Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/pvCOYIaOcE9tidvSw8jgUWiJd1E.roa
File: pvCOYIaOcE9tidvSw8jgUWiJd1E.roa (raw, json)
Hash identifier: lQQPPDffzPINLfNgnShjyRHCtmigeH/nJ/jFXfQp2hA=
Subject key identifier: A6:F0:8E:60:86:8E:70:4F:6D:89:DB:D2:C3:C8:E0:51:68:89:77:51
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 02AA
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/pvCOYIaOcE9tidvSw8jgUWiJd1E.roa
Signing time: Wed 24 Apr 2024 23:55:04 +0000
ROA not before: Wed 24 Apr 2024 23:55:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 25 Apr 2024 03:55:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 682 (0x2aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Apr 24 23:55:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=A6F08E60868E704F6D89DBD2C3C8E05168897751
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:33:1d:94:d2:e4:fd:e4:11:98:10:11:99:8b:
2a:d2:82:38:95:bb:f2:80:08:95:2d:f2:f3:3a:c8:
60:0d:4e:58:f6:6d:9b:e7:b7:fc:19:35:a3:35:3c:
c7:f0:ea:90:59:d0:1a:bd:ac:b8:eb:d5:2e:ee:f8:
81:7e:65:71:41:94:a5:2a:be:45:9f:82:cc:c5:60:
9b:ee:9f:9d:52:ea:12:9d:b1:01:30:f6:65:0f:33:
7a:4c:30:02:86:82:8a:f6:63:cc:a6:22:3e:cc:9e:
b2:49:29:8a:fd:40:0f:08:97:be:b2:ff:b3:cd:60:
df:2a:12:7f:0a:d0:c4:2c:b4:40:f2:12:0b:66:85:
d9:5d:e5:42:e1:47:50:34:22:64:af:04:7a:45:59:
b3:7d:27:f5:0c:9a:4b:00:96:cd:a8:42:72:8e:59:
4b:7d:47:34:38:75:f3:52:ea:c6:92:62:8b:d7:9f:
a2:cc:67:34:49:51:0c:62:d3:d1:dc:ad:d2:48:97:
5c:f4:80:53:9a:bc:ca:46:8b:08:4c:de:02:c0:fe:
5e:e7:25:b4:be:8a:f5:9c:cc:09:c7:d6:b4:62:a7:
86:aa:3a:a1:a3:99:e5:47:b9:01:7a:8e:1c:f9:d9:
67:e6:7d:54:be:3d:11:ac:66:61:e3:12:cb:8a:16:
e5:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:F0:8E:60:86:8E:70:4F:6D:89:DB:D2:C3:C8:E0:51:68:89:77:51
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/pvCOYIaOcE9tidvSw8jgUWiJd1E.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
62:3d:4a:3c:1a:4a:72:93:ef:3a:70:53:b5:20:e4:d0:c0:7a:
45:63:f0:ae:4f:3c:c4:d5:79:5c:75:7e:d6:7f:29:3f:d5:34:
11:8b:e5:ff:16:c5:e0:c2:8c:8e:a7:be:b9:c9:20:91:8f:0c:
42:9c:24:3f:27:23:45:97:af:a8:e2:7f:db:42:d2:42:3e:5b:
59:a2:4d:19:e0:e3:e5:8d:21:4b:e7:f8:e6:f0:a4:bf:cd:47:
5c:01:1f:d9:a5:a8:5b:86:3b:85:cf:fb:6c:98:99:37:b8:64:
9f:3c:11:88:ab:e7:58:0b:87:38:fc:c8:e6:7a:d2:e4:38:25:
6d:1d:23:eb:2d:a3:30:da:12:60:a3:dd:d7:fd:8c:44:34:87:
3d:9a:2f:5a:29:80:fc:90:cb:0b:b1:ae:8b:f3:74:8d:79:2e:
72:de:d9:1a:34:24:71:31:78:d3:4e:84:1e:19:a5:f3:59:58:
f5:60:ba:b6:f1:79:a5:c5:60:da:01:40:0e:43:df:e4:29:0b:
17:37:1a:50:3f:bb:94:ee:a3:d7:8b:ab:b6:4c:f3:1d:f2:22:
29:2a:7c:bd:5c:e4:0c:43:10:d3:92:f5:78:18:a7:73:d0:47:
38:74:d9:ec:94:de:ae:e3:f7:71:ee:0f:ea:a9:55:44:63:7f:
9f:72:2c:96
-----BEGIN CERTIFICATE-----
MIIEojCCA4qgAwIBAgICAqowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzFk
MTRlYmIyNTVkYzA1OGQ0YmZhNWE1MWM5M2Y3M2Y4MzBhYjg4ZjAeFw0yNDA0MjQy
MzU1MDRaFw0yNTA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKEE2RjA4RTYwODY4RTcw
NEY2RDg5REJEMkMzQzhFMDUxNjg4OTc3NTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDCMx2U0uT95BGYEBGZiyrSgjiVu/KACJUt8vM6yGANTlj2bZvn
t/wZNaM1PMfw6pBZ0Bq9rLjr1S7u+IF+ZXFBlKUqvkWfgszFYJvun51S6hKdsQEw
9mUPM3pMMAKGgor2Y8ymIj7MnrJJKYr9QA8Il76y/7PNYN8qEn8K0MQstEDyEgtm
hdld5ULhR1A0ImSvBHpFWbN9J/UMmksAls2oQnKOWUt9RzQ4dfNS6saSYovXn6LM
ZzRJUQxi09HcrdJIl1z0gFOavMpGiwhM3gLA/l7nJbS+ivWczAnH1rRip4aqOqGj
meVHuQF6jhz52WfmfVS+PRGsZmHjEsuKFuUbAgMBAAGjggG+MIIBujAdBgNVHQ4E
FgQUpvCOYIaOcE9tidvSw8jgUWiJd1EwHwYDVR0jBBgwFoAUcdFOuyVdwFjUv6Wl
HJP3P4MKuI8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL2NobG9lLnNvYm9ybm9zdC5uZXQvcnBraS9SSVBFLW5scnNz
Zi9jZEZPdXlWZHdGalV2NldsSEpQM1A0TUt1STguY3JsMGQGCCsGAQUFBwEBBFgw
VjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9jZEZPdXlWZHdGalV2NldsSEpQM1A0TUt1STguY2VyMA4GA1UdDwEB
/wQEAwIHgDBoBggrBgEFBQcBCwRcMFowWAYIKwYBBQUHMAuGTHJzeW5jOi8vY2hs
b2Uuc29ib3Jub3N0Lm5ldC9ycGtpL1JJUEUtbmxyc3NmL3B2Q09ZSWFPY0U5dGlk
dlN3OGpnVVdpSmQxRS5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADC
aIEwDQYJKoZIhvcNAQELBQADggEBAGI9SjwaSnKT7zpwU7Ug5NDAekVj8K5PPMTV
eVx1ftZ/KT/VNBGL5f8WxeDCjI6nvrnJIJGPDEKcJD8nI0WXr6jif9tC0kI+W1mi
TRng4+WNIUvn+ObwpL/NR1wBH9mlqFuGO4XP+2yYmTe4ZJ88EYir51gLhzj8yOZ6
0uQ4JW0dI+stozDaEmCj3df9jEQ0hz2aL1opgPyQywuxrovzdI15LnLe2Ro0JHEx
eNNOhB4ZpfNZWPVgurbxeaXFYNoBQA5D3+QpCxc3GlA/u5Tuo9eLq7ZM8x3yIikq
fL1c5AxDENOS9XgYp3PQRzh02eyU3q7j93HuD+qpVURjf59yLJY=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:55 2024 by rpki-client on console-fra.rpki-client.org