Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/wadQ7S1-hSGp990MtRPzVI7haZg.roa
File: wadQ7S1-hSGp990MtRPzVI7haZg.roa (raw, json)
Hash identifier: A8pW1N3VmLUl0RB2GRO/jxG8ABV9efP9rTQQFdo8A8k=
Subject key identifier: C1:A7:50:ED:2D:7E:85:21:A9:F7:DD:0C:B5:13:F3:54:8E:E1:69:98
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 06BB
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/wadQ7S1-hSGp990MtRPzVI7haZg.roa
Signing time: Sun 18 Aug 2024 15:55:03 +0000
ROA not before: Sun 18 Aug 2024 15:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 18 Aug 2024 19:55:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1723 (0x6bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Aug 18 15:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=C1A750ED2D7E8521A9F7DD0CB513F3548EE16998
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:fa:7c:c8:0b:3d:04:28:8a:c5:0c:e0:38:92:
9b:c4:47:52:68:6f:3f:ab:15:ec:f3:c8:c4:4e:32:
5a:73:c2:ed:ee:38:39:02:ec:0f:0d:28:82:96:8d:
39:8a:a3:17:2e:db:0f:46:f8:05:2d:12:54:eb:03:
1e:34:37:dd:f0:f8:eb:e8:ca:e2:69:98:21:50:ec:
72:a6:9b:35:8d:09:3e:2a:07:99:97:7e:5e:9f:6e:
25:4b:29:6b:ad:77:1c:47:ba:e7:d9:ac:4d:81:b9:
6b:a1:10:96:0a:7d:4b:a0:d8:67:c7:b0:96:92:9c:
8d:39:ab:4c:e9:19:66:30:d2:88:f0:8f:71:4e:6b:
a3:c0:2e:80:de:85:08:cf:0b:43:97:c0:80:1a:f8:
17:7c:88:25:ef:09:e7:95:75:7e:01:b2:77:b5:9a:
66:03:6d:c6:da:36:ac:3d:81:27:e1:b3:29:02:be:
a5:19:8c:4c:1b:07:68:d8:b4:02:b8:89:7f:20:ff:
d5:f2:e6:17:93:b1:af:16:45:d5:28:c6:a9:0a:91:
e4:94:6e:37:a1:af:5c:bb:f6:1d:35:47:89:34:a4:
a6:fe:47:1f:e2:a1:9f:51:d0:d9:41:5c:8a:7f:90:
3f:35:03:60:e3:3f:4e:a6:24:0e:cd:a1:30:db:34:
1c:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:A7:50:ED:2D:7E:85:21:A9:F7:DD:0C:B5:13:F3:54:8E:E1:69:98
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/wadQ7S1-hSGp990MtRPzVI7haZg.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:c2:44:e1:0f:3a:a7:d3:36:f8:d7:3d:fe:4f:c3:b7:a5:c4:
d4:b8:7e:0d:25:33:1d:fe:6d:a1:5c:46:7a:66:cd:8c:b2:0a:
95:d1:95:8f:fd:ed:8f:8c:e2:0f:26:06:13:ac:c6:8b:1c:52:
59:ea:a6:81:3b:5c:9a:85:ce:b5:41:70:0a:99:6d:b0:21:f5:
14:5a:0e:37:3c:33:8a:33:f1:15:98:3f:0c:b3:49:a0:fc:66:
06:72:05:65:d3:6f:24:d0:08:63:42:74:51:91:82:e8:5d:55:
