Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/w1QWsjL3r_26u-pS8YHuIWHt2eY.roa
File: w1QWsjL3r_26u-pS8YHuIWHt2eY.roa (raw, json)
Hash identifier: QZvFbuDtN5GOpp0PDwQ0tygZ19yT6ncObPr7aPj/LLc=
Subject key identifier: C3:54:16:B2:32:F7:AF:FD:BA:BB:EA:52:F1:81:EE:21:61:ED:D9:E6
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 062B
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/w1QWsjL3r_26u-pS8YHuIWHt2eY.roa
Signing time: Fri 02 Aug 2024 15:55:03 +0000
ROA not before: Fri 02 Aug 2024 15:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 02 Aug 2024 19:55:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1579 (0x62b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Aug 2 15:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=C35416B232F7AFFDBABBEA52F181EE2161EDD9E6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e5:7c:a0:6b:03:d2:8c:0c:50:16:76:b0:9e:
03:da:92:71:51:73:43:ce:74:83:49:df:4b:93:05:
52:0a:23:82:3d:9a:87:83:bc:28:30:ac:d6:06:da:
1e:f0:75:f9:f7:04:c8:28:eb:1b:5c:a2:97:58:13:
19:61:4e:6d:0f:d2:85:9d:cf:db:88:17:7d:b8:f3:
56:c6:be:83:a2:31:55:1b:4b:e0:5f:26:e1:69:d3:
e7:af:90:34:4f:04:72:f3:e6:e9:e7:5a:4f:b0:98:
6f:ba:23:f0:f5:30:3e:1d:95:ec:cc:da:c4:00:bc:
12:44:4c:35:a8:ed:9f:8b:68:a4:c4:5d:d6:f9:40:
0f:bb:e7:e8:ab:53:80:7c:67:3b:07:d7:14:68:11:
b0:67:b2:aa:91:87:d3:35:16:e8:76:76:4b:48:f7:
47:64:c8:ce:fc:80:cc:f4:7a:a4:7c:ec:d7:ce:9d:
10:e8:4d:b3:15:20:03:c7:b2:36:f5:61:cf:cc:c2:
c6:22:97:06:5e:9a:52:c7:71:86:33:21:74:2f:43:
f0:78:79:97:c4:2a:8b:8c:08:68:cc:4d:aa:85:b6:
01:dd:8a:68:8c:ad:5b:12:2a:a5:9e:74:f5:ea:51:
7a:28:83:85:a9:fe:ac:48:90:52:8e:93:4d:06:f0:
19:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:54:16:B2:32:F7:AF:FD:BA:BB:EA:52:F1:81:EE:21:61:ED:D9:E6
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/w1QWsjL3r_26u-pS8YHuIWHt2eY.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
90:2c:49:40:24:67:6c:08:df:0f:69:39:8d:f3:70:74:eb:0e:
e7:60:d4:7c:87:06:06:1f:20:07:75:5d:d0:ec:46:be:f8:17:
f5:1a:d7:69:86:a5:95:d8:28:ed:76:e5:6b:d0:4c:6a:be:31:
03:9f:37:24:8c:de:9f:ac:b6:9f:30:fc:12:cc:d3:a9:bc:04:
7f:3c:19:a0:89:0e:e7:03:39:00:41:c6:c9:81:56:f0:df:f1:
21:16:c2:da:23:40:32:05:88:42:c0:c7:17:ad:db:77:f7:c4:
