTJvpAv+EhTw4bLewZXoDYLGdwRdESs3cF3QUmOzaLkavhr90S
Wt3WpWx9//wKfHdn7lP5m4tkqa4Ze3TvxdocP8F7/WhdsNApjm504s7WW3IkTMGy
DPg9o5JWiccbFQ7FZtkTkG+NwXkPDOdzJ7m2ncIVQRdKlN8ef5E=
-----END CERTIFICATE-----
Generated at Tue Jul 30 13:39:22 2024 by rpki-client on console-fra.rpki-client.org