Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/rpAd8X-RPtfgv_SMbGHKJ_tu49E.roa
File: rpAd8X-RPtfgv_SMbGHKJ_tu49E.roa (raw, json)
Hash identifier: gMP3sXJgzbxs0MuHXECgE13u732IH9a0YO1x7waCHlo=
Subject key identifier: AE:90:1D:F1:7F:91:3E:D7:E0:BF:F4:8C:6C:61:CA:27:FB:6E:E3:D1
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0400
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/rpAd8X-RPtfgv_SMbGHKJ_tu49E.roa
Signing time: Sat 01 Jun 2024 23:55:03 +0000
ROA not before: Sat 01 Jun 2024 23:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 02 Jun 2024 03:55:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1024 (0x400)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Jun 1 23:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=AE901DF17F913ED7E0BFF48C6C61CA27FB6EE3D1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:d3:88:ab:24:a7:61:2c:20:b9:bb:f0:07:7d:
e0:c1:5f:f0:99:bb:71:5d:ec:db:33:0d:2c:93:b5:
99:ac:ea:55:bf:d5:65:3e:f6:b8:74:11:eb:08:e8:
49:66:77:91:1d:7e:00:1d:bf:0a:88:2a:0b:c5:07:
b5:4d:04:ac:35:87:dd:ff:8a:91:85:a7:9c:60:0c:
e2:37:a1:e7:9a:11:9f:79:7e:59:df:43:8c:51:6e:
c6:55:6b:4a:16:e3:dc:b1:ab:99:31:d5:00:3f:16:
06:84:76:42:e8:b7:b2:5f:17:c0:03:f9:fe:6b:af:
20:af:f6:50:42:d2:41:b1:3b:4d:b7:54:a1:55:d0:
89:02:2a:c6:90:95:98:a7:28:75:17:ea:20:2c:f7:
73:10:d3:57:8a:12:86:da:06:57:ad:e0:3a:15:99:
63:fc:6c:31:fd:0f:b4:a7:6b:cf:b4:3e:8b:ef:10:
56:61:ac:53:51:db:2e:6c:8c:7c:23:09:74:92:9a:
ba:ba:71:4e:ad:2c:ce:66:53:a9:ed:75:8e:f9:1c:
b6:f9:67:51:04:cc:5e:26:a9:21:b4:6d:d6:1e:ec:
43:fa:7c:84:cc:ec:aa:cd:9f:df:30:87:de:c9:bb:
19:1d:9b:2f:32:7b:a8:a1:ff:a4:ad:22:c6:f2:37:
5f:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:90:1D:F1:7F:91:3E:D7:E0:BF:F4:8C:6C:61:CA:27:FB:6E:E3:D1
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/rpAd8X-RPtfgv_SMbGHKJ_tu49E.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
55:58:91:c6:f1:43:3f:52:3a:b0:97:7b:bb:99:c7:8d:e4:b2:
f7:c6:d3:b4:94:90:8c:3f:d1:cb:5a:09:dd:bb:9b:2b:2c:6e:
6a:03:ad:5b:96:8d:a0:66:79:95:6b:6b:ff:15:70:08:83:9c:
44:47:ae:fa:3a:10:ae:c8:c7:dc:1c:cd:70:38:ce:11:f6:c3:
a0:b9:cb:61:7c:44:4f:45:da:65:90:44:c4:bb:1b:64:0e:6e:
ce:24:fa:49:e4:cd:cf:3b:6c:d9:c3:ea:52:6e:19:7f:55:47:
