Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/uT7JwjHJGq3bliJTQ7qlxiFpo08.roa
File: uT7JwjHJGq3bliJTQ7qlxiFpo08.roa (raw, json)
Hash identifier: IhBtLMoFJkzk9+PCrkNYt2/BUbAnb6g3MFJMElnM38E=
Subject key identifier: B9:3E:C9:C2:31:C9:1A:AD:DB:96:22:53:43:BA:A5:C6:21:69:A3:4F
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0184
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/uT7JwjHJGq3bliJTQ7qlxiFpo08.roa
Signing time: Sat 23 Mar 2024 07:55:03 +0000
ROA not before: Sat 23 Mar 2024 07:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 23 Mar 2024 11:55:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 388 (0x184)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Mar 23 07:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=B93EC9C231C91AADDB96225343BAA5C62169A34F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:7e:22:28:b8:8f:34:af:f7:e6:72:34:82:d6:
67:f7:da:f6:f0:ab:c7:18:e0:c3:52:6f:83:20:3c:
59:8c:48:3a:7f:75:f9:9d:4b:13:19:ac:8b:62:0f:
d5:3e:ae:74:18:0f:88:40:e2:ee:13:0e:f6:cf:25:
e3:99:8e:e5:0d:a3:78:7d:92:52:9a:6c:73:96:3b:
4e:fa:3a:97:fa:9f:7d:34:d6:8c:0d:e4:df:c3:ca:
0c:c1:1f:25:64:8d:0f:00:97:5c:a1:0f:8a:4f:51:
00:fa:7e:af:25:17:aa:f4:d5:82:75:f4:73:c0:19:
30:fd:cb:3b:d6:40:5b:2f:fd:1d:d3:b2:29:70:26:
12:5b:47:4b:56:b4:65:29:ff:1b:73:c3:4b:15:d4:
b1:49:65:6b:2a:51:cf:99:77:32:05:40:1a:e7:f1:
ec:c1:4f:6d:40:6a:ce:ed:e4:be:f6:a3:a0:d9:a2:
21:e4:44:0f:0c:61:82:df:9b:e7:e9:ff:53:91:e3:
2b:df:c2:6c:9f:c3:a8:06:a5:e3:e3:04:9f:07:1e:
e4:7c:70:45:1e:e8:7d:68:4c:ce:be:8a:c4:7d:97:
33:7d:b9:14:48:1b:50:c8:9a:2f:8a:9e:22:8b:c7:
66:2f:7c:ac:e7:ce:51:46:dc:a4:72:f1:85:b7:59:
1a:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:3E:C9:C2:31:C9:1A:AD:DB:96:22:53:43:BA:A5:C6:21:69:A3:4F
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/uT7JwjHJGq3bliJTQ7qlxiFpo08.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:67:3a:48:a7:29:92:92:bb:54:91:b1:de:8f:6c:79:d6:b2:
93:e4:e4:5a:5d:90:60:84:69:da:d1:18:c5:a2:6b:53:a4:5f:
ba:fa:d9:68:4b:97:89:f4:94:53:0b:25:cf:bc:5c:5a:1f:18:
24:13:ff:cf:d9:a3:6a:02:e1:dc:dc:07:fc:68:b6:0f:0b:73:
ed:53:2b:7e:36:a0:48:db:bc:06:22:a4:d2:58:23:67:15:77:
80:04:5d:61:9f:d9:b7:3e:a0:15:2c:2b:cf:5c:a9:1b:3d:ea:
e8:36:a2:81:72:11:c1:dd:d9:47:39:b2:de:8f:ea:46:27:ec:
a6:8c:df:04:cc:40:82:36:7c:92:fc:ff:d3:ce:8e:65:7a:55:
77:eb:13:a4:ad:20:88:2c:52:cf:00:26:4e:72:06:da:77:6e:
0f:58:26:95:84:e0:4e:54:83:26:3b:e6:ae:53:59:45:0a:1e:
5e:9e:86:da:80:57:f2:72:4b:bd:e2:8c:e4:82:09:e7:b1:38:
cb:75:96:15:42:56:06:dc:9d:c3:26:9d:db:40:15:94:6f:94:
d4:91:57:fc:3a:93:bd:17:f4:c2:94:ec:e5:a8:40:22:7e:80:
f3:fc:ac:aa:e9:98:a0:50:4f:3f:74:a0:db:05:41:f6:8e:e6:
98:79:98:d0
-----BEGIN CERTIFICATE-----
MIIEojCCA4qgAwIBAgICAYQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzFk
MTRlYmIyNTVkYzA1OGQ0YmZhNWE1MWM5M2Y3M2Y4MzBhYjg4ZjAeFw0yNDAzMjMw
NzU1MDNaFw0yNTA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKEI5M0VDOUMyMzFDOTFB
QUREQjk2MjI1MzQzQkFBNUM2MjE2OUEzNEYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDDfiIouI80r/fmcjSC1mf32vbwq8cY4MNSb4MgPFmMSDp/dfmd
SxMZrItiD9U+rnQYD4hA4u4TDvbPJeOZjuUNo3h9klKabHOWO076Opf6n3001owN
5N/DygzBHyVkjQ8Al1yhD4pPUQD6fq8lF6r01YJ19HPAGTD9yzvWQFsv/R3Tsilw
JhJbR0tWtGUp/xtzw0sV1LFJZWsqUc+ZdzIFQBrn8ezBT21Aas7t5L72o6DZoiHk
RA8MYYLfm+fp/1OR4yvfwmyfw6gGpePjBJ8HHuR8cEUe6H1oTM6+isR9lzN9uRRI
G1DImi+KniKLx2YvfKznzlFG3KRy8YW3WRo1AgMBAAGjggG+MIIBujAdBgNVHQ4E
FgQUuT7JwjHJGq3bliJTQ7qlxiFpo08wHwYDVR0jBBgwFoAUcdFOuyVdwFjUv6Wl
HJP3P4MKuI8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL2NobG9lLnNvYm9ybm9zdC5uZXQvcnBraS9SSVBFLW5scnNz
Zi9jZEZPdXlWZHdGalV2NldsSEpQM1A0TUt1STguY3JsMGQGCCsGAQUFBwEBBFgw
VjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9jZEZPdXlWZHdGalV2NldsSEpQM1A0TUt1STguY2VyMA4GA1UdDwEB
/wQEAwIHgDBoBggrBgEFBQcBCwRcMFowWAYIKwYBBQUHMAuGTHJzeW5jOi8vY2hs
b2Uuc29ib3Jub3N0Lm5ldC9ycGtpL1JJUEUtbmxyc3NmL3VUN0p3akhKR3EzYmxp
SlRRN3FseGlGcG8wOC5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADC
aIEwDQYJKoZIhvcNAQELBQADggEBAGpnOkinKZKSu1SRsd6PbHnWspPk5FpdkGCE
adrRGMWia1OkX7r62WhLl4n0lFMLJc+8XFofGCQT/8/Zo2oC4dzcB/xotg8Lc+1T
K342oEjbvAYipNJYI2cVd4AEXWGf2bc+oBUsK89cqRs96ug2ooFyEcHd2Uc5st6P
6kYn7KaM3wTMQII2fJL8/9POjmV6VXfrE6StIIgsUs8AJk5yBtp3bg9YJpWE4E5U
gyY75q5TWUUKHl6ehtqAV/JyS73ijOSCCeexOMt1lhVCVgbcncMmndtAFZRvlNSR
V/w6k70X9MKU7OWoQCJ+gPP8rKrpmKBQTz90oNsFQfaO5ph5mNA=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:55 2024 by rpki-client on console-fra.rpki-client.org