Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/v7TxZ0l_1kYBCs33TlN_wDEgGug.roa
File: v7TxZ0l_1kYBCs33TlN_wDEgGug.roa (raw, json)
Hash identifier: l68iisOIC1cYs5MPnquvvsjT81+aEEA2T+NJwa9R4BA=
Subject key identifier: BF:B4:F1:67:49:7F:D6:46:01:0A:CD:F7:4E:53:7F:C0:31:20:1A:E8
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0223
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/v7TxZ0l_1kYBCs33TlN_wDEgGug.roa
Signing time: Tue 09 Apr 2024 23:55:02 +0000
ROA not before: Tue 09 Apr 2024 23:55:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 10 Apr 2024 03:55:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 547 (0x223)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Apr 9 23:55:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=BFB4F167497FD646010ACDF74E537FC031201AE8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:6e:38:73:93:0b:e4:c2:bd:64:d6:be:95:ab:
70:73:91:e6:ef:da:2f:cf:34:5b:72:11:a5:77:87:
df:61:31:07:a4:4f:db:c9:84:89:e0:97:94:78:a9:
0b:e3:92:49:30:e4:75:a2:60:8e:3d:ba:4f:f8:7e:
80:f5:9d:55:26:6e:c8:58:97:e7:83:61:a5:bf:70:
d1:51:59:5e:df:43:f4:d3:40:3c:8a:7e:68:9a:cb:
26:64:bb:35:02:b1:26:f0:f8:0f:d3:fe:71:71:8f:
35:30:b1:92:31:ae:a3:fd:db:71:81:01:ee:f6:3c:
f9:fd:d5:98:a5:1a:ed:bc:91:ce:56:b0:75:3b:3f:
7b:3b:92:4d:79:32:14:7e:67:5c:56:81:69:94:1f:
34:73:a6:79:5f:98:bc:82:22:16:70:23:a0:14:8b:
fd:b1:f0:d0:5e:17:9f:a2:1f:0c:ba:88:17:1f:c8:
f2:e4:14:fc:3a:37:e8:c5:5c:b8:2f:7e:70:a4:f4:
12:79:89:04:5b:9f:6e:69:1f:75:6e:db:20:6c:c9:
5f:6c:b5:e0:1e:30:09:d1:84:0d:a4:8b:39:62:32:
c0:ad:45:31:84:47:69:e8:55:93:cf:60:90:fd:25:
06:14:2f:1c:c9:11:26:38:89:22:6f:36:b2:38:a2:
29:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:B4:F1:67:49:7F:D6:46:01:0A:CD:F7:4E:53:7F:C0:31:20:1A:E8
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/v7TxZ0l_1kYBCs33TlN_wDEgGug.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:06:0d:8b:33:68:26:c1:90:7f:78:98:49:54:56:d2:cc:29:
4d:c1:9d:d1:fd:64:80:4a:08:a8:4d:c7:3e:28:4b:13:08:b9:
1b:41:e3:58:ce:5c:a6:49:51:04:aa:79:af:cf:63:b6:bb:eb:
b1:e1:92:4d:de:bc:62:8e:66:cc:70:c0:b0:26:15:60:21:20:
aa:0b:85:c9:f3:95:90:d6:be:48:0b:56:09:88:01:d7:17:59:
9c:a4:12:0b:87:29:a0:87:ef:11:65:41:6b:32:dc:93:ef:e0:
75:ee:6f:76:93:fe:c5:6d:30:97:22:db:41:78:7b:be:d0:60:
51:bd:c9:3f:d2:32:b4:d6:77:10:e8:ae:12:e4:82:b6:f8:8e:
a7:6d:d8:03:22:96:f5:b2:43:57:e4:32:70:da:2f:8d:56:97:
ef:c5:d6:f4:07:f8:06:07:86:6d:8d:de:b7:71:db:4c:35:d9:
44:5c:2f:b8:cb:d9:e0:e5:2c:45:23:1c:5f:51:aa:07:5e:e9:
09:fb:c1:af:6d:e7:b9:8e:57:22:4c:e3:6b:4f:a7:ef:0f:e7:
4e:4c:e7:99:01:b1:0b:7a:19:0d:ff:e8:71:15:85:f5:19:9e:
3c:9c:7f:8d:02:52:77:01:07:d2:fb:54:3d:74:9e:4e:84:f8:
ca:a4:99:64
-----BEGIN CERTIFICATE-----
MIIEojCCA4qgAwIBAgICAiMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzFk
MTRlYmIyNTVkYzA1OGQ0YmZhNWE1MWM5M2Y3M2Y4MzBhYjg4ZjAeFw0yNDA0MDky
MzU1MDJaFw0yNTA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKEJGQjRGMTY3NDk3RkQ2
NDYwMTBBQ0RGNzRFNTM3RkMwMzEyMDFBRTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC/bjhzkwvkwr1k1r6Vq3Bzkebv2i/PNFtyEaV3h99hMQekT9vJ
hIngl5R4qQvjkkkw5HWiYI49uk/4foD1nVUmbshYl+eDYaW/cNFRWV7fQ/TTQDyK
fmiayyZkuzUCsSbw+A/T/nFxjzUwsZIxrqP923GBAe72PPn91ZilGu28kc5WsHU7
P3s7kk15MhR+Z1xWgWmUHzRzpnlfmLyCIhZwI6AUi/2x8NBeF5+iHwy6iBcfyPLk
FPw6N+jFXLgvfnCk9BJ5iQRbn25pH3Vu2yBsyV9steAeMAnRhA2kizliMsCtRTGE
R2noVZPPYJD9JQYULxzJESY4iSJvNrI4oilLAgMBAAGjggG+MIIBujAdBgNVHQ4E
FgQUv7TxZ0l/1kYBCs33TlN/wDEgGugwHwYDVR0jBBgwFoAUcdFOuyVdwFjUv6Wl
HJP3P4MKuI8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL2NobG9lLnNvYm9ybm9zdC5uZXQvcnBraS9SSVBFLW5scnNz
Zi9jZEZPdXlWZHdGalV2NldsSEpQM1A0TUt1STguY3JsMGQGCCsGAQUFBwEBBFgw
VjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9jZEZPdXlWZHdGalV2NldsSEpQM1A0TUt1STguY2VyMA4GA1UdDwEB
/wQEAwIHgDBoBggrBgEFBQcBCwRcMFowWAYIKwYBBQUHMAuGTHJzeW5jOi8vY2hs
b2Uuc29ib3Jub3N0Lm5ldC9ycGtpL1JJUEUtbmxyc3NmL3Y3VHhaMGxfMWtZQkNz
MzNUbE5fd0RFZ0d1Zy5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADC
aIEwDQYJKoZIhvcNAQELBQADggEBAG0GDYszaCbBkH94mElUVtLMKU3BndH9ZIBK
CKhNxz4oSxMIuRtB41jOXKZJUQSqea/PY7a767Hhkk3evGKOZsxwwLAmFWAhIKoL
hcnzlZDWvkgLVgmIAdcXWZykEguHKaCH7xFlQWsy3JPv4HXub3aT/sVtMJci20F4
e77QYFG9yT/SMrTWdxDorhLkgrb4jqdt2AMilvWyQ1fkMnDaL41Wl+/F1vQH+AYH
hm2N3rdx20w12URcL7jL2eDlLEUjHF9Rqgde6Qn7wa9t57mOVyJM42tPp+8P505M
55kBsQt6GQ3/6HEVhfUZnjycf40CUncBB9L7VD10nk6E+MqkmWQ=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:55 2024 by rpki-client on console-fra.rpki-client.org