1c:27:67:b8:1c:4f:be:b8:53:13:cb:d7:67:be:f2:6f:de:ba:
4c:e3:0a:55:ba:7b:58:71:63:76:43:15:23:d5:fe:ec:4c:ef:
4c:0e:f4:8c:f9:42:e8:ce:d2:e5:43:d9:23:22:73:88:05:ff:
de:25:ca:d9:f2:52:1e:ca:84:9d:cf:b5:8e:07:83:51:04:20:
46:43:c6:aa:fe:59:3e:c6:4b:df:af:0e:ca:96:f8:76:c8:eb:
3e:8a:d6:f4:e9:8e:5b:58:1e:5e:40:25:7c:a3:0c:fd:e8:7e:
c7:cd:e6:27:45:70:08:1b:ea:ef:53:c4:73:63:7c:86:e4:a4:
f7:c0:94:57:da:2c:04:f0:b9:d2:70:c4:b2:2a:e4:b8:c5:9d:
de:ec:98:6e
-----BEGIN CERTIFICATE-----
MIIEojCCA4qgAwIBAgICBAAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzFk
MTRlYmIyNTVkYzA1OGQ0YmZhNWE1MWM5M2Y3M2Y4MzBhYjg4ZjAeFw0yNDA2MDEy
MzU1MDNaFw0yNTA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKEFFOTAxREYxN0Y5MTNF
RDdFMEJGRjQ4QzZDNjFDQTI3RkI2RUUzRDEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDl04irJKdhLCC5u/AHfeDBX/CZu3Fd7NszDSyTtZms6lW/1WU+
9rh0EesI6Elmd5EdfgAdvwqIKgvFB7VNBKw1h93/ipGFp5xgDOI3oeeaEZ95flnf
Q4xRbsZVa0oW49yxq5kx1QA/FgaEdkLot7JfF8AD+f5rryCv9lBC0kGxO023VKFV
0IkCKsaQlZinKHUX6iAs93MQ01eKEobaBlet4DoVmWP8bDH9D7Sna8+0PovvEFZh
rFNR2y5sjHwjCXSSmrq6cU6tLM5mU6ntdY75HLb5Z1EEzF4mqSG0bdYe7EP6fITM
7KrNn98wh97Juxkdmy8ye6ih/6StIsbyN1/NAgMBAAGjggG+MIIBujAdBgNVHQ4E
FgQUrpAd8X+RPtfgv/SMbGHKJ/tu49EwHwYDVR0jBBgwFoAUcdFOuyVdwFjUv6Wl
HJP3P4MKuI8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL2NobG9lLnNvYm9ybm9zdC5uZXQvcnBraS9SSVBFLW5scnNz
Zi9jZEZPdXlWZHdGalV2NldsSEpQM1A0TUt1STguY3JsMGQGCCsGAQUFBwEBBFgw
VjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9jZEZPdXlWZHdGalV2NldsSEpQM1A0TUt1STguY2VyMA4GA1UdDwEB
/wQEAwIHgDBoBggrBgEFBQcBCwRcMFowWAYIKwYBBQUHMAuGTHJzeW5jOi8vY2hs
b2Uuc29ib3Jub3N0Lm5ldC9ycGtpL1JJUEUtbmxyc3NmL3JwQWQ4WC1SUHRmZ3Zf
U01iR0hLSl90dTQ5RS5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADC
aIEwDQYJKoZIhvcNAQELBQADggEBAFVYkcbxQz9SOrCXe7uZx43ksvfG07SUkIw/
0ctaCd27myssbmoDrVuWjaBmeZVra/8VcAiDnERHrvo6EK7Ix9wczXA4zhH2w6C5
y2F8RE9F2mWQRMS7G2QObs4k+knkzc87bNnD6lJuGX9VRxwnZ7gcT764UxPL12e+
8m/eukzjClW6e1hxY3ZDFSPV/uxM70wO9Iz5QujO0uVD2SMic4gF/94lytnyUh7K
hJ3PtY4Hg1EEIEZDxqr+WT7GS9+vDsqW+HbI6z6K1vTpjltYHl5AJXyjDP3ofsfN
5idFcAgb6u9TxHNjfIbkpPfAlFfaLATwudJwxLIq5LjFnd7smG4=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:55 2024 by rpki-client on console-fra.rpki-client.org