Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/oDuF2_ANTtdgcIxtXgMI7SKHk9I.roa
File: oDuF2_ANTtdgcIxtXgMI7SKHk9I.roa (raw, json)
Hash identifier: yy9HLtE905EbkCd+QP+eurvQRQMYIP/hKzGJIEkugEw=
Subject key identifier: A0:3B:85:DB:F0:0D:4E:D7:60:70:8C:6D:5E:03:08:ED:22:87:93:D2
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 05E9
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/oDuF2_ANTtdgcIxtXgMI7SKHk9I.roa
Signing time: Fri 26 Jul 2024 07:55:04 +0000
ROA not before: Fri 26 Jul 2024 07:55:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 26 Jul 2024 11:55:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1513 (0x5e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Jul 26 07:55:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=A03B85DBF00D4ED760708C6D5E0308ED228793D2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a5:49:cf:21:99:62:de:89:8e:66:44:44:2e:
32:19:dc:12:e7:54:c5:b7:32:29:ea:a2:2f:51:1e:
11:96:6b:27:d2:75:10:ee:89:bb:33:eb:c7:6c:a9:
a8:f2:05:85:93:84:3c:f6:81:fc:93:56:33:fb:71:
4e:dd:b2:8d:b7:8d:0c:97:0f:f5:36:b3:9e:5f:a9:
6d:e4:fe:c1:f3:f4:37:67:56:fb:75:33:d7:24:3c:
f3:45:ad:17:a3:23:8f:76:1c:76:88:04:5f:96:cf:
4e:9c:c0:91:fa:91:66:bc:55:42:71:de:fc:1d:92:
96:7e:a9:9c:2d:d9:f4:dc:05:fb:7d:de:4e:d7:97:
1e:95:db:3f:de:00:98:24:71:06:a5:27:ca:53:07:
cb:ed:23:fb:4d:a2:d9:34:3b:36:cf:34:68:25:95:
7d:e5:78:e8:05:3e:95:bf:01:f7:22:3d:f6:41:68:
81:00:3f:eb:2a:d1:d7:26:cc:6a:0c:f4:f1:ef:0b:
94:58:f5:c1:e3:08:c4:0f:c0:1c:56:9d:9b:0a:70:
9b:77:46:c1:17:f4:da:96:39:f1:35:5c:16:2e:ef:
d8:ed:00:9b:89:db:6d:f2:0c:2e:e2:41:e1:9e:18:
76:49:41:e9:0c:a1:9b:06:6d:72:ac:64:54:8e:88:
95:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:3B:85:DB:F0:0D:4E:D7:60:70:8C:6D:5E:03:08:ED:22:87:93:D2
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/oDuF2_ANTtdgcIxtXgMI7SKHk9I.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
84:bb:81:93:1a:44:f3:a8:8a:62:7b:f3:0e:32:53:79:e0:6f:
cb:ed:82:32:78:ea:8e:1d:37:f2:73:8d:46:a7:00:f7:0b:ff:
5a:bc:76:e3:f1:02:35:a4:a9:97:7a:8b:fb:17:3e:7c:35:b7:
7f:03:98:7e:c9:14:72:04:14:f5:83:cc:8c:47:9c:3a:b9:eb:
86:c9:8a:a7:22:6f:eb:d8:40:05:1a:75:ba:79:05:3b:d1:b9:
a5:e8:26:d9:a6:8b:c6:1f:cb:66:71:ea:35:c2:f3:de:e7:35:
