Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/lxsevZF6p46Qkmf9DtRDfHnvGfY.roa
File: lxsevZF6p46Qkmf9DtRDfHnvGfY.roa (raw, json)
Hash identifier: c7ziE5aw6bhGixg3iq06dpv/m5cgEtMzkGIiTUx1xSw=
Subject key identifier: 97:1B:1E:BD:91:7A:A7:8E:90:92:67:FD:0E:D4:43:7C:79:EF:19:F6
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 97
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/lxsevZF6p46Qkmf9DtRDfHnvGfY.roa
Signing time: Sun 25 Feb 2024 23:55:02 +0000
ROA not before: Sun 25 Feb 2024 23:55:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 26 Feb 2024 03:55:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 151 (0x97)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Feb 25 23:55:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=971B1EBD917AA78E909267FD0ED4437C79EF19F6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:4c:6f:10:d8:7a:fd:15:37:54:02:21:7f:82:
cd:1f:34:26:52:6e:72:b2:4a:72:a9:07:95:6a:ed:
ac:74:dd:25:3b:5a:6f:c4:e6:7e:a0:dd:c1:25:65:
3b:4e:01:7d:cd:07:f3:de:77:fa:9e:80:6b:3e:68:
bf:0a:b3:a8:9d:6f:c8:79:68:e2:d7:e3:ef:ba:66:
09:56:80:39:e7:a7:e9:f4:79:7b:66:97:c9:ed:ae:
de:de:7c:19:b7:8f:d0:99:50:ec:c5:70:db:8a:1f:
62:21:f5:94:8e:af:cf:9b:18:1e:dd:1f:c5:bd:3b:
e4:d3:70:3b:15:56:82:c6:5b:06:52:1d:36:34:12:
74:4f:78:2e:44:d4:91:c7:26:c5:e9:4b:f8:5a:1a:
97:3b:05:69:e3:1d:ff:78:59:b9:97:5a:75:0a:ef:
9c:e1:34:c2:72:2c:0e:58:a3:a9:03:fd:30:2d:9c:
b5:5f:fe:c0:54:f9:4c:ee:fb:f6:c0:e8:23:56:40:
fd:fc:24:60:2e:e8:ae:f2:b2:ba:6e:75:f2:0c:7f:
ea:c8:03:bd:55:2c:6d:c5:55:7f:50:ee:95:d9:f5:
9c:b7:25:b6:75:48:72:b2:fa:dd:80:d9:c3:a4:c1:
e5:52:56:9f:c1:34:cc:af:60:b9:42:5c:59:46:a5:
35:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:1B:1E:BD:91:7A:A7:8E:90:92:67:FD:0E:D4:43:7C:79:EF:19:F6
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/lxsevZF6p46Qkmf9DtRDfHnvGfY.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:19:31:04:0a:db:d1:20:06:26:65:2f:1f:4a:63:f6:8c:29:
48:d8:97:65:5e:e7:0f:01:89:0e:0f:f6:cb:10:81:1a:81:e6:
94:d2:92:73:c4:1b:ef:69:cb:a3:b7:a6:a4:28:95:93:b0:90:
b6:3a:43:5d:68:f4:22:cb:89:e9:9e:38:55:ac:30:d3:83:1e:
c9:ed:07:02:0c:30:c7:a3:0b:2c:8d:be:e1:4f:7d:7a:23:3d:
4f:6a:a2:e2:03:0c:40:52:7f:6e:b9:dc:92:2f:1f:d6:bb:ee:
