Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/orSLkXRjBNjNbLbyplRMfKICwZE.roa
File: orSLkXRjBNjNbLbyplRMfKICwZE.roa (raw, json)
Hash identifier: sm0F29TE++KyAPuIGQIYAGd2kP/H5ww3QtohllX+gUk=
Subject key identifier: A2:B4:8B:91:74:63:04:D8:CD:6C:B6:F2:A6:54:4C:7C:A2:02:C1:91
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0253
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/orSLkXRjBNjNbLbyplRMfKICwZE.roa
Signing time: Mon 15 Apr 2024 07:55:03 +0000
ROA not before: Mon 15 Apr 2024 07:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 15 Apr 2024 11:55:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 595 (0x253)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Apr 15 07:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=A2B48B91746304D8CD6CB6F2A6544C7CA202C191
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:cf:d9:1f:b3:c5:e7:1c:44:d7:0b:12:75:fc:
39:a4:6e:bd:a0:88:e1:79:50:17:76:ab:ef:16:19:
1c:77:35:5c:26:ca:76:f4:1b:7a:f8:01:c1:59:ea:
dd:c1:55:0b:3f:b3:5b:e0:8f:de:8b:60:7d:e6:cf:
eb:32:c1:2e:3b:e8:31:a7:23:cb:54:0d:a8:08:38:
07:63:e9:99:7b:f2:1b:48:eb:26:ab:f6:32:cb:d9:
80:30:aa:e7:67:8e:b5:3d:e4:33:a7:b0:f1:a3:98:
7f:cf:33:91:2e:20:b5:7e:41:21:18:c7:eb:d9:f8:
f1:36:d5:ea:da:87:4f:a0:8c:7a:ac:ad:04:e3:9a:
a4:46:d1:cc:76:76:f1:bf:a2:df:73:eb:1f:fc:37:
98:ac:e5:b4:9b:9b:00:eb:09:cb:3f:7c:70:f0:77:
d0:76:d6:ad:c7:ab:eb:95:b0:80:b3:22:de:d5:da:
9f:79:d8:56:64:28:ba:a1:7f:7b:8d:3f:e2:64:93:
3e:fa:a9:d4:70:50:7d:e7:15:2d:6d:00:8f:b6:2c:
85:20:a7:4a:3a:d6:33:3c:0d:de:91:e6:99:77:80:
ec:82:35:c3:e1:d8:4d:7d:95:29:07:5e:d3:f7:43:
0d:ab:d3:84:a5:72:d9:c3:d7:aa:69:7d:16:c1:63:
6b:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:B4:8B:91:74:63:04:D8:CD:6C:B6:F2:A6:54:4C:7C:A2:02:C1:91
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/orSLkXRjBNjNbLbyplRMfKICwZE.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
07:65:44:8a:86:e4:b6:7f:10:d7:3f:78:7b:c2:86:c7:39:a4:
7c:77:d8:89:29:4d:ce:02:9a:08:b1:08:05:b0:d7:f9:9b:32:
7c:2d:cb:d6:14:be:b1:e8:fe:a8:3c:23:5a:b3:90:ef:5d:24:
de:3f:c9:fd:1b:2c:95:1f:53:82:c3:6a:7a:82:cb:74:f3:7d:
80:99:bc:08:ba:0e:00:e6:b1:96:93:16:a7:53:3f:4d:76:04:
d8:09:87:d3:7b:c6:54:f6:ed:87:02:69:99:ef:ce:29:cd:45:
