Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nljobsnijders/EtmKReZ0oDv5I4tzp5OEsZoH34k.roa
File: EtmKReZ0oDv5I4tzp5OEsZoH34k.roa (raw, json)
Hash identifier: 3jcZGgoju9IKRWtPRrT1sLO1Unuo+MRRDqbEJnEiM34=
Subject key identifier: 12:D9:8A:45:E6:74:A0:3B:F9:23:8B:73:A7:93:84:B1:9A:07:DF:89
Certificate issuer: /CN=caa805dbac364749b9b115590ab6ef0f970cdbd8
Certificate serial: 010C63
Authority key identifier: CA:A8:05:DB:AC:36:47:49:B9:B1:15:59:0A:B6:EF:0F:97:0C:DB:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yqgF26w2R0m5sRVZCrbvD5cM29g.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nljobsnijders/EtmKReZ0oDv5I4tzp5OEsZoH34k.roa
Signing time: Mon 05 Jun 2023 21:28:57 +0000
ROA not before: Mon 05 Jun 2023 21:28:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 293
IP address blocks: 2001:67c:208c::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 07 Jun 2023 11:59:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68707 (0x10c63)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=caa805dbac364749b9b115590ab6ef0f970cdbd8
Validity
Not Before: Jun 5 21:28:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=12D98A45E674A03BF9238B73A79384B19A07DF89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:dc:cd:c7:e2:e9:09:99:69:e3:50:8e:dc:d3:
3a:61:0d:21:0f:d6:73:38:5a:af:3f:55:de:00:2f:
10:1f:2c:ca:30:71:3f:2f:40:98:f4:0c:bb:7d:6a:
35:56:6a:8f:7f:f3:ec:24:f3:3d:0b:47:d0:26:70:
91:72:12:8b:11:68:b5:c7:d5:19:62:16:ee:da:16:
99:4d:24:2c:ff:ed:e4:65:f3:07:70:ba:f3:35:0b:
27:5d:11:fa:68:3e:a6:03:5a:e5:ce:e6:96:d1:98:
4e:2c:26:de:23:01:b7:05:0b:04:dc:5d:f0:5c:7d:
2d:0e:5b:5f:5a:95:72:11:a2:12:b3:21:5d:82:8a:
39:a5:49:c4:27:b4:1b:96:b2:05:fc:1c:bf:f9:58:
89:b1:6d:48:ef:b5:84:b8:48:a4:f9:46:3b:f5:98:
03:50:a9:87:da:f1:94:3a:e1:3c:68:c9:e7:15:a2:
26:f0:0a:23:1a:94:1b:09:92:42:27:3a:70:69:e0:
e9:ef:b3:1f:cd:a3:5f:78:ee:f0:0f:55:24:00:b7:
e9:5c:28:3e:0e:03:29:11:d2:b1:c6:02:3e:24:68:
da:f6:1b:57:a4:76:5b:fc:f4:6a:2c:b1:09:85:fb:
28:2b:c0:b9:90:f5:c4:5d:08:4b:45:b8:00:76:6d:
c8:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:D9:8A:45:E6:74:A0:3B:F9:23:8B:73:A7:93:84:B1:9A:07:DF:89
X509v3 Authority Key Identifier:
keyid:CA:A8:05:DB:AC:36:47:49:B9:B1:15:59:0A:B6:EF:0F:97:0C:DB:D8
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nljobsnijders/yqgF26w2R0m5sRVZCrbvD5cM29g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yqgF26w2R0m5sRVZCrbvD5cM29g.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nljobsnijders/EtmKReZ0oDv5I4tzp5OEsZoH34k.roa
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:208c::/48
Signature Algorithm: sha256WithRSAEncryption
