Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/glm_2RoEKfwdgKvYU92ctQ7IP5o.roa
File: glm_2RoEKfwdgKvYU92ctQ7IP5o.roa (raw, json)
Hash identifier: ae6HuqRFmIGJiYdFbnSJ8qiFTseapuCUX9Vxs6nmWCE=
Subject key identifier: 82:59:BF:D9:1A:04:29:FC:1D:80:AB:D8:53:DD:9C:B5:0E:C8:3F:9A
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 018FDDBD657D36896542C1486E98B96DCE33
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/glm_2RoEKfwdgKvYU92ctQ7IP5o.roa
Signing time: Mon 03 Jun 2024 10:55:27 +0000
ROA not before: Mon 03 Jun 2024 10:55:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199912
IP address blocks: 163.5.51.0/24 maxlen: 24
163.5.154.0/24 maxlen: 24
163.5.211.0/24 maxlen: 24
163.5.215.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 03 Jul 2024 13:19:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:dd:bd:65:7d:36:89:65:42:c1:48:6e:98:b9:6d:ce:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jun 3 10:55:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8259bfd91a0429fc1d80abd853dd9cb50ec83f9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:2c:cd:d3:c1:cc:36:bf:f8:e1:55:43:40:e9:
a6:de:db:cc:eb:6d:47:be:d5:0a:54:8e:c0:fa:a6:
1f:68:e9:bb:3b:10:f3:95:5e:ba:cf:fe:07:7f:ab:
50:72:c5:0d:4d:8e:ae:5e:a9:6e:40:6e:a2:90:46:
bb:9d:80:55:53:fe:08:c6:2d:1e:30:d9:8a:34:8e:
44:59:08:d3:9c:d4:17:18:9c:79:5c:37:8c:06:43:
36:68:b4:34:c9:90:ff:ef:e3:be:f0:a1:16:e0:92:
48:a6:60:6e:2b:b2:1e:ec:d5:c1:22:40:14:58:16:
b4:9f:62:48:62:67:65:34:7d:3f:d8:bb