d2:53:07:7b:54:dd:c5:68:b4:5f:06:1f:4f:17:7c:0d:e9:fd:
8e:2c:67:06:eb:34:d1:74:63:0f:62:ee:0b:0d:7e:fd:e5:96:
4e:c9:e2:b5:2d:74:42:04:d0:a9:97:71:8d:15:74:2a:3b:fe:
ba:f8:c5:73:7f:48:f9:02:af:8a:99:13:d8:a3:d3:c1:e4:cf:
b9:84:7b:80:ab:e5:ff:b8:f1:b5:a6:bc:c7:ca:c6:c1:1d:3d:
23:8e:46:96:db:2c:1c:3f:5c:40:47:48:13:6a:c1:eb:57:2f:
92:c5:49:3a:f0:06:63:f2:35:33:51:db:d6:02:e2:8d:2a:a2:
15:83:b6:3a:7a:a0:b9:3b:92:2d:e8:64:9f:db:c8:b6:c3:e8:
bd:b7:00:ef
-----BEGIN CERTIFICATE-----
MIIEojCCA4qgAwIBAgICAlMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzFk
MTRlYmIyNTVkYzA1OGQ0YmZhNWE1MWM5M2Y3M2Y4MzBhYjg4ZjAeFw0yNDA0MTUw
NzU1MDNaFw0yNTA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKEEyQjQ4QjkxNzQ2MzA0
RDhDRDZDQjZGMkE2NTQ0QzdDQTIwMkMxOTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDsz9kfs8XnHETXCxJ1/Dmkbr2giOF5UBd2q+8WGRx3NVwmynb0
G3r4AcFZ6t3BVQs/s1vgj96LYH3mz+sywS476DGnI8tUDagIOAdj6Zl78htI6yar
9jLL2YAwqudnjrU95DOnsPGjmH/PM5EuILV+QSEYx+vZ+PE21erah0+gjHqsrQTj
mqRG0cx2dvG/ot9z6x/8N5is5bSbmwDrCcs/fHDwd9B21q3Hq+uVsICzIt7V2p95
2FZkKLqhf3uNP+Jkkz76qdRwUH3nFS1tAI+2LIUgp0o61jM8Dd6R5pl3gOyCNcPh
2E19lSkHXtP3Qw2r04SlctnD16ppfRbBY2uxAgMBAAGjggG+MIIBujAdBgNVHQ4E
FgQUorSLkXRjBNjNbLbyplRMfKICwZEwHwYDVR0jBBgwFoAUcdFOuyVdwFjUv6Wl
HJP3P4MKuI8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL2NobG9lLnNvYm9ybm9zdC5uZXQvcnBraS9SSVBFLW5scnNz
Zi9jZEZPdXlWZHdGalV2NldsSEpQM1A0TUt1STguY3JsMGQGCCsGAQUFBwEBBFgw
VjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9jZEZPdXlWZHdGalV2NldsSEpQM1A0TUt1STguY2VyMA4GA1UdDwEB
/wQEAwIHgDBoBggrBgEFBQcBCwRcMFowWAYIKwYBBQUHMAuGTHJzeW5jOi8vY2hs
b2Uuc29ib3Jub3N0Lm5ldC9ycGtpL1JJUEUtbmxyc3NmL29yU0xrWFJqQk5qTmJM
YnlwbFJNZktJQ3daRS5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADC
aIEwDQYJKoZIhvcNAQELBQADggEBAAdlRIqG5LZ/ENc/eHvChsc5pHx32IkpTc4C
mgixCAWw1/mbMnwty9YUvrHo/qg8I1qzkO9dJN4/yf0bLJUfU4LDanqCy3TzfYCZ
vAi6DgDmsZaTFqdTP012BNgJh9N7xlT27YcCaZnvzinNRdJTB3tU3cVotF8GH08X
fA3p/Y4sZwbrNNF0Yw9i7gsNfv3llk7J4rUtdEIE0KmXcY0VdCo7/rr4xXN/SPkC
r4qZE9ij08Hkz7mEe4Cr5f+48bWmvMfKxsEdPSOORpbbLBw/XEBHSBNqwetXL5LF
STrwBmPyNTNR29YC4o0qohWDtjp6oLk7ki3oZJ/byLbD6L23AO8=
-----END CERTIFICATE-----
Generated at Mon Apr 15 14:34:08 2024 by rpki-client on console-ams.rpki-client.org