e3:ad:17:eb:53:ee:2e:00:84:7b:ca:a8:1d:b6:ae:99:b6:0c:
c6:b8:fd:6a:09:61:7a:27:83:13:37:96:45:f3:bb:ba:d5:7c:
ca:cf:a5:36:5c:70:5d:11:e1:ca:68:2b:fb:ae:fb:0c:d2:04:
d7:4f:7d:50:59:83:25:87:7b:c0:cb:95:4a:7c:9c:81:a7:8c:
d7:95:ee:1b:63:9d:26:5a:a2:8d:79:17:1b:23:90:4c:5f:44:
5c:3e:3c:c9:a3:47:70:98:ec:66:63:16:a3:9e:a6:ec:c0:03:
9c:40:46:3b:a8:e2:16:c7:45:ab:50:41:c3:21:69:6d:d6:9e:
b8:9b:15:7f:d9:f8:12:16:7b:60:24:25:3a:4d:2b:e5:1e:6e:
f3:8b:8b:4d
-----BEGIN CERTIFICATE-----
MIIEojCCA4qgAwIBAgICBekwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzFk
MTRlYmIyNTVkYzA1OGQ0YmZhNWE1MWM5M2Y3M2Y4MzBhYjg4ZjAeFw0yNDA3MjYw
NzU1MDRaFw0yNTA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKEEwM0I4NURCRjAwRDRF
RDc2MDcwOEM2RDVFMDMwOEVEMjI4NzkzRDIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCspUnPIZli3omOZkRELjIZ3BLnVMW3Minqoi9RHhGWayfSdRDu
ibsz68dsqajyBYWThDz2gfyTVjP7cU7dso23jQyXD/U2s55fqW3k/sHz9DdnVvt1
M9ckPPNFrRejI492HHaIBF+Wz06cwJH6kWa8VUJx3vwdkpZ+qZwt2fTcBft93k7X
lx6V2z/eAJgkcQalJ8pTB8vtI/tNotk0OzbPNGgllX3leOgFPpW/AfciPfZBaIEA
P+sq0dcmzGoM9PHvC5RY9cHjCMQPwBxWnZsKcJt3RsEX9NqWOfE1XBYu79jtAJuJ
223yDC7iQeGeGHZJQekMoZsGbXKsZFSOiJXPAgMBAAGjggG+MIIBujAdBgNVHQ4E
FgQUoDuF2/ANTtdgcIxtXgMI7SKHk9IwHwYDVR0jBBgwFoAUcdFOuyVdwFjUv6Wl
HJP3P4MKuI8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL2NobG9lLnNvYm9ybm9zdC5uZXQvcnBraS9SSVBFLW5scnNz
Zi9jZEZPdXlWZHdGalV2NldsSEpQM1A0TUt1STguY3JsMGQGCCsGAQUFBwEBBFgw
VjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9jZEZPdXlWZHdGalV2NldsSEpQM1A0TUt1STguY2VyMA4GA1UdDwEB
/wQEAwIHgDBoBggrBgEFBQcBCwRcMFowWAYIKwYBBQUHMAuGTHJzeW5jOi8vY2hs
b2Uuc29ib3Jub3N0Lm5ldC9ycGtpL1JJUEUtbmxyc3NmL29EdUYyX0FOVHRkZ2NJ
eHRYZ01JN1NLSGs5SS5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADC
aIEwDQYJKoZIhvcNAQELBQADggEBAIS7gZMaRPOoimJ78w4yU3ngb8vtgjJ46o4d
N/JzjUanAPcL/1q8duPxAjWkqZd6i/sXPnw1t38DmH7JFHIEFPWDzIxHnDq564bJ
iqcib+vYQAUadbp5BTvRuaXoJtmmi8Yfy2Zx6jXC897nNeOtF+tT7i4AhHvKqB22
rpm2DMa4/WoJYXongxM3lkXzu7rVfMrPpTZccF0R4cpoK/uu+wzSBNdPfVBZgyWH
e8DLlUp8nIGnjNeV7htjnSZaoo15FxsjkExfRFw+PMmjR3CY7GZjFqOepuzAA5xA
Rjuo4hbHRatQQcMhaW3WnribFX/Z+BIWe2AkJTpNK+UebvOLi00=
-----END CERTIFICATE-----
Generated at Fri Jul 26 14:45:33 2024 by rpki-client on console-ams.rpki-client.org