Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/EzvV_Pu2f9gfhKc_1q5RZCsyfMg.roa
File: EzvV_Pu2f9gfhKc_1q5RZCsyfMg.roa (raw, json)
Hash identifier: am6mWbJLtYLhW2ova0to9UEThENRtoQNZYWHOin6y58=
Subject key identifier: 13:3B:D5:FC:FB:B6:7F:D8:1F:84:A7:3F:D6:AE:51:64:2B:32:7C:C8
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0574
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/EzvV_Pu2f9gfhKc_1q5RZCsyfMg.roa
Signing time: Sat 13 Jul 2024 07:55:03 +0000
ROA not before: Sat 13 Jul 2024 07:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 13 Jul 2024 11:55:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1396 (0x574)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Jul 13 07:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=133BD5FCFBB67FD81F84A73FD6AE51642B327CC8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:bb:f3:ab:37:e9:8f:2b:d5:13:f5:b0:db:84:
b0:78:fa:17:cd:64:25:0e:99:7e:8d:2f:63:67:a4:
8f:92:b2:55:a8:5d:6d:ad:f8:9a:ee:e0:2b:dd:96:
98:fc:1f:fb:dd:29:02:3b:8e:10:d6:34:48:06:03:
0e:5f:41:91:ca:40:ea:61:c5:76:2e:36:11:10:79:
f1:74:08:9e:99:16:01:78:f5:f6:c7:99:ce:d3:be:
7b:90:f8:70:20:27:9b:1e:b1:b1:07:75:05:e0:7d:
b5:34:63:c6:7d:01:41:3b:ef:3e:5a:19:64:21:5d:
62:15:c2:a1:87:d5:ae:9c:9a:0f:d3:9a:4a:5f:65:
f6:26:53:77:b6:3b:5a:75:b8:f5:e6:59:ec:d1:1f:
44:fc:54:1f:4d:ba:60:da:89:c2:25:fa:e3:1c:34:
d9:ba:f0:93:dd:f5:e5:45:3b:b6:a6:0f:32:75:a1:
5a:dc:9b:48:f9:74:6e:a7:a8:ce:94:46:4a:f7:fe:
17:68:af:d4:5a:43:7b:52:3a:96:1a:45:c1:0a:29:
e6:29:b7:e8:5b:d5:97:f0:8d:3b:58:65:cf:64:3c:
45:69:29:99:48:f7:12:62:c6:e7:cb:ea:a3:b6:4c:
a6:5a:35:3e:11:be:cc:1f:46:9f:f5:3f:02:e5:76:
69:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:3B:D5:FC:FB:B6:7F:D8:1F:84:A7:3F:D6:AE:51:64:2B:32:7C:C8
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/EzvV_Pu2f9gfhKc_1q5RZCsyfMg.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:d1:f4:84:ca:2e:4a:2c:11:71:35:4b:18:22:3f:bf:f9:24:
e1:e3:2a:6e:0a:e4:48:7d:eb:62:5f:98:60:aa:50:41:2f:42:
12:20:90:22:be:a1:cf:da:f5:ca:66:2f:3e:60:b5:76:84:10:
7b:fd:76:db:b6:03:d1:f7:1d:6e:3e:8b:8e:dd:42:91:80:6c:
5e:fa:95:dc:87:6c:1d:44:40:5e:d8:a4:71:5d:c5:e0:27:d0:
5c:67:31:9b:30:b7:b7:4d:9f:8c:f7:1f:04:41:4e:5e:0e:d5:
5a:11:ab:86:ca:fb:48:a3:39:26:d1:dc:2b:24:5f:32:d0:cf:
4f:49:29:6d:bb:de:74:71:58:1f:1a:c6:a9:25:a8:8e:4d:97:
6d:29:c3:ba:84:8c:0c:50:29:1b:ee:4b:eb:59:e7:b3:e7:06:
7f:2f:98:19:2a:36:a4:4e:80:d1:4f:7a:05:13:07:2c:af:4f:
b0:f8:94:b0:54:7f:08:bc:35:cf:7f:90:fe:f7:84:c5:c6:2b:
64:c8:ea:16:94:9e:7b:e6:b3:37:05:b0:fc:cd:69:93:95:78:
19:14:8d:fc:88:4d:7b:8a:42:71:81:1f:22:b3:c0:2f:44:1f:
76:d5:62:44:c2:37:ea:40:ba:29:a5:4c:ae:9c:9b:43:45:7c:
22:f2:4a:4f
-----BEGIN CERTIFICATE-----
MIIEojCCA4qgAwIBAgICBXQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzFk
MTRlYmIyNTVkYzA1OGQ0YmZhNWE1MWM5M2Y3M2Y4MzBhYjg4ZjAeFw0yNDA3MTMw
NzU1MDNaFw0yNTA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKDEzM0JENUZDRkJCNjdG
RDgxRjg0QTczRkQ2QUU1MTY0MkIzMjdDQzgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQD5u/OrN+mPK9UT9bDbhLB4+hfNZCUOmX6NL2NnpI+SslWoXW2t
+Jru4Cvdlpj8H/vdKQI7jhDWNEgGAw5fQZHKQOphxXYuNhEQefF0CJ6ZFgF49fbH
mc7TvnuQ+HAgJ5sesbEHdQXgfbU0Y8Z9AUE77z5aGWQhXWIVwqGH1a6cmg/Tmkpf
ZfYmU3e2O1p1uPXmWezRH0T8VB9NumDaicIl+uMcNNm68JPd9eVFO7amDzJ1oVrc
m0j5dG6nqM6URkr3/hdor9RaQ3tSOpYaRcEKKeYpt+hb1ZfwjTtYZc9kPEVpKZlI
9xJixufL6qO2TKZaNT4RvswfRp/1PwLldmn/AgMBAAGjggG+MIIBujAdBgNVHQ4E
FgQUEzvV/Pu2f9gfhKc/1q5RZCsyfMgwHwYDVR0jBBgwFoAUcdFOuyVdwFjUv6Wl
HJP3P4MKuI8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL2NobG9lLnNvYm9ybm9zdC5uZXQvcnBraS9SSVBFLW5scnNz
Zi9jZEZPdXlWZHdGalV2NldsSEpQM1A0TUt1STguY3JsMGQGCCsGAQUFBwEBBFgw
VjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9jZEZPdXlWZHdGalV2NldsSEpQM1A0TUt1STguY2VyMA4GA1UdDwEB
/wQEAwIHgDBoBggrBgEFBQcBCwRcMFowWAYIKwYBBQUHMAuGTHJzeW5jOi8vY2hs
b2Uuc29ib3Jub3N0Lm5ldC9ycGtpL1JJUEUtbmxyc3NmL0V6dlZfUHUyZjlnZmhL
Y18xcTVSWkNzeWZNZy5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADC
aIEwDQYJKoZIhvcNAQELBQADggEBAGzR9ITKLkosEXE1SxgiP7/5JOHjKm4K5Eh9
62JfmGCqUEEvQhIgkCK+oc/a9cpmLz5gtXaEEHv9dtu2A9H3HW4+i47dQpGAbF76
ldyHbB1EQF7YpHFdxeAn0FxnMZswt7dNn4z3HwRBTl4O1VoRq4bK+0ijOSbR3Csk
XzLQz09JKW273nRxWB8axqklqI5Nl20pw7qEjAxQKRvuS+tZ57PnBn8vmBkqNqRO
gNFPegUTByyvT7D4lLBUfwi8Nc9/kP73hMXGK2TI6haUnnvmszcFsPzNaZOVeBkU
jfyITXuKQnGBHyKzwC9EH3bVYkTCN+pAuimlTK6cm0NFfCLySk8=
-----END CERTIFICATE-----
Generated at Sat Jul 13 13:55:39 2024 by rpki-client on console-ams.rpki-client.org