Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/uJqwz9_U3WDHBl_uA3Py0Sr60ts.roa
File: uJqwz9_U3WDHBl_uA3Py0Sr60ts.roa (raw, json)
Hash identifier: xbiUofsyDDVftVEfw9XdbuiNS2B3jSwg8KujK1hWk+0=
Subject key identifier: B8:9A:B0:CF:DF:D4:DD:60:C7:06:5F:EE:03:73:F2:D1:2A:FA:D2:DB
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 03E2
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/uJqwz9_U3WDHBl_uA3Py0Sr60ts.roa
Signing time: Wed 29 May 2024 15:55:02 +0000
ROA not before: Wed 29 May 2024 15:55:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 29 May 2024 19:55:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 994 (0x3e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: May 29 15:55:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=B89AB0CFDFD4DD60C7065FEE0373F2D12AFAD2DB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:7c:73:b0:07:44:f6:d6:5c:92:44:96:02:90:
05:80:92:97:62:12:46:b9:ef:2b:eb:65:ba:4d:d2:
59:83:ae:1f:40:71:7d:72:d1:0b:90:a3:dd:6e:ad:
04:8f:e4:ef:1f:4c:4c:1d:3d:f0:e6:ba:a4:dd:d7:
a3:f2:db:fc:8d:91:a2:1b:8d:9a:5e:03:18:a3:43:
0a:1a:05:51:86:05:c4:34:36:83:ce:07:3d:bc:dc:
0c:f2:58:9a:fd:38:1b:37:97:9f:40:3e:b4:80:e1:
7c:04:92:31:27:64:45:a5:01:c2:02:b6:4a:26:13:
02:e1:a9:8e:75:e1:b0:41:1d:dc:c7:26:cb:38:db:
84:9d:96:7a:3b:5e:cf:43:ba:18:c8:89:9d:c3:82:
39:1f:93:f1:78:25:7e:62:84:08:7a:b9:66:f4:c4:
c2:d3:d6:78:c2:d8:cd:77:c7:ba:4b:a6:30:14:16:
1a:c0:9b:73:75:f7:3b:e2:02:67:3e:2e:e5:b3:44:
f7:ac:e9:93:ec:24:58:ff:1d:a2:0d:5c:1e:ae:73:
52:ea:9d:51:ef:75:93:d1:e6:ee:88:88:fd:6b:58:
5b:a7:68:4d:35:d0:30:e1:0a:52:c4:1d:da:32:41:
58:83:66:eb:73:60:44:11:18:0f:ff:57:7e:a0:28:
3f:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:9A:B0:CF:DF:D4:DD:60:C7:06:5F:EE:03:73:F2:D1:2A:FA:D2:DB
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/uJqwz9_U3WDHBl_uA3Py0Sr60ts.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:0d:9c:4b:a9:08:1e:22:94:6c:33:a9:2d:c7:c6:ef:a9:1f:
0a:b1:71:03:8b:ae:dd:bb:53:72:1f:d4:e6:48:23:7a:43:2c:
67:ed:9d:02:72:b5:01:8d:5f:13:fb:e1:76:3c:e4:c3:74:c4:
c1:ef:0e:2d:4f:05:5d:63:7b:4c:9f:6b:f1:c7:c5:07:eb:7c:
22:0a:93:06:1d:24:a1:f6:38:dc:d9:d7:1a:41:5a:27:11:9c:
70:33:9f:f0:ce:2e:c2:b3:0e:80:c1:17:d3:59:b3:56:d8:49:
