Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/zIFFBew6CCO8PINXLb97cTaPVY4.roa
File: zIFFBew6CCO8PINXLb97cTaPVY4.roa (raw, json)
Hash identifier: 2YMo1IfaFyj4DiWjJqshxCxQRolKFDR6RM2+ehECTwg=
Subject key identifier: CC:81:45:05:EC:3A:08:23:BC:3C:83:57:2D:BF:7B:71:36:8F:55:8E
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0757
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/zIFFBew6CCO8PINXLb97cTaPVY4.roa
Signing time: Wed 04 Sep 2024 23:55:03 +0000
ROA not before: Wed 04 Sep 2024 23:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 05 Sep 2024 03:55:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1879 (0x757)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Sep 4 23:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=CC814505EC3A0823BC3C83572DBF7B71368F558E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:57:89:94:cd:92:89:41:f1:7a:af:2f:f5:e4:
5b:04:11:64:6b:11:32:02:d2:7a:bc:65:94:89:9a:
30:3e:a5:52:58:68:18:2f:e5:87:c5:75:01:b3:16:
62:01:44:94:04:4d:d5:4d:a4:ee:a5:67:87:3a:d5:
21:94:47:4f:b4:f4:65:51:fe:d6:b0:4e:34:ec:21:
25:46:23:a9:45:f9:29:4c:df:89:be:7b:fc:97:6f:
5f:1e:0b:38:f4:3e:05:61:bc:81:15:74:9a:bb:e8:
53:fd:8c:0e:54:86:65:4c:6d:19:54:36:66:42:23:
19:b6:ff:0c:25:45:22:3c:3a:7a:36:69:9f:06:73:
c9:e9:d7:36:e4:c7:e4:5e:0a:30:89:75:44:33:e5:
38:a7:a2:2c:66:9d:ab:63:32:11:6f:11:83:04:0b:
ee:2b:dd:41:4d:2c:36:cc:81:dd:50:ee:0f:ef:16:
f0:32:4e:1b:b5:9e:a0:42:25:6c:d7:91:be:ae:a3:
59:88:f2:c7:32:20:80:90:8e:cb:ff:e2:56:76:9a:
5e:c1:23:15:0a:31:c2:ab:8f:36:3a:ed:96:d6:a4:
c8:1a:77:0b:41:0a:9c:b4:0d:05:ff:13:ef:ba:f7:
30:40:6b:44:bd:88:c2:e9:f5:56:d9:4c:cc:b5:1b:
8b:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:81:45:05:EC:3A:08:23:BC:3C:83:57:2D:BF:7B:71:36:8F:55:8E
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/zIFFBew6CCO8PINXLb97cTaPVY4.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
54:46:c1:d5:77:18:ec:d4:b0:ec:ce:85:ae:fc:23:fe:01:dc:
c1:5b:b8:d1:fb:56:ff:7a:fe:7f:15:04:15:8b:0e:c1:d3:51:
ab:20:62:15:5a:e3:7e:0e:cc:24:f2:69:4c:a9:13:05:82:28:
5d:98:09:35:46:e8:d3:7f:48:76:9a:c2:73:6a:4d:da:99:19:
30:01:a0:a7:8b:0f:8e:b0:ef:22:57:ae:98:b6:66:4d:69:a6:
13:ae:61:52:f6:a5:48:05:e8:52:a1:09:02:73:ce:91:2d:d5:
