Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/EJBdnTxMEc6_zPwxQVvCQEPkKbI.roa
File: EJBdnTxMEc6_zPwxQVvCQEPkKbI.roa (raw, json)
Hash identifier: /FrLsRPvhs3UgGIhiL7Sl2WntTsA8Yxio32NaUaXxj0=
Subject key identifier: 10:90:5D:9D:3C:4C:11:CE:BF:CC:FC:31:41:5B:C2:40:43:E4:29:B2
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 94
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/EJBdnTxMEc6_zPwxQVvCQEPkKbI.roa
Signing time: Sun 25 Feb 2024 15:55:03 +0000
ROA not before: Sun 25 Feb 2024 15:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 25 Feb 2024 19:55:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 148 (0x94)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Feb 25 15:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=10905D9D3C4C11CEBFCCFC31415BC24043E429B2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:80:fc:d0:02:88:cc:00:29:89:bb:bc:7e:82:
20:3a:74:86:40:20:cd:16:82:a0:fb:a5:66:5f:48:
e0:c8:b0:09:b1:20:e8:b7:4c:23:58:df:b8:fb:41:
f6:c4:79:a8:8c:17:52:bd:7c:44:ca:1b:d0:63:84:
7a:f9:5d:19:92:0b:1b:d5:85:c6:0f:2a:1c:d4:f8:
ed:37:51:ea:c2:4f:cc:18:ef:ca:e4:0c:4b:38:7f:
b0:69:6a:0e:9d:f4:ba:a4:ee:2a:8c:7b:5f:5a:8b:
f4:5e:0e:28:4c:89:33:8c:b9:31:ff:e0:28:47:3b:
8b:ee:e2:d6:a8:83:7e:75:1f:29:48:10:27:94:ac:
cc:47:4a:bd:64:62:0c:00:c6:ab:ab:f4:bc:64:fb:
ae:d9:e9:37:56:cc:c1:2b:c4:44:36:ef:b5:d0:35:
e4:ce:18:1b:f1:73:40:0b:7f:55:97:cf:5a:0d:83:
db:ad:0e:5e:2e:74:75:4c:ab:37:99:d9:d7:c2:a6:
8f:97:3d:80:6e:c5:8b:0d:ae:99:3f:44:c9:a1:5f:
a8:56:ac:ad:d4:59:90:47:6e:78:b4:8b:35:13:8a:
9b:be:1d:ff:e9:83:cf:3f:e1:70:47:5c:af:22:9e:
b2:88:d7:31:d2:7c:78:c9:ed:1d:99:98:fd:bd:31:
70:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:90:5D:9D:3C:4C:11:CE:BF:CC:FC:31:41:5B:C2:40:43:E4:29:B2
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/EJBdnTxMEc6_zPwxQVvCQEPkKbI.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
39:dd:88:e9:d5:16:3c:39:9d:f6:f0:45:a1:13:53:39:31:28:
25:77:67:27:75:ae:fa:c4:d8:79:dc:51:45:2e:65:17:76:fe:
59:1b:70:9c:32:b5:01:5d:ba:17:be:80:5e:9d:bb:92:6d:ad:
18:c0:10:c8:60:88:d3:62:1b:7d:dc:17:f2:80:37:2d:4a:be:
71:80:2c:c0:a4:be:d1:b7:67:b0:30:fb:7e:d7:45:68:6e:0a:
4b:ab:f0:5d:4f:fc:ec:2e:0c:fa:6e:7e:6c:1c:7f:b6:5c:d9:
95:cb:5b:7c:8c:84:1f:90:da:a2:86:b2:86:08:fa:f7:c2:ec:
34:50:d6:b1:4d:3f:92:66:6c:4e:ba:85:f9:e6:70:95:8f:78:
ab:39:35:25:59:77:c0:36:c6:63:97:1b:44:cc:e0:9d:e5:4e:
6a:a2:60:55:ff:f2:44:4a:4a:70:e1:b7:83:90:bb:10:9c:71:
8e:19:5a:60:52:53:b6:2e:a1:75:b0:71:bd:1f:3d:c1:ef:e5:
fd:de:44:aa:98:e6:91:33:66:42:d5:03:87:f3:94:f8:2c:fe:
53:64:5e:ef:27:0c:5f:f7:ec:6f:e3:45:ae:e3:02:60:a7:ce:
06:eb:d7:7d:63:c6:ce:7a:67:15:22:44:e5:4c:76:fa:38:32:
cc:c0:95:ba
-----BEGIN CERTIFICATE-----
MIIEojCCA4qgAwIBAgICAJQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzFk
MTRlYmIyNTVkYzA1OGQ0YmZhNWE1MWM5M2Y3M2Y4MzBhYjg4ZjAeFw0yNDAyMjUx
NTU1MDNaFw0yNTA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKDEwOTA1RDlEM0M0QzEx
Q0VCRkNDRkMzMTQxNUJDMjQwNDNFNDI5QjIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDEgPzQAojMACmJu7x+giA6dIZAIM0WgqD7pWZfSODIsAmxIOi3
TCNY37j7QfbEeaiMF1K9fETKG9BjhHr5XRmSCxvVhcYPKhzU+O03UerCT8wY78rk
DEs4f7Bpag6d9Lqk7iqMe19ai/ReDihMiTOMuTH/4ChHO4vu4taog351HylIECeU
rMxHSr1kYgwAxqur9Lxk+67Z6TdWzMErxEQ277XQNeTOGBvxc0ALf1WXz1oNg9ut
Dl4udHVMqzeZ2dfCpo+XPYBuxYsNrpk/RMmhX6hWrK3UWZBHbni0izUTipu+Hf/p
g88/4XBHXK8inrKI1zHSfHjJ7R2ZmP29MXDPAgMBAAGjggG+MIIBujAdBgNVHQ4E
FgQUEJBdnTxMEc6/zPwxQVvCQEPkKbIwHwYDVR0jBBgwFoAUcdFOuyVdwFjUv6Wl
HJP3P4MKuI8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL2NobG9lLnNvYm9ybm9zdC5uZXQvcnBraS9SSVBFLW5scnNz
Zi9jZEZPdXlWZHdGalV2NldsSEpQM1A0TUt1STguY3JsMGQGCCsGAQUFBwEBBFgw
VjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9jZEZPdXlWZHdGalV2NldsSEpQM1A0TUt1STguY2VyMA4GA1UdDwEB
/wQEAwIHgDBoBggrBgEFBQcBCwRcMFowWAYIKwYBBQUHMAuGTHJzeW5jOi8vY2hs
b2Uuc29ib3Jub3N0Lm5ldC9ycGtpL1JJUEUtbmxyc3NmL0VKQmRuVHhNRWM2X3pQ
d3hRVnZDUUVQa0tiSS5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADC
aIEwDQYJKoZIhvcNAQELBQADggEBADndiOnVFjw5nfbwRaETUzkxKCV3Zyd1rvrE
2HncUUUuZRd2/lkbcJwytQFduhe+gF6du5JtrRjAEMhgiNNiG33cF/KANy1KvnGA
LMCkvtG3Z7Aw+37XRWhuCkur8F1P/OwuDPpufmwcf7Zc2ZXLW3yMhB+Q2qKGsoYI
+vfC7DRQ1rFNP5JmbE66hfnmcJWPeKs5NSVZd8A2xmOXG0TM4J3lTmqiYFX/8kRK
SnDht4OQuxCccY4ZWmBSU7YuoXWwcb0fPcHv5f3eRKqY5pEzZkLVA4fzlPgs/lNk
Xu8nDF/37G/jRa7jAmCnzgbr131jxs56ZxUiROVMdvo4MszAlbo=
-----END CERTIFICATE-----
Generated at Sun Feb 25 23:46:05 2024 by rpki-client on console-ams.rpki-client.org