a7:3c:dc:df:ca:e9:43:a0:5d:f9:e9:98:90:e2:64:8d:fe:d8:
ee:9d:96:e4:a3:82:86:c0:51:6a:8c:02:b5:79:79:aa:bc:4a:
bf:70:92:fe:43:33:aa:7d:fd:f0:f6:d4:03:9b:c8:01:fb:f4:
69:b2:d0:e7:d0:33:9c:be:81:c1:c6:79:e5:88:96:da:d2:b4:
80:90:5a:cd:56:49:d3:7e:ae:b2:15:0f:30:75:a5:fc:e8:d7:
13:a8:cd:25:b4:6b:61:50:b7:a9:9f:d8:56:28:df:ca:88:1e:
a9:3e:86:fa:6b:c5:a0:94:ec:04:16:11:7a:b5:8e:97:1a:e4:
9f:76:6b:3c:bf:cc:1e:56:25:6d:e4:ce:4a:b3:14:6c:e6:dc:
5f:69:34:07
-----BEGIN CERTIFICATE-----
MIIEojCCA4qgAwIBAgICA+IwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzFk
MTRlYmIyNTVkYzA1OGQ0YmZhNWE1MWM5M2Y3M2Y4MzBhYjg4ZjAeFw0yNDA1Mjkx
NTU1MDJaFw0yNTA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKEI4OUFCMENGREZENERE
NjBDNzA2NUZFRTAzNzNGMkQxMkFGQUQyREIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQChfHOwB0T21lySRJYCkAWAkpdiEka57yvrZbpN0lmDrh9AcX1y
0QuQo91urQSP5O8fTEwdPfDmuqTd16Py2/yNkaIbjZpeAxijQwoaBVGGBcQ0NoPO
Bz283AzyWJr9OBs3l59APrSA4XwEkjEnZEWlAcICtkomEwLhqY514bBBHdzHJss4
24Sdlno7Xs9DuhjIiZ3Dgjkfk/F4JX5ihAh6uWb0xMLT1njC2M13x7pLpjAUFhrA
m3N19zviAmc+LuWzRPes6ZPsJFj/HaINXB6uc1LqnVHvdZPR5u6IiP1rWFunaE01
0DDhClLEHdoyQViDZutzYEQRGA//V36gKD+vAgMBAAGjggG+MIIBujAdBgNVHQ4E
FgQUuJqwz9/U3WDHBl/uA3Py0Sr60tswHwYDVR0jBBgwFoAUcdFOuyVdwFjUv6Wl
HJP3P4MKuI8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL2NobG9lLnNvYm9ybm9zdC5uZXQvcnBraS9SSVBFLW5scnNz
Zi9jZEZPdXlWZHdGalV2NldsSEpQM1A0TUt1STguY3JsMGQGCCsGAQUFBwEBBFgw
VjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9jZEZPdXlWZHdGalV2NldsSEpQM1A0TUt1STguY2VyMA4GA1UdDwEB
/wQEAwIHgDBoBggrBgEFBQcBCwRcMFowWAYIKwYBBQUHMAuGTHJzeW5jOi8vY2hs
b2Uuc29ib3Jub3N0Lm5ldC9ycGtpL1JJUEUtbmxyc3NmL3VKcXd6OV9VM1dESEJs
X3VBM1B5MFNyNjB0cy5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADC
aIEwDQYJKoZIhvcNAQELBQADggEBACoNnEupCB4ilGwzqS3Hxu+pHwqxcQOLrt27
U3If1OZII3pDLGftnQJytQGNXxP74XY85MN0xMHvDi1PBV1je0yfa/HHxQfrfCIK
kwYdJKH2ONzZ1xpBWicRnHAzn/DOLsKzDoDBF9NZs1bYSac83N/K6UOgXfnpmJDi
ZI3+2O6dluSjgobAUWqMArV5eaq8Sr9wkv5DM6p9/fD21AObyAH79Gmy0OfQM5y+
gcHGeeWIltrStICQWs1WSdN+rrIVDzB1pfzo1xOozSW0a2FQt6mf2FYo38qIHqk+
hvprxaCU7AQWEXq1jpca5J92azy/zB5WJW3kzkqzFGzm3F9pNAc=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:55 2024 by rpki-client on console-fra.rpki-client.org