Route Origin Authorization

$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/pirusFF6A4Q9h4A7RLXnWf9DsRw.roa
File:                     pirusFF6A4Q9h4A7RLXnWf9DsRw.roa (raw, json)
Hash identifier:          AzAAyFxXmtuT2rk/K4dsirvCwuBTWaUSKKU/x6sCiVo=
Subject key identifier:   A6:2A:EE:B0:51:7A:03:84:3D:87:80:3B:44:B5:E7:59:FF:43:B1:1C
Certificate issuer:       /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial:       089E
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access:      rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/pirusFF6A4Q9h4A7RLXnWf9DsRw.roa
Signing time:             Fri 11 Oct 2024 07:55:03 +0000
ROA not before:           Fri 11 Oct 2024 07:55:03 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     15562
IP address blocks:        194.104.129.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 11 Oct 2024 11:55:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2206 (0x89e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
        Validity
            Not Before: Oct 11 07:55:03 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=A62AEEB0517A03843D87803B44B5E759FF43B11C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:e5:2b:df:12:09:f9:e7:c6:95:9e:b9:15:f9:
                    c5:9b:76:48:e1:81:b0:8f:d0:9c:7d:2c:84:e9:0d:
                    2e:e1:a3:60:c1:1e:02:ab:5e:5f:d0:df:c4:6a:e1:
                    21:5e:9e:f5:e1:47:6b:57:fb:94:49:a8:a1:e6:26:
                    fd:7f:8b:1d:f9:60:6e:94:79:fb:23:80:3c:9d:89:
                    6e:06:f3:b4:f9:df:70:1b:67:46:b4:0e:0f:ea:ce:
                    fc:61:82:8b:0c:d9:f8:e8:3c:b5:c3:c1:11:25:0e:
                    95:76:f1:0a:7a:b1:82:00:14:ba:23:d4:9d:fb:b5:
                    8b:01:81:79:ef:48:07:29:75:28:bf:35:19:81:79:
                    05:15:a8:b7:56:81:38:df:84:0f:d8:ef:0d:56:d4:
                    44:1b:3a:0d:56:57:51:bf:b7:94:c5:1c:80:23:2e:
                    b3:12:eb:39:32:09:bf:f7:ac:66:75:96:d3:86:64:
                    9c:d8:80:2b:c4:26:c9:97:30:a0:1a:27:dc:78:b4:
                    b4:85:f9:76:19:77:7f:7e:5a:03:1f:e2:68:aa:53:
                    c5:7e:21:0a:11:6a:e1:36:73:a5:35:ee:33:95:31:
                    bd:0e:08:71:92:95:bb:76:7a:89:16:ea:aa:7d:1d:
                    4f:97:7a:f7:f3:d4:c7:4b:fc:43:7e:f9:f6:74:77:
                    ca:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:2A:EE:B0:51:7A:03:84:3D:87:80:3B:44:B5:E7:59:FF:43:B1:1C
            X509v3 Authority Key Identifier:
                keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/pirusFF6A4Q9h4A7RLXnWf9DsRw.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.104.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         be:b9:84:6d:a7:cb:53:86:07:94:50:6b:8e:e5:b9:ab:ab:c0:
         12:da:38:79:e7:a8:0c:f5:a6:ae:e5:d0:c8:da:d7:36:44:bc:
         4a:dc:2b:9c:d4:85:f8:e6:29:6f:6a:b5:cb:bd:2e:59:a6:42:
         1d:67:f1:18:f2:4f:90:83:f5:67:86:ee:73:16:f6:b7:a9:37:
         ae:73:6d:60:14:90:27:54:87:57:fc:40:82:d0:aa:0f:78:e3:
         b0:c9:c1:25:86:6e:82:21:5c:b0:1d:e7:fe:4d:62:f8:7a:60:
         8c:c6:d9:85:cc:3d:cd:7d:cf:30:c0:09:2f:60:64:df:7c:e0:
         54:4d:ef:37:15:a7:c3:f4:b7:72:47:b3:db:b9:2a:8e:06:15:
         e2:e6:9c:a8:1e:35:ab:67:8d:a3:a5:fd:54:0f:4a:12:71:44:
         c8:f8:fe:43:ec:1b:30:ab:10:b3:8a:61:a6:ad:f7:ec:05:a3:
         8e:85:7b:44:a3:fb:aa:56:2d:46:3a:25:d2:6b:72:a1:df:76:
         fb:a4:e9:a1:5a:af:0a:c6:9e:6a:46:bb:fa:fc:ec:1f:30:06:
         34:17:d9:63:7f:b1:02:1d:2b:4d:3c:9f:a5:6b:4e:f7:24:09:
         c2:d3:7b:0d:a5:82:ad:a4:97:e3:ed:46:9e:e5:5f:c0:21:09:
         91:0b:b1:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 11 17:42:54 2024 by rpki-client on console-ams.rpki-client.org