Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/qLQvRcaOlYZcYxHOYpPoz2WLmQg.roa
File: qLQvRcaOlYZcYxHOYpPoz2WLmQg.roa (raw, json)
Hash identifier: +eVcWSE+wQdFspUu+na6IuzOjRcwzKeUGyNDiGy0Hqw=
Subject key identifier: A8:B4:2F:45:C6:8E:95:86:5C:63:11:CE:62:93:E8:CF:65:8B:99:08
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: EB
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/qLQvRcaOlYZcYxHOYpPoz2WLmQg.roa
Signing time: Wed 06 Mar 2024 07:55:03 +0000
ROA not before: Wed 06 Mar 2024 07:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 06 Mar 2024 11:55:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 235 (0xeb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Mar 6 07:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=A8B42F45C68E95865C6311CE6293E8CF658B9908
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:32:51:60:39:a8:66:19:34:e7:06:65:d9:27:
b9:5f:b5:22:9e:5b:97:56:ff:b6:ec:15:b2:9f:3d:
a9:b3:94:ee:43:4c:27:7e:aa:6f:02:d1:eb:d2:cb:
3d:f8:e1:e7:17:65:eb:25:b9:3e:bc:af:77:39:b9:
70:9a:90:fc:1e:3f:49:2f:d3:ec:d4:60:fe:4b:7f:
3c:cb:3a:03:92:4d:5d:3e:ef:09:98:29:e9:7c:c5:
de:4c:c8:d6:cf:ec:65:54:f9:f5:8c:26:5f:b4:a5:
72:7d:dd:9b:a0:06:4a:d7:58:f1:3b:d2:e3:04:3b:
64:57:ae:8e:b1:dc:73:74:33:f1:a5:07:3f:b6:3b:
41:b5:d6:ab:2f:d5:c2:ed:54:7b:80:a3:9e:be:c0:
d4:89:7f:c6:c7:35:8c:be:8e:6e:59:e1:4c:87:1d:
1b:a4:96:0f:3f:86:7b:fd:be:66:ef:e9:3b:a0:43:
7f:1f:74:c9:8a:d3:71:3e:28:88:2d:0d:a3:d8:0b:
a7:62:60:57:fe:fb:03:56:c4:f8:65:71:10:2f:e7:
29:55:ff:e4:b5:2a:d7:21:41:5b:77:b6:6c:f6:90:
4d:b3:7b:4a:7d:46:ba:15:84:e7:4e:5b:f2:82:30:
34:2d:ab:c3:4f:48:00:90:6a:be:19:ea:d7:59:31:
6b:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:B4:2F:45:C6:8E:95:86:5C:63:11:CE:62:93:E8:CF:65:8B:99:08
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/qLQvRcaOlYZcYxHOYpPoz2WLmQg.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
85:00:eb:d7:9a:6c:c1:f8:0c:bb:25:31:a2:cc:74:36:79:56:
4c:8f:c7:d8:0a:c2:3d:c2:f8:57:cf:c8:e3:e7:cb:50:49:9c:
2a:7a:51:e9:f3:b1:55:0a:1d:26:99:81:c5:d5:b9:bd:84:c8:
15:04:41:29:95:6f:5f:7a:c1:c5:e6:c9:77:18:de:10:94:f1:
6d:3b:81:ce:84:55:4f:2e:70:ba:f1:93:de:76:83:29:b9:b8:
88:02:3d:fb:3d:c5:0f:a7:71:e1:c7:48:ac:60:b1:a1:66:bd:
b4:36:8b:d3:4a:c9:80:3c:2e:e1:33:4c:8b:88:04:96:f1:a2:
3d:88:c7:97:9e:90:51:32:f3:64:2c:16:a6:89:de:e5:24:b7:
71:29:c2:78:89:ae:d9:48:f2:1f:e1:fa:37:af:37:45:b3:c3:
a2:a0:d6:ba:b4:b2:44:53:f8:94:47:41:9c:c4:52:34:1c:c2:
bf:60:64:ae:67:c2:03:7f:1e:9f:4c:04:fa:e0:fe:cf:34:4e:
2b:f5:f9:28:ec:2d:87:32:41:45:52:f0:6e:f4:63:29:fe:d3:
3c:bb:c9:23:cf:6d:ba:e7:e0:ea:e8:1d:fe:42:5f:66:6a:47:
7f:7b:73:ca:7d:9c:6f:13:35:5e:3f:26:36:97:ec:f0:7f:11:
31:a1:41:ef
-----BEGIN CERTIFICATE-----
MIIEojCCA4qgAwIBAgICAOswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzFk
MTRlYmIyNTVkYzA1OGQ0YmZhNWE1MWM5M2Y3M2Y4MzBhYjg4ZjAeFw0yNDAzMDYw
NzU1MDNaFw0yNTA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKEE4QjQyRjQ1QzY4RTk1
ODY1QzYzMTFDRTYyOTNFOENGNjU4Qjk5MDgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC5MlFgOahmGTTnBmXZJ7lftSKeW5dW/7bsFbKfPamzlO5DTCd+
qm8C0evSyz344ecXZesluT68r3c5uXCakPweP0kv0+zUYP5LfzzLOgOSTV0+7wmY
Kel8xd5MyNbP7GVU+fWMJl+0pXJ93ZugBkrXWPE70uMEO2RXro6x3HN0M/GlBz+2
O0G11qsv1cLtVHuAo56+wNSJf8bHNYy+jm5Z4UyHHRuklg8/hnv9vmbv6TugQ38f
dMmK03E+KIgtDaPYC6diYFf++wNWxPhlcRAv5ylV/+S1KtchQVt3tmz2kE2ze0p9
RroVhOdOW/KCMDQtq8NPSACQar4Z6tdZMWsZAgMBAAGjggG+MIIBujAdBgNVHQ4E
FgQUqLQvRcaOlYZcYxHOYpPoz2WLmQgwHwYDVR0jBBgwFoAUcdFOuyVdwFjUv6Wl
HJP3P4MKuI8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL2NobG9lLnNvYm9ybm9zdC5uZXQvcnBraS9SSVBFLW5scnNz
Zi9jZEZPdXlWZHdGalV2NldsSEpQM1A0TUt1STguY3JsMGQGCCsGAQUFBwEBBFgw
VjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9jZEZPdXlWZHdGalV2NldsSEpQM1A0TUt1STguY2VyMA4GA1UdDwEB
/wQEAwIHgDBoBggrBgEFBQcBCwRcMFowWAYIKwYBBQUHMAuGTHJzeW5jOi8vY2hs
b2Uuc29ib3Jub3N0Lm5ldC9ycGtpL1JJUEUtbmxyc3NmL3FMUXZSY2FPbFlaY1l4
SE9ZcFBvejJXTG1RZy5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADC
aIEwDQYJKoZIhvcNAQELBQADggEBAIUA69eabMH4DLslMaLMdDZ5VkyPx9gKwj3C
+FfPyOPny1BJnCp6UenzsVUKHSaZgcXVub2EyBUEQSmVb196wcXmyXcY3hCU8W07
gc6EVU8ucLrxk952gym5uIgCPfs9xQ+nceHHSKxgsaFmvbQ2i9NKyYA8LuEzTIuI
BJbxoj2Ix5eekFEy82QsFqaJ3uUkt3EpwniJrtlI8h/h+jevN0Wzw6Kg1rq0skRT
+JRHQZzEUjQcwr9gZK5nwgN/Hp9MBPrg/s80Tiv1+SjsLYcyQUVS8G70Yyn+0zy7
ySPPbbrn4OroHf5CX2ZqR397c8p9nG8TNV4/JjaX7PB/ETGhQe8=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:55 2024 by rpki-client on console-fra.rpki-client.org