8a:26:76:ca:b9:b9:2b:c3:17:33:b7:a0:f2:5f:f5:e5:f8:c8:
66:15:07:00:e3:5d:ab:de:7c:0e:f1:85:bb:10:4a:a1:d2:2f:
42:21:89:34:a0:5b:12:3b:9f:6d:3c:0b:b5:fb:3d:65:06:ec:
b2:04:d7:04:f9:3b:ea:53:60:1d:0f:49:fd:57:89:49:40:7b:
de:8a:6e:f8:eb:47:74:91:78:ab:f6:a8:19:74:75:e2:c0:58:
15:0f:a2:61:1d:2d:91:c1:1b:6c:d4:06:64:a1:b4:2d:45:ab:
ae:c2:03:6e:da:09:ff:30:28:82:fa:65:23:8e:3a:e6:e6:72:
ac:f4:e1:83:74:35:ac:5b:76:de:93:c9:31:e7:29:bf:a5:3a:
80:49:f8:a5:b8:4f:73:40:53:c4:55:c7:88:97:ca:44:13:ec:
3e:54:d4:7b:dc:09:2c:62:ef:cb:72:90:2d:ff:6d:a3:c0:da:
89:1f:04:ef:68:38:52:e8:85:0f:ff:79:c8:b9:a0:43:21:bc:
09:5b:a9:e5:e9:eb:50:a1:94:00:d3:68:75:36:29:a7:99:9c:
30:61:32:9c:93:eb:e8:f1:f9:48:82:8b:b0:5a:c1:02:92:ff:
e3:9e:ba:b3:d4:bd:a3:ab:05:16:88:71:65:39:b2:f1:a0:3b:
e9:7f:f2:74
-----BEGIN CERTIFICATE-----
MIIEtDCCA5ygAwIBAgIDAQxjMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGNh
YTgwNWRiYWMzNjQ3NDliOWIxMTU1OTBhYjZlZjBmOTcwY2RiZDgwHhcNMjMwNjA1
MjEyODU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEygxMkQ5OEE0NUU2NzRB
MDNCRjkyMzhCNzNBNzkzODRCMTlBMDdERjg5MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA49zNx+LpCZlp41CO3NM6YQ0hD9ZzOFqvP1XeAC8QHyzKMHE/
L0CY9Ay7fWo1VmqPf/PsJPM9C0fQJnCRchKLEWi1x9UZYhbu2haZTSQs/+3kZfMH
cLrzNQsnXRH6aD6mA1rlzuaW0ZhOLCbeIwG3BQsE3F3wXH0tDltfWpVyEaISsyFd
goo5pUnEJ7QblrIF/By/+ViJsW1I77WEuEik+UY79ZgDUKmH2vGUOuE8aMnnFaIm
8AojGpQbCZJCJzpwaeDp77MfzaNfeO7wD1UkALfpXCg+DgMpEdKxxgI+JGja9htX
pHZb/PRqLLEJhfsoK8C5kPXEXQhLRbgAdm3IwwIDAQABo4IBzzCCAcswHQYDVR0O
BBYEFBLZikXmdKA7+SOLc6eThLGaB9+JMB8GA1UdIwQYMBaAFMqoBdusNkdJubEV
WQq27w+XDNvYMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwZAYDVR0fBF0wWzBZ
oFegVYZTcnN5bmM6Ly9jaGxvZS5zb2Jvcm5vc3QubmV0L3Jwa2kvUklQRS1ubGpv
YnNuaWpkZXJzL3lxZ0YyNncyUjBtNXNSVlpDcmJ2RDVjTTI5Zy5jcmwwZAYIKwYB
BQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVw
b3NpdG9yeS9ERUZBVUxUL3lxZ0YyNncyUjBtNXNSVlpDcmJ2RDVjTTI5Zy5jZXIw
DgYDVR0PAQH/BAQDAgeAMG8GCCsGAQUFBwELBGMwYTBfBggrBgEFBQcwC4ZTcnN5
bmM6Ly9jaGxvZS5zb2Jvcm5vc3QubmV0L3Jwa2kvUklQRS1ubGpvYnNuaWpkZXJz
L0V0bUtSZVowb0R2NUk0dHpwNU9Fc1pvSDM0ay5yb2EwIgYIKwYBBQUHAQcBAf8E
EzARMA8EAgACMAkDBwAgAQZ8IIwwDQYJKoZIhvcNAQELBQADggEBAIomdsq5uSvD
FzO3oPJf9eX4yGYVBwDjXavefA7xhbsQSqHSL0IhiTSgWxI7n208C7X7PWUG7LIE
1wT5O+pTYB0PSf1XiUlAe96KbvjrR3SReKv2qBl0deLAWBUPomEdLZHBG2zUBmSh
tC1Fq67CA27aCf8wKIL6ZSOOOubmcqz04YN0Naxbdt6TyTHnKb+lOoBJ+KW4T3NA
U8RVx4iXykQT7D5U1HvcCSxi78tykC3/baPA2okfBO9oOFLohQ//eci5oEMhvAlb
qeXp61ChlADTaHU2KaeZnDBhMpyT6+jx+UiCi7BawQKS/+OeurPUvaOrBRaIcWU5
svGgO+l/8nQ=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:54 2024 by rpki-client on console-fra.rpki-client.org