Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/z4r14FPibETsHm44_dE9fFRVCFA.roa
File: z4r14FPibETsHm44_dE9fFRVCFA.roa (raw, json)
Hash identifier: rsZzMABsbNJr042o/AStxTgGUbh4DIBWHWmLioTxFm4=
Subject key identifier: CF:8A:F5:E0:53:E2:6C:44:EC:1E:6E:38:FD:D1:3D:7C:54:55:08:50
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 07D5
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/z4r14FPibETsHm44_dE9fFRVCFA.roa
Signing time: Wed 18 Sep 2024 23:55:03 +0000
ROA not before: Wed 18 Sep 2024 23:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 19 Sep 2024 03:55:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2005 (0x7d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Sep 18 23:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=CF8AF5E053E26C44EC1E6E38FDD13D7C54550850
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:8e:c9:82:a5:a5:bb:de:6a:7f:a3:29:7d:9e:
fd:0b:b0:e9:af:9a:b3:80:1d:42:e5:77:41:2a:d7:
b2:1c:1f:39:d6:98:36:f5:4b:f9:7d:b4:39:87:51:
60:a2:8e:59:55:f7:af:84:ac:67:c1:c0:88:ea:1f:
75:37:e0:07:6e:9b:45:14:9a:2e:f7:aa:33:58:fc:
2f:60:d5:44:18:6a:b7:44:87:cf:b6:11:28:de:15:
f0:d4:88:ac:ae:18:de:05:2a:19:c6:5e:23:22:5e:
2d:d0:b7:94:34:bb:94:3c:64:cb:6d:3c:fc:ba:2c:
2c:30:63:64:a1:cc:c2:f1:22:32:d7:d2:ae:87:15:
71:71:07:f0:9f:03:39:c3:00:d3:ca:75:26:2c:7d:
59:c4:2b:a9:4a:87:6c:79:d9:ca:6e:e0:af:ea:47:
3d:72:54:5f:a5:65:ac:94:ce:06:a7:40:ca:73:cf:
65:92:a3:62:5b:6b:dd:0b:70:ff:36:2f:18:7a:d3:
2b:9e:f5:92:23:b0:17:50:ec:ea:ed:06:e2:95:0e:
99:4e:97:95:23:90:e8:d1:00:0a:cc:a0:c2:32:a5:
21:f3:83:a9:48:0a:2b:03:2f:69:39:8e:85:38:f1:
9b:b9:83:03:a3:94:fb:58:e1:79:41:66:af:b5:02:
8e:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:8A:F5:E0:53:E2:6C:44:EC:1E:6E:38:FD:D1:3D:7C:54:55:08:50
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/z4r14FPibETsHm44_dE9fFRVCFA.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
85:86:77:94:fd:50:e5:f4:24:ff:e2:56:04:9b:45:b2:e2:0a:
29:d3:a3:90:b7:4f:0b:16:ec:e1:3d:d5:d5:a7:57:3c:60:4a:
ab:ff:96:f3:c8:24:fd:11:d0:88:0c:72:7f:95:5a:be:3b:51:
c7:14:98:2d:a7:54:1f:ac:78:5c:1f:03:24:c7:51:21:e6:bc:
4c:be:4d:cd:96:a0:01:39:01:29:6f:3c:59:c1:35:03:bc:fd:
77:3b:e8:cc:6d:f0:97:f1:0b:bc:81:bd:c8:df:28:b7:41:2c:
e0:da:26:bd:0c:b0:04:5a:60:37:33:05:0c:7e:51:7e:02:17:
da:1e:62:a4:7f:ee:c2:c1:aa:69:15:e3:a8:64:70:f1:56:3c:
53:86:b5:82:17:b5:22:8f:fc:d1:68:56:2e:07:60:b5:40:e6:
26:e1:4f:21:9d:82:0f:b7:8a:b5:50:eb:dc:89:fb:7a:da:48:
e4:2b:b0:12:35:be:e4:ee:1b:15:4a:28:bd:37:0f:c3:4a:e3:
17:4f:3e:07:0d:d1:d3:5e:4c:90:00:47:a1:40:8b:f4:9b:8c:
18:1b:f5:30:5a:e0:b9:bd:b8:27:4d:59:6d:22:3b:cb:2e:d6:
e1:7d:87:07:c8:ea:5e:ef:53:77:8b:d6:1e:22:78:15:23:a9:
83:87:bc:69
-----BEGIN CERTIFICATE-----
MIIEojCCA4qgAwIBAgICB9UwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzFk
MTRlYmIyNTVkYzA1OGQ0YmZhNWE1MWM5M2Y3M2Y4MzBhYjg4ZjAeFw0yNDA5MTgy
MzU1MDNaFw0yNTA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKENGOEFGNUUwNTNFMjZD
NDRFQzFFNkUzOEZERDEzRDdDNTQ1NTA4NTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDTjsmCpaW73mp/oyl9nv0LsOmvmrOAHULld0Eq17IcHznWmDb1
S/l9tDmHUWCijllV96+ErGfBwIjqH3U34Adum0UUmi73qjNY/C9g1UQYardEh8+2
ESjeFfDUiKyuGN4FKhnGXiMiXi3Qt5Q0u5Q8ZMttPPy6LCwwY2ShzMLxIjLX0q6H
FXFxB/CfAznDANPKdSYsfVnEK6lKh2x52cpu4K/qRz1yVF+lZayUzganQMpzz2WS
o2Jba90LcP82Lxh60yue9ZIjsBdQ7OrtBuKVDplOl5UjkOjRAArMoMIypSHzg6lI
CisDL2k5joU48Zu5gwOjlPtY4XlBZq+1Ao53AgMBAAGjggG+MIIBujAdBgNVHQ4E
FgQUz4r14FPibETsHm44/dE9fFRVCFAwHwYDVR0jBBgwFoAUcdFOuyVdwFjUv6Wl
HJP3P4MKuI8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL2NobG9lLnNvYm9ybm9zdC5uZXQvcnBraS9SSVBFLW5scnNz
Zi9jZEZPdXlWZHdGalV2NldsSEpQM1A0TUt1STguY3JsMGQGCCsGAQUFBwEBBFgw
VjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9jZEZPdXlWZHdGalV2NldsSEpQM1A0TUt1STguY2VyMA4GA1UdDwEB
/wQEAwIHgDBoBggrBgEFBQcBCwRcMFowWAYIKwYBBQUHMAuGTHJzeW5jOi8vY2hs
b2Uuc29ib3Jub3N0Lm5ldC9ycGtpL1JJUEUtbmxyc3NmL3o0cjE0RlBpYkVUc0ht
NDRfZEU5ZkZSVkNGQS5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADC
aIEwDQYJKoZIhvcNAQELBQADggEBAIWGd5T9UOX0JP/iVgSbRbLiCinTo5C3TwsW
7OE91dWnVzxgSqv/lvPIJP0R0IgMcn+VWr47UccUmC2nVB+seFwfAyTHUSHmvEy+
Tc2WoAE5ASlvPFnBNQO8/Xc76Mxt8JfxC7yBvcjfKLdBLODaJr0MsARaYDczBQx+
UX4CF9oeYqR/7sLBqmkV46hkcPFWPFOGtYIXtSKP/NFoVi4HYLVA5ibhTyGdgg+3
irVQ69yJ+3raSOQrsBI1vuTuGxVKKL03D8NK4xdPPgcN0dNeTJAAR6FAi/SbjBgb
9TBa4Lm9uCdNWW0iO8su1uF9hwfI6l7vU3eL1h4ieBUjqYOHvGk=
-----END CERTIFICATE-----
Generated at Thu Sep 19 07:47:39 2024 by rpki-client on console-fra.rpki-client.org