b7:6d:c7:cb:3e:34:5e:b5:4d:8c:0f:6f:31:82:e6:60:7b:cd:
c1:14:78:35:b7:f9:23:79:49:e2:1c:10:ab:df:24:de:d7:3d:
50:89:9a:26:21:85:11:3d:b4:ea:b6:9f:7a:9b:41:f8:04:1b:
fc:5b:8f:db:c7:44:a1:0b:c8:a9:fc:f2:37:8a:7f:86:d8:5b:
ae:db:e1:80:ca:bd:05:9e:c1:f8:eb:21:48:af:a5:74:8e:2f:
94:6f:7e:e8:0c:f0:06:6d:a1:af:0d:71:4c:41:8e:4b:b6:77:
18:26:f6:7a:c8:29:17:2f:50:74:73:bd:20:37:12:de:ae:72:
9b:e3:2c:74:9c:98:35:10:2f:5f:dd:1a:57:f5:21:b9:94:a9:
b6:3a:9b:c6
-----BEGIN CERTIFICATE-----
MIIEojCCA4qgAwIBAgICBrswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzFk
MTRlYmIyNTVkYzA1OGQ0YmZhNWE1MWM5M2Y3M2Y4MzBhYjg4ZjAeFw0yNDA4MTgx
NTU1MDNaFw0yNTA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKEMxQTc1MEVEMkQ3RTg1
MjFBOUY3REQwQ0I1MTNGMzU0OEVFMTY5OTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC2+nzICz0EKIrFDOA4kpvER1Jobz+rFezzyMROMlpzwu3uODkC
7A8NKIKWjTmKoxcu2w9G+AUtElTrAx40N93w+OvoyuJpmCFQ7HKmmzWNCT4qB5mX
fl6fbiVLKWutdxxHuufZrE2BuWuhEJYKfUug2GfHsJaSnI05q0zpGWYw0ojwj3FO
a6PALoDehQjPC0OXwIAa+Bd8iCXvCeeVdX4Bsne1mmYDbcbaNqw9gSfhsykCvqUZ
jEwbB2jYtAK4iX8g/9Xy5heTsa8WRdUoxqkKkeSUbjehr1y79h01R4k0pKb+Rx/i
oZ9R0NlBXIp/kD81A2DjP06mJA7NoTDbNByXAgMBAAGjggG+MIIBujAdBgNVHQ4E
FgQUwadQ7S1+hSGp990MtRPzVI7haZgwHwYDVR0jBBgwFoAUcdFOuyVdwFjUv6Wl
HJP3P4MKuI8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL2NobG9lLnNvYm9ybm9zdC5uZXQvcnBraS9SSVBFLW5scnNz
Zi9jZEZPdXlWZHdGalV2NldsSEpQM1A0TUt1STguY3JsMGQGCCsGAQUFBwEBBFgw
VjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9jZEZPdXlWZHdGalV2NldsSEpQM1A0TUt1STguY2VyMA4GA1UdDwEB
/wQEAwIHgDBoBggrBgEFBQcBCwRcMFowWAYIKwYBBQUHMAuGTHJzeW5jOi8vY2hs
b2Uuc29ib3Jub3N0Lm5ldC9ycGtpL1JJUEUtbmxyc3NmL3dhZFE3UzEtaFNHcDk5
ME10UlB6Vkk3aGFaZy5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADC
aIEwDQYJKoZIhvcNAQELBQADggEBACzCROEPOqfTNvjXPf5Pw7elxNS4fg0lMx3+
baFcRnpmzYyyCpXRlY/97Y+M4g8mBhOsxoscUlnqpoE7XJqFzrVBcAqZbbAh9RRa
Djc8M4oz8RWYPwyzSaD8ZgZyBWXTbyTQCGNCdFGRguhdVbdtx8s+NF61TYwPbzGC
5mB7zcEUeDW3+SN5SeIcEKvfJN7XPVCJmiYhhRE9tOq2n3qbQfgEG/xbj9vHRKEL
yKn88jeKf4bYW67b4YDKvQWewfjrIUivpXSOL5RvfugM8AZtoa8NcUxBjku2dxgm
9nrIKRcvUHRzvSA3Et6ucpvjLHScmDUQL1/dGlf1IbmUqbY6m8Y=
-----END CERTIFICATE-----
Generated at Sun Aug 18 22:08:49 2024 by rpki-client on console-ams.rpki-client.org