Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/ZJRHnPEoWMvZzuYljOWWLGVy7Qo.roa
File: ZJRHnPEoWMvZzuYljOWWLGVy7Qo.roa (raw, json)
Hash identifier: yLeM1/NmqPJ6dM0QNh1YMf0W+G5d6AZcvkAKpQpQFs8=
Subject key identifier: 64:94:47:9C:F1:28:58:CB:D9:CE:E6:25:8C:E5:96:2C:65:72:ED:0A
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 07ED
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/ZJRHnPEoWMvZzuYljOWWLGVy7Qo.roa
Signing time: Sat 21 Sep 2024 15:55:03 +0000
ROA not before: Sat 21 Sep 2024 15:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 21 Sep 2024 19:55:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2029 (0x7ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Sep 21 15:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6494479CF12858CBD9CEE6258CE5962C6572ED0A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:4b:53:23:d6:c5:d5:6d:30:3f:94:5f:eb:8e:
c1:4f:72:8d:10:4a:f0:d5:44:16:95:b0:c1:29:15:
04:28:b6:b2:21:ab:73:3f:02:0e:36:0e:a0:91:3b:
d7:f8:9d:af:3f:39:5c:5d:29:9d:6f:d5:ee:fb:a0:
17:34:f4:2d:15:5a:47:14:c0:0c:59:ff:7a:6a:87:
b2:dd:44:9c:35:ff:9b:a5:e6:d5:54:11:63:5c:ab:
ba:2f:79:d2:18:d6:93:7d:73:e8:c2:18:9b:fb:4e:
06:1a:62:49:79:c7:cd:ed:c3:57:99:bf:ca:99:b1:
1e:11:ee:48:37:6a:8d:ae:0f:99:ff:aa:ac:84:5e:
c4:35:1f:89:af:2b:4c:ed:bd:0b:4a:42:16:43:6e:
53:f2:2a:2b:41:3e:65:90:01:2f:33:87:75:66:bd:
2e:dd:8d:de:cd:d2:29:0f:40:73:9c:5d:34:3a:a6:
cb:02:07:a1:0e:6a:2e:83:73:61:07:3f:dc:3c:84:
64:e9:54:76:af:3a:05:55:49:09:ad:b8:a9:de:bd:
09:37:3b:b3:a8:63:e9:c6:4c:7c:25:9b:8a:25:cd:
25:16:d9:55:72:5b:ba:87:d8:c6:f3:d3:1c:11:51:
2d:bb:c7:db:3d:a2:8b:6b:71:ca:e4:65:54:bd:dc:
e8:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:94:47:9C:F1:28:58:CB:D9:CE:E6:25:8C:E5:96:2C:65:72:ED:0A
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/ZJRHnPEoWMvZzuYljOWWLGVy7Qo.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:da:d6:03:cd:06:e6:0e:36:fd:57:69:4f:dd:89:6c:1b:4e:
9d:af:95:e9:65:26:44:8b:f0:c0:6a:13:e0:57:92:f8:87:c8:
54:b6:4f:71:26:3c:9b:df:f2:a8:df:18:51:e6:f4:ec:bb:28:
65:38:e1:f6:2e:47:85:d7:6d:9d:f4:44:5b:57:c5:ac:bb:6b:
b6:0a:a7:ad:9c:de:74:47:1b:9c:23:eb:64:e0:b4:3e:47:6d:
39:3c:bc:ed:93:dd:70:62:57:6d:ff:4b:c6:18:1b:44:8d:5d:
