Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/osfp2loHyaml8m0_Bbt1XDPARrI.roa
File: osfp2loHyaml8m0_Bbt1XDPARrI.roa (raw, json)
Hash identifier: b8RSYcwSW/WeI2ha38aHsAHtSaxVw0aXRr8gu+T5i1c=
Subject key identifier: A2:C7:E9:DA:5A:07:C9:A9:A5:F2:6D:3F:05:BB:75:5C:33:C0:46:B2
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 076C
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/osfp2loHyaml8m0_Bbt1XDPARrI.roa
Signing time: Sat 07 Sep 2024 07:55:02 +0000
ROA not before: Sat 07 Sep 2024 07:55:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 07 Sep 2024 11:55:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1900 (0x76c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Sep 7 07:55:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=A2C7E9DA5A07C9A9A5F26D3F05BB755C33C046B2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:1c:23:cf:e4:3a:39:56:bf:e2:3e:09:2c:4f:
87:0e:b5:22:8a:86:29:d4:78:ae:0e:ae:6b:32:e7:
fd:da:e8:d0:1c:e0:d9:31:d5:9b:09:88:e0:9c:30:
c5:5b:40:b6:11:56:8d:50:d7:15:a8:62:cf:0b:d2:
26:fa:66:47:01:cb:50:00:62:7d:73:c4:74:03:c4:
1e:6f:f6:c3:a7:6f:d0:f3:eb:c7:ea:67:29:45:29:
68:42:3e:46:4b:7c:c1:29:1c:d6:b4:29:35:77:8a:
96:d1:4f:cb:22:45:6b:0f:2e:8d:e4:5d:c8:98:e8:
9a:8f:58:d4:0e:03:3a:f1:95:37:d1:77:0c:07:15:
19:b6:5c:ea:7c:91:54:c5:19:30:53:57:6a:9e:90:
10:44:ef:23:13:a1:f4:87:d5:33:94:78:ab:c8:d5:
c1:ce:15:8e:5b:fb:c5:ac:e9:a5:42:ce:c8:ec:14:
89:a7:52:30:35:8f:34:54:eb:36:23:10:9a:36:d6:
1e:cc:74:1f:5b:99:cb:75:17:67:fb:04:2b:e0:25:
ec:9f:b0:5f:d8:f1:cf:aa:e0:0b:43:7f:4f:43:11:
f1:9c:41:d5:fb:af:04:6a:21:30:a5:88:d0:65:09:
48:a0:61:99:4d:aa:1a:8a:32:24:3a:bd:b0:45:f6:
7f:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:C7:E9:DA:5A:07:C9:A9:A5:F2:6D:3F:05:BB:75:5C:33:C0:46:B2
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/osfp2loHyaml8m0_Bbt1XDPARrI.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
29:f5:13:e1:61:30:ef:a8:b3:5b:95:17:07:dd:aa:b8:37:b3:
67:7b:56:84:3b:27:47:7a:7b:7c:d9:52:1d:4f:76:f6:f0:c8:
d8:c9:25:8c:b5:0a:1b:8e:40:43:c5:28:6c:03:8f:7c:f5:ee:
25:44:81:11:1b:ae:c0:58:95:33:c7:b5:03:19:f6:b0:d5:83:
2f:08:12:47:01:c0:8a:f9:82:c7:64:6f:b9:97:6a:0e:4b:64:
93:9d:2b:d5:8e:02:2e:2d:fa:bf:c0:ec:d1:43:93:99:bf:73:
ea:4a:89:e8:84:b9:d2:82:4f:dc:04:5d:de:4b:8d:fc:95:1f:
89:63:05:b1:ab:0b:0a:ce:67:b2:dc:a3:c1:41:45:14:eb:41:
1c:7b:ac:1e:bf:da:7f:66:99:39:ce:56:3b:97:4d:4c:c9:56:
06:9c:ea:63:d6:14:29:67:fd:a0:6c:e4:8c:ec:43:89:78:7f:
2f:f8:49:38:2f:14:52:7a:25:ae:d5:ce:55:26:b2:de:09:45:
a0:70:54:e6:9e:d0:31:16:ab:d5:7a:1b:6e:b5:59:09:11:e2:
b3:9c:69:b2:11:71:bb:c6:66:e7:b3:42:da:e5:00:a9:20:90:
70:1b:f0:a2:09:e7:38:30:0c:47:a4:ac:38:b0:1c:3b:35:9e:
94:18:bd:2d
-----BEGIN CERTIFICATE-----
MIIEojCCA4qgAwIBAgICB2wwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzFk
MTRlYmIyNTVkYzA1OGQ0YmZhNWE1MWM5M2Y3M2Y4MzBhYjg4ZjAeFw0yNDA5MDcw
NzU1MDJaFw0yNTA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKEEyQzdFOURBNUEwN0M5
QTlBNUYyNkQzRjA1QkI3NTVDMzNDMDQ2QjIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDDHCPP5Do5Vr/iPgksT4cOtSKKhinUeK4Ormsy5/3a6NAc4Nkx
1ZsJiOCcMMVbQLYRVo1Q1xWoYs8L0ib6ZkcBy1AAYn1zxHQDxB5v9sOnb9Dz68fq
ZylFKWhCPkZLfMEpHNa0KTV3ipbRT8siRWsPLo3kXciY6JqPWNQOAzrxlTfRdwwH
FRm2XOp8kVTFGTBTV2qekBBE7yMTofSH1TOUeKvI1cHOFY5b+8Ws6aVCzsjsFImn
UjA1jzRU6zYjEJo21h7MdB9bmct1F2f7BCvgJeyfsF/Y8c+q4AtDf09DEfGcQdX7
rwRqITCliNBlCUigYZlNqhqKMiQ6vbBF9n9JAgMBAAGjggG+MIIBujAdBgNVHQ4E
FgQUosfp2loHyaml8m0/Bbt1XDPARrIwHwYDVR0jBBgwFoAUcdFOuyVdwFjUv6Wl
HJP3P4MKuI8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL2NobG9lLnNvYm9ybm9zdC5uZXQvcnBraS9SSVBFLW5scnNz
Zi9jZEZPdXlWZHdGalV2NldsSEpQM1A0TUt1STguY3JsMGQGCCsGAQUFBwEBBFgw
VjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9jZEZPdXlWZHdGalV2NldsSEpQM1A0TUt1STguY2VyMA4GA1UdDwEB
/wQEAwIHgDBoBggrBgEFBQcBCwRcMFowWAYIKwYBBQUHMAuGTHJzeW5jOi8vY2hs
b2Uuc29ib3Jub3N0Lm5ldC9ycGtpL1JJUEUtbmxyc3NmL29zZnAybG9IeWFtbDht
MF9CYnQxWERQQVJySS5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADC
aIEwDQYJKoZIhvcNAQELBQADggEBACn1E+FhMO+os1uVFwfdqrg3s2d7VoQ7J0d6
e3zZUh1PdvbwyNjJJYy1ChuOQEPFKGwDj3z17iVEgREbrsBYlTPHtQMZ9rDVgy8I
EkcBwIr5gsdkb7mXag5LZJOdK9WOAi4t+r/A7NFDk5m/c+pKieiEudKCT9wEXd5L
jfyVH4ljBbGrCwrOZ7Lco8FBRRTrQRx7rB6/2n9mmTnOVjuXTUzJVgac6mPWFCln
/aBs5IzsQ4l4fy/4STgvFFJ6Ja7VzlUmst4JRaBwVOae0DEWq9V6G261WQkR4rOc
abIRcbvGZuezQtrlAKkgkHAb8KIJ5zgwDEekrDiwHDs1npQYvS0=
-----END CERTIFICATE-----
Generated at Sat Sep 7 14:00:36 2024 by rpki-client on console-fra.rpki-client.org