cd:0d:ba:c9:38:cb:44:54:33:ab:64:6a:53:43:6b:44:e5:27:
36:cc:6f:c0:a8:64:57:45:aa:0b:bd:51:c8:c2:59:f1:ac:53:
1b:7a:23:e9:8f:88:3a:c2:e7:c2:2a:95:94:73:4d:cc:ef:33:
e0:e7:15:17:d1:06:27:6e:6c:69:7a:2c:7d:cb:80:e2:20:1d:
ae:11:0c:e4:85:13:e3:8c:0e:80:93:e6:d9:8b:96:47:a1:bc:
b5:5b:d5:fe:6a:8c:a8:27:51:cc:1b:40:63:09:ca:75:4d:6c:
ee:9a:72:9b:ac:85:30:a4:1d:23:e9:52:72:7d:6c:f0:06:07:
5a:1f:6b:82:4d:31:2d:c0:31:9f:22:cd:8d:79:5c:dd:7b:09:
5c:8c:f0:ec
-----BEGIN CERTIFICATE-----
MIIEojCCA4qgAwIBAgICAJcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzFk
MTRlYmIyNTVkYzA1OGQ0YmZhNWE1MWM5M2Y3M2Y4MzBhYjg4ZjAeFw0yNDAyMjUy
MzU1MDJaFw0yNTA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKDk3MUIxRUJEOTE3QUE3
OEU5MDkyNjdGRDBFRDQ0MzdDNzlFRjE5RjYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDbTG8Q2Hr9FTdUAiF/gs0fNCZSbnKySnKpB5Vq7ax03SU7Wm/E
5n6g3cElZTtOAX3NB/Ped/qegGs+aL8Ks6idb8h5aOLX4++6ZglWgDnnp+n0eXtm
l8ntrt7efBm3j9CZUOzFcNuKH2Ih9ZSOr8+bGB7dH8W9O+TTcDsVVoLGWwZSHTY0
EnRPeC5E1JHHJsXpS/haGpc7BWnjHf94WbmXWnUK75zhNMJyLA5Yo6kD/TAtnLVf
/sBU+Uzu+/bA6CNWQP38JGAu6K7ysrpudfIMf+rIA71VLG3FVX9Q7pXZ9Zy3JbZ1
SHKy+t2A2cOkweVSVp/BNMyvYLlCXFlGpTUZAgMBAAGjggG+MIIBujAdBgNVHQ4E
FgQUlxsevZF6p46Qkmf9DtRDfHnvGfYwHwYDVR0jBBgwFoAUcdFOuyVdwFjUv6Wl
HJP3P4MKuI8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL2NobG9lLnNvYm9ybm9zdC5uZXQvcnBraS9SSVBFLW5scnNz
Zi9jZEZPdXlWZHdGalV2NldsSEpQM1A0TUt1STguY3JsMGQGCCsGAQUFBwEBBFgw
VjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9jZEZPdXlWZHdGalV2NldsSEpQM1A0TUt1STguY2VyMA4GA1UdDwEB
/wQEAwIHgDBoBggrBgEFBQcBCwRcMFowWAYIKwYBBQUHMAuGTHJzeW5jOi8vY2hs
b2Uuc29ib3Jub3N0Lm5ldC9ycGtpL1JJUEUtbmxyc3NmL2x4c2V2WkY2cDQ2UWtt
ZjlEdFJEZkhudkdmWS5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADC
aIEwDQYJKoZIhvcNAQELBQADggEBAHsZMQQK29EgBiZlLx9KY/aMKUjYl2Ve5w8B
iQ4P9ssQgRqB5pTSknPEG+9py6O3pqQolZOwkLY6Q11o9CLLiemeOFWsMNODHsnt
BwIMMMejCyyNvuFPfXojPU9qouIDDEBSf2653JIvH9a77s0Nusk4y0RUM6tkalND
a0TlJzbMb8CoZFdFqgu9UcjCWfGsUxt6I+mPiDrC58IqlZRzTczvM+DnFRfRBidu
bGl6LH3LgOIgHa4RDOSFE+OMDoCT5tmLlkehvLVb1f5qjKgnUcwbQGMJynVNbO6a
cpushTCkHSPpUnJ9bPAGB1ofa4JNMS3AMZ8izY15XN17CVyM8Ow=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:55 2024 by rpki-client on console-fra.rpki-client.org