92:fc:9f:83:38:14:ba:39:8f:1d:ba:34:93:8a:92:c4:98:6f:
08:b8:8f:c4:92:c7:a0:be:de:74:d7:8f:bf:9c:e6:52:d0:a8:
36:05:d9:a8:06:ea:ac:5a:87:7c:3c:57:a1:a7:65:a9:c6:0b:
10:77:e5:18:08:f6:9c:98:2f:fa:e9:08:74:71:18:ac:5f:48:
94:ec:3e:37:29:3a:90:fd:b7:19:e1:ff:e9:ae:be:cc:f8:4f:
5e:e4:9f:9a:ea:7c:03:2c:cf:00:8b:9c:a4:3f:57:a6:8c:41:
84:fd:b3:97:93:80:98:a6:15:17:89:2f:88:d4:61:0d:54:70:
ea:6f:f5:0c:21:04:05:ef:91:33:cf:2d:9f:21:05:e9:c0:b2:
bc:bb:df:de
-----BEGIN CERTIFICATE-----
MIIEojCCA4qgAwIBAgICB1cwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzFk
MTRlYmIyNTVkYzA1OGQ0YmZhNWE1MWM5M2Y3M2Y4MzBhYjg4ZjAeFw0yNDA5MDQy
MzU1MDNaFw0yNTA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKENDODE0NTA1RUMzQTA4
MjNCQzNDODM1NzJEQkY3QjcxMzY4RjU1OEUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDGV4mUzZKJQfF6ry/15FsEEWRrETIC0nq8ZZSJmjA+pVJYaBgv
5YfFdQGzFmIBRJQETdVNpO6lZ4c61SGUR0+09GVR/tawTjTsISVGI6lF+SlM34m+
e/yXb18eCzj0PgVhvIEVdJq76FP9jA5UhmVMbRlUNmZCIxm2/wwlRSI8Ono2aZ8G
c8np1zbkx+ReCjCJdUQz5TinoixmnatjMhFvEYMEC+4r3UFNLDbMgd1Q7g/vFvAy
Thu1nqBCJWzXkb6uo1mI8scyIICQjsv/4lZ2ml7BIxUKMcKrjzY67ZbWpMgadwtB
Cpy0DQX/E++69zBAa0S9iMLp9VbZTMy1G4vDAgMBAAGjggG+MIIBujAdBgNVHQ4E
FgQUzIFFBew6CCO8PINXLb97cTaPVY4wHwYDVR0jBBgwFoAUcdFOuyVdwFjUv6Wl
HJP3P4MKuI8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL2NobG9lLnNvYm9ybm9zdC5uZXQvcnBraS9SSVBFLW5scnNz
Zi9jZEZPdXlWZHdGalV2NldsSEpQM1A0TUt1STguY3JsMGQGCCsGAQUFBwEBBFgw
VjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9jZEZPdXlWZHdGalV2NldsSEpQM1A0TUt1STguY2VyMA4GA1UdDwEB
/wQEAwIHgDBoBggrBgEFBQcBCwRcMFowWAYIKwYBBQUHMAuGTHJzeW5jOi8vY2hs
b2Uuc29ib3Jub3N0Lm5ldC9ycGtpL1JJUEUtbmxyc3NmL3pJRkZCZXc2Q0NPOFBJ
TlhMYjk3Y1RhUFZZNC5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADC
aIEwDQYJKoZIhvcNAQELBQADggEBAFRGwdV3GOzUsOzOha78I/4B3MFbuNH7Vv96
/n8VBBWLDsHTUasgYhVa434OzCTyaUypEwWCKF2YCTVG6NN/SHaawnNqTdqZGTAB
oKeLD46w7yJXrpi2Zk1pphOuYVL2pUgF6FKhCQJzzpEt1ZL8n4M4FLo5jx26NJOK
ksSYbwi4j8SSx6C+3nTXj7+c5lLQqDYF2agG6qxah3w8V6GnZanGCxB35RgI9pyY
L/rpCHRxGKxfSJTsPjcpOpD9txnh/+muvsz4T17kn5rqfAMszwCLnKQ/V6aMQYT9
s5eTgJimFReJL4jUYQ1UcOpv9QwhBAXvkTPPLZ8hBenAsry7394=
-----END CERTIFICATE-----
Generated at Thu Sep 5 05:26:49 2024 by rpki-client on console-fra.rpki-client.org