Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/un49Yyk0bmQw03CpuNVnpAGuJy8.roa
File: un49Yyk0bmQw03CpuNVnpAGuJy8.roa (raw, json)
Hash identifier: jDE7n7sOnOtbf+eQTh8CwZyt7Q5h27VcvBgrjOQFri0=
Subject key identifier: BA:7E:3D:63:29:34:6E:64:30:D3:70:A9:B8:D5:67:A4:01:AE:27:2F
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 01B1
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/un49Yyk0bmQw03CpuNVnpAGuJy8.roa
Signing time: Thu 28 Mar 2024 07:55:03 +0000
ROA not before: Thu 28 Mar 2024 07:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 28 Mar 2024 11:55:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 433 (0x1b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Mar 28 07:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=BA7E3D6329346E6430D370A9B8D567A401AE272F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:4c:7a:9c:f2:b6:38:9a:c3:34:be:e8:e4:1f:
6e:d2:fd:4b:ed:02:c3:b7:d1:42:db:bc:1a:3f:fa:
a1:06:b0:3d:de:cf:f1:50:c9:c9:27:97:b2:6b:67:
7f:7a:28:84:1b:3a:09:1e:6c:d5:22:4b:53:dd:46:
36:a1:f1:68:9d:13:fb:9c:c6:ab:22:b5:08:e5:2d:
8f:6d:93:90:c9:fc:42:58:63:d2:c2:04:9e:e3:e6:
f8:c2:7e:76:88:f5:f1:a4:e0:32:ee:15:9b:17:3f:
26:66:c4:7a:2c:01:b7:5b:3a:18:77:f2:4d:90:b3:
70:88:ec:c7:ed:0b:a3:de:71:37:5b:54:c1:69:83:
de:54:ef:c5:b9:b4:46:98:75:45:9c:8b:f0:b7:70:
e1:3b:04:69:a8:f2:f5:c3:6d:95:88:61:f7:0f:7a:
3f:cd:c3:6e:99:4d:14:32:8b:18:76:bd:06:03:f1:
8d:51:f4:f4:16:4b:50:74:8c:38:c3:90:74:c0:29:
cc:c5:e3:79:3e:a4:65:b5:df:f2:2d:7f:a8:ea:a4:
5b:91:03:b5:e8:3c:b8:4e:6f:bc:87:a1:b5:f8:c8:
15:25:96:32:88:ec:cd:27:1b:db:0f:5d:ca:ee:2f:
14:12:5a:f7:0f:5a:92:4b:2c:cc:b6:ba:be:21:ab:
44:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:7E:3D:63:29:34:6E:64:30:D3:70:A9:B8:D5:67:A4:01:AE:27:2F
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/un49Yyk0bmQw03CpuNVnpAGuJy8.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:5f:65:3d:f6:dd:63:28:34:cd:d5:29:ad:44:5d:84:98:d1:
8d:6a:bf:fb:c8:8e:76:0f:3b:9b:54:3c:28:81:04:85:a3:72:
8a:c8:d8:1e:b2:b6:4e:8c:cd:11:62:f9:fa:95:89:4c:92:94:
df:05:00:e5:7c:3b:46:6e:e3:93:6c:f3:94:6e:4b:6e:98:a0:
a3:5a:e1:1b:c6:1c:86:b5:a8:18:36:99:a8:e2:0b:4d:7c:b2:
97:bd:35:3c:37:ae:aa:30:5a:64:69:8d:35:12:57:c4:67:f3:
49:c3:5a:53:b2:53:41:dd:f2:c6:eb:04:21:01:44:97:b5:2d:
a4:e0:65:2f:95:53:73:bd:7f:d6:a6:19:8d:7c:9e:10:0c:79:
dd:0d:ad:06:f6:90:b1:a6:b5:9f:85:e4:04:31:08:b5:84:b4:
21:53:59:46:1f:b3:79:c3:76:db:55:27:1d:29:91:98:03:f4:
7a:cc:b7:98:d3:8a:a5:7f:f3:e2:7a:5b:95:63:07:85:3e:a7:
a0:2b:75:8a:ba:ed:77:c2:8f:7f:c2:10:cf:44:0c:a7:85:72:
de:ac:79:f3:b5:07:64:7d:f0:2c:45:b4:12:d2:44:37:67:b8:
b2:75:f6:47:cf:81:83:eb:2a:c8:ce:40:27:d4:22:a4:67:08:
ce:17:df:82
-----BEGIN CERTIFICATE-----
MIIEojCCA4qgAwIBAgICAbEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzFk
MTRlYmIyNTVkYzA1OGQ0YmZhNWE1MWM5M2Y3M2Y4MzBhYjg4ZjAeFw0yNDAzMjgw
NzU1MDNaFw0yNTA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKEJBN0UzRDYzMjkzNDZF
NjQzMEQzNzBBOUI4RDU2N0E0MDFBRTI3MkYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDKTHqc8rY4msM0vujkH27S/UvtAsO30ULbvBo/+qEGsD3ez/FQ
ycknl7JrZ396KIQbOgkebNUiS1PdRjah8WidE/ucxqsitQjlLY9tk5DJ/EJYY9LC
BJ7j5vjCfnaI9fGk4DLuFZsXPyZmxHosAbdbOhh38k2Qs3CI7MftC6PecTdbVMFp
g95U78W5tEaYdUWci/C3cOE7BGmo8vXDbZWIYfcPej/Nw26ZTRQyixh2vQYD8Y1R
9PQWS1B0jDjDkHTAKczF43k+pGW13/Itf6jqpFuRA7XoPLhOb7yHobX4yBUlljKI
7M0nG9sPXcruLxQSWvcPWpJLLMy2ur4hq0TRAgMBAAGjggG+MIIBujAdBgNVHQ4E
FgQUun49Yyk0bmQw03CpuNVnpAGuJy8wHwYDVR0jBBgwFoAUcdFOuyVdwFjUv6Wl
HJP3P4MKuI8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL2NobG9lLnNvYm9ybm9zdC5uZXQvcnBraS9SSVBFLW5scnNz
Zi9jZEZPdXlWZHdGalV2NldsSEpQM1A0TUt1STguY3JsMGQGCCsGAQUFBwEBBFgw
VjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9jZEZPdXlWZHdGalV2NldsSEpQM1A0TUt1STguY2VyMA4GA1UdDwEB
/wQEAwIHgDBoBggrBgEFBQcBCwRcMFowWAYIKwYBBQUHMAuGTHJzeW5jOi8vY2hs
b2Uuc29ib3Jub3N0Lm5ldC9ycGtpL1JJUEUtbmxyc3NmL3VuNDlZeWswYm1RdzAz
Q3B1TlZucEFHdUp5OC5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADC
aIEwDQYJKoZIhvcNAQELBQADggEBALdfZT323WMoNM3VKa1EXYSY0Y1qv/vIjnYP
O5tUPCiBBIWjcorI2B6ytk6MzRFi+fqViUySlN8FAOV8O0Zu45Ns85RuS26YoKNa
4RvGHIa1qBg2majiC018spe9NTw3rqowWmRpjTUSV8Rn80nDWlOyU0Hd8sbrBCEB
RJe1LaTgZS+VU3O9f9amGY18nhAMed0NrQb2kLGmtZ+F5AQxCLWEtCFTWUYfs3nD
dttVJx0pkZgD9HrMt5jTiqV/8+J6W5VjB4U+p6ArdYq67XfCj3/CEM9EDKeFct6s
efO1B2R98CxFtBLSRDdnuLJ19kfPgYPrKsjOQCfUIqRnCM4X34I=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:55 2024 by rpki-client on console-fra.rpki-client.org