28:3e:d7:dc:30:0a:88:96:06:15:b9:9d:10:7d:5f:00:df:94:
89:80:e0:91:6a:bf:9e:0c:dc:e0:4a:3a:f9:f6:cf:c9:30:ad:
9a:c3:a6:4f:50:93:10:d2:a9:c1:ab:9f:d5:52:b9:1a:37:ff:
89:db:e6:ea:54:25:c0:2b:9a:c3:05:fd:a1:2e:5c:52:c3:e5:
72:1d:32:8c:f3:fe:7e:f4:b0:62:53:ee:d2:bd:bf:e9:38:e0:
99:15:73:c2:52:b4:ba:90:50:b3:26:dd:ca:59:29:0a:46:55:
02:e2:8d:3b:85:92:ef:13:93:c2:1e:2d:9f:11:48:29:7f:90:
94:32:06:35:90:a1:b7:45:fc:45:8c:6d:8d:af:04:09:8d:4a:
58:1d:84:46
-----BEGIN CERTIFICATE-----
MIIEojCCA4qgAwIBAgICBiswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzFk
MTRlYmIyNTVkYzA1OGQ0YmZhNWE1MWM5M2Y3M2Y4MzBhYjg4ZjAeFw0yNDA4MDIx
NTU1MDNaFw0yNTA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKEMzNTQxNkIyMzJGN0FG
RkRCQUJCRUE1MkYxODFFRTIxNjFFREQ5RTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDD5XygawPSjAxQFnawngPaknFRc0POdINJ30uTBVIKI4I9moeD
vCgwrNYG2h7wdfn3BMgo6xtcopdYExlhTm0P0oWdz9uIF32481bGvoOiMVUbS+Bf
JuFp0+evkDRPBHLz5unnWk+wmG+6I/D1MD4dlezM2sQAvBJETDWo7Z+LaKTEXdb5
QA+75+irU4B8ZzsH1xRoEbBnsqqRh9M1Fuh2dktI90dkyM78gMz0eqR87NfOnRDo
TbMVIAPHsjb1Yc/MwsYilwZemlLHcYYzIXQvQ/B4eZfEKouMCGjMTaqFtgHdimiM
rVsSKqWedPXqUXoog4Wp/qxIkFKOk00G8BlFAgMBAAGjggG+MIIBujAdBgNVHQ4E
FgQUw1QWsjL3r/26u+pS8YHuIWHt2eYwHwYDVR0jBBgwFoAUcdFOuyVdwFjUv6Wl
HJP3P4MKuI8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL2NobG9lLnNvYm9ybm9zdC5uZXQvcnBraS9SSVBFLW5scnNz
Zi9jZEZPdXlWZHdGalV2NldsSEpQM1A0TUt1STguY3JsMGQGCCsGAQUFBwEBBFgw
VjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9jZEZPdXlWZHdGalV2NldsSEpQM1A0TUt1STguY2VyMA4GA1UdDwEB
/wQEAwIHgDBoBggrBgEFBQcBCwRcMFowWAYIKwYBBQUHMAuGTHJzeW5jOi8vY2hs
b2Uuc29ib3Jub3N0Lm5ldC9ycGtpL1JJUEUtbmxyc3NmL3cxUVdzakwzcl8yNnUt
cFM4WUh1SVdIdDJlWS5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADC
aIEwDQYJKoZIhvcNAQELBQADggEBAJAsSUAkZ2wI3w9pOY3zcHTrDudg1HyHBgYf
IAd1XdDsRr74F/Ua12mGpZXYKO125WvQTGq+MQOfNySM3p+stp8w/BLM06m8BH88
GaCJDucDOQBBxsmBVvDf8SEWwtojQDIFiELAxxet23f3xCg+19wwCoiWBhW5nRB9
XwDflImA4JFqv54M3OBKOvn2z8kwrZrDpk9QkxDSqcGrn9VSuRo3/4nb5upUJcAr
msMF/aEuXFLD5XIdMozz/n70sGJT7tK9v+k44JkVc8JStLqQULMm3cpZKQpGVQLi
jTuFku8Tk8IeLZ8RSCl/kJQyBjWQobdF/EWMbY2vBAmNSlgdhEY=
-----END CERTIFICATE-----
Generated at Fri Aug 2 21:56:04 2024 by rpki-client on console-fra.rpki-client.org