Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/rp0D0OvgT1oj0f-5xbj3nA3D4VE.roa
File: rp0D0OvgT1oj0f-5xbj3nA3D4VE.roa (raw, json)
Hash identifier: 2zKDxRFhJW7R7p3FLM1wHTccQLgEHOg0eB7t/D8l2kk=
Subject key identifier: AE:9D:03:D0:EB:E0:4F:5A:23:D1:FF:B9:C5:B8:F7:9C:0D:C3:E1:51
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 03D9
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/rp0D0OvgT1oj0f-5xbj3nA3D4VE.roa
Signing time: Tue 28 May 2024 15:55:02 +0000
ROA not before: Tue 28 May 2024 15:55:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 28 May 2024 19:55:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 985 (0x3d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: May 28 15:55:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=AE9D03D0EBE04F5A23D1FFB9C5B8F79C0DC3E151
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:1c:fd:7e:cb:03:5b:18:56:d6:ae:6a:ea:22:
a7:8e:24:a6:75:bc:13:bd:5b:83:a1:42:92:34:c6:
3a:f1:8b:cd:e9:72:07:1b:4b:1e:bf:fe:e6:1d:07:
8f:1d:4a:d2:e3:1c:30:7c:e0:fc:e9:c6:ac:b5:b6:
47:4a:23:3e:09:ea:a0:90:02:f8:00:68:f2:d4:7b:
18:31:2f:7a:10:43:34:29:05:20:9a:e5:27:df:b6:
88:47:f1:bf:2f:ee:32:16:68:e5:96:7b:a4:32:e1:
fe:48:0b:a7:64:5d:cf:44:9e:7c:ae:ba:a4:bc:e2:
c1:69:18:8b:fe:57:03:63:fd:31:51:a2:ff:cc:32:
8f:e2:de:ad:46:f5:a7:37:dd:b2:90:a4:36:c1:ec:
48:40:c7:14:10:98:bb:fc:00:cd:49:dd:76:9b:4d:
8d:fb:2a:d4:e3:bc:11:1b:ba:fb:f3:3b:ff:e7:f0:
90:a9:a1:93:55:36:55:c2:ec:d1:8b:ed:bf:93:c0:
b9:db:56:37:e5:23:5b:3f:fa:12:d7:aa:90:ac:f1:
37:f8:35:04:78:6e:22:b4:2b:36:1f:34:93:ca:39:
12:7b:be:fd:2f:90:55:37:f8:b6:44:de:e8:5c:03:
42:49:13:be:87:87:e7:72:44:b7:cb:64:49:68:89:
f6:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:9D:03:D0:EB:E0:4F:5A:23:D1:FF:B9:C5:B8:F7:9C:0D:C3:E1:51
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/rp0D0OvgT1oj0f-5xbj3nA3D4VE.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
80:33:03:69:d0:68:cb:c2:31:e4:67:19:81:48:53:19:ad:81:
e9:37:fa:88:fd:18:6b:5d:5a:55:9d:4e:83:78:9e:24:10:14:
9e:f1:0b:55:e4:0a:93:57:2a:79:68:c9:96:8f:f8:a8:18:12:
fc:46:86:2a:8e:93:79:bb:a6:a6:11:5e:37:09:02:a4:e0:fc:
1e:82:44:72:bd:4e:83:88:1a:39:93:72:48:36:aa:b4:4d:55:
bd:e5:30:12:53:ca:cd:89:73:2d:a9:19:42:49:f2:cf:c7:a9:
29:b9:b8:0c:e5:8a:d4:c0:50:6d:56:1b:22:73:04:33:37:d8:
e4:d8:d4:bc:3e:05:74:9f:67:43:86:e5:96:9b:be:a1:48:cf:
be:8d:10:4a:92:d8:c9:fe:7a:04:c4:29:62:e9:a9:2e:d1:6f:
f5:ca:1f:fa:59:bb:a7:36:70:e9:45:4d:44:1f:a3:e8:1d:27:
c7:12:bf:73:f0:c5:23:82:db:dd:68:f0:f9:9b:1a:93:a9:d0:
25:b7:07:74:ec:a2:cd:67:c8:6c:32:5e:ec:19:e1:88:e5:49:
3e:1d:fc:95:d5:a7:51:70:94:3d:5b:b7:d1:a1:35:fd:a2:5c:
b0:e0:0b:4c:88:27:f3:5e:96:98:b3:11:63:b7:97:5d:ac:da:
52:41:e5:b3
-----BEGIN CERTIFICATE-----
MIIEojCCA4qgAwIBAgICA9kwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzFk
MTRlYmIyNTVkYzA1OGQ0YmZhNWE1MWM5M2Y3M2Y4MzBhYjg4ZjAeFw0yNDA1Mjgx
NTU1MDJaFw0yNTA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKEFFOUQwM0QwRUJFMDRG
NUEyM0QxRkZCOUM1QjhGNzlDMERDM0UxNTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC6HP1+ywNbGFbWrmrqIqeOJKZ1vBO9W4OhQpI0xjrxi83pcgcb
Sx6//uYdB48dStLjHDB84Pzpxqy1tkdKIz4J6qCQAvgAaPLUexgxL3oQQzQpBSCa
5SfftohH8b8v7jIWaOWWe6Qy4f5IC6dkXc9EnnyuuqS84sFpGIv+VwNj/TFRov/M
Mo/i3q1G9ac33bKQpDbB7EhAxxQQmLv8AM1J3XabTY37KtTjvBEbuvvzO//n8JCp
oZNVNlXC7NGL7b+TwLnbVjflI1s/+hLXqpCs8Tf4NQR4biK0KzYfNJPKORJ7vv0v
kFU3+LZE3uhcA0JJE76Hh+dyRLfLZEloifbbAgMBAAGjggG+MIIBujAdBgNVHQ4E
FgQUrp0D0OvgT1oj0f+5xbj3nA3D4VEwHwYDVR0jBBgwFoAUcdFOuyVdwFjUv6Wl
HJP3P4MKuI8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL2NobG9lLnNvYm9ybm9zdC5uZXQvcnBraS9SSVBFLW5scnNz
Zi9jZEZPdXlWZHdGalV2NldsSEpQM1A0TUt1STguY3JsMGQGCCsGAQUFBwEBBFgw
VjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9jZEZPdXlWZHdGalV2NldsSEpQM1A0TUt1STguY2VyMA4GA1UdDwEB
/wQEAwIHgDBoBggrBgEFBQcBCwRcMFowWAYIKwYBBQUHMAuGTHJzeW5jOi8vY2hs
b2Uuc29ib3Jub3N0Lm5ldC9ycGtpL1JJUEUtbmxyc3NmL3JwMEQwT3ZnVDFvajBm
LTV4YmozbkEzRDRWRS5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADC
aIEwDQYJKoZIhvcNAQELBQADggEBAIAzA2nQaMvCMeRnGYFIUxmtgek3+oj9GGtd
WlWdToN4niQQFJ7xC1XkCpNXKnloyZaP+KgYEvxGhiqOk3m7pqYRXjcJAqTg/B6C
RHK9ToOIGjmTckg2qrRNVb3lMBJTys2Jcy2pGUJJ8s/HqSm5uAzlitTAUG1WGyJz
BDM32OTY1Lw+BXSfZ0OG5ZabvqFIz76NEEqS2Mn+egTEKWLpqS7Rb/XKH/pZu6c2
cOlFTUQfo+gdJ8cSv3PwxSOC291o8PmbGpOp0CW3B3Tsos1nyGwyXuwZ4YjlST4d
/JXVp1FwlD1bt9GhNf2iXLDgC0yIJ/NelpizEWO3l12s2lJB5bM=
-----END CERTIFICATE-----
Generated at Wed May 29 01:04:20 2024 by rpki-client on console-ams.rpki-client.org