c6:04:94:26:6e:32:e3:38:10:3b:93:f6:c5:e5:57:d6:39:a8:
ca:d8:fe:20:7d:70:19:32:32:be:b0:1b:36:9a:d7:69:91:d0:
a9:81:d4:d9:fe:d8:04:f5:77:e6:c9:cf:06:28:11:29:dc:26:
a9:8b:9d:b9:8c:53:71:a6:72:d9:b0:4b:d1:83:ae:63:e7:35:
cc:7c:24:aa:99:71:68:da:16:a1:e9:56:44:ff:a0:db:dd:a2:
56:04:6c:ba:ce:0e:28:ef:4f:94:03:ef:ec:8c:fd:33:80:f1:
d0:a2:fd:c5:b3:ee:2f:b5:5a:1e:c3:d6:37:8c:80:2e:37:ca:
1c:49:d4:f8:d9:4e:c5:40:02:1e:24:bb:c0:93:0c:c7:52:ac:
a1:49:da:14
-----BEGIN CERTIFICATE-----
MIIEojCCA4qgAwIBAgICB+0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzFk
MTRlYmIyNTVkYzA1OGQ0YmZhNWE1MWM5M2Y3M2Y4MzBhYjg4ZjAeFw0yNDA5MjEx
NTU1MDNaFw0yNTA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKDY0OTQ0NzlDRjEyODU4
Q0JEOUNFRTYyNThDRTU5NjJDNjU3MkVEMEEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDXS1Mj1sXVbTA/lF/rjsFPco0QSvDVRBaVsMEpFQQotrIhq3M/
Ag42DqCRO9f4na8/OVxdKZ1v1e77oBc09C0VWkcUwAxZ/3pqh7LdRJw1/5ul5tVU
EWNcq7ovedIY1pN9c+jCGJv7TgYaYkl5x83tw1eZv8qZsR4R7kg3ao2uD5n/qqyE
XsQ1H4mvK0ztvQtKQhZDblPyKitBPmWQAS8zh3VmvS7djd7N0ikPQHOcXTQ6pssC
B6EOai6Dc2EHP9w8hGTpVHavOgVVSQmtuKnevQk3O7OoY+nGTHwlm4olzSUW2VVy
W7qH2Mbz0xwRUS27x9s9ootrccrkZVS93OgPAgMBAAGjggG+MIIBujAdBgNVHQ4E
FgQUZJRHnPEoWMvZzuYljOWWLGVy7QowHwYDVR0jBBgwFoAUcdFOuyVdwFjUv6Wl
HJP3P4MKuI8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL2NobG9lLnNvYm9ybm9zdC5uZXQvcnBraS9SSVBFLW5scnNz
Zi9jZEZPdXlWZHdGalV2NldsSEpQM1A0TUt1STguY3JsMGQGCCsGAQUFBwEBBFgw
VjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9jZEZPdXlWZHdGalV2NldsSEpQM1A0TUt1STguY2VyMA4GA1UdDwEB
/wQEAwIHgDBoBggrBgEFBQcBCwRcMFowWAYIKwYBBQUHMAuGTHJzeW5jOi8vY2hs
b2Uuc29ib3Jub3N0Lm5ldC9ycGtpL1JJUEUtbmxyc3NmL1pKUkhuUEVvV012Wnp1
WWxqT1dXTEdWeTdRby5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADC
aIEwDQYJKoZIhvcNAQELBQADggEBAG7a1gPNBuYONv1XaU/diWwbTp2vlellJkSL
8MBqE+BXkviHyFS2T3EmPJvf8qjfGFHm9Oy7KGU44fYuR4XXbZ30RFtXxay7a7YK
p62c3nRHG5wj62TgtD5HbTk8vO2T3XBiV23/S8YYG0SNXcYElCZuMuM4EDuT9sXl
V9Y5qMrY/iB9cBkyMr6wGzaa12mR0KmB1Nn+2AT1d+bJzwYoESncJqmLnbmMU3Gm
ctmwS9GDrmPnNcx8JKqZcWjaFqHpVkT/oNvdolYEbLrODijvT5QD7+yM/TOA8dCi
/cWz7i+1Wh7D1jeMgC43yhxJ1PjZTsVAAh4ku8CTDMdSrKFJ2hQ=
-----END CERTIFICATE-----
Generated at Sat Sep 21 21:41:25 2024 by rpki-client on console-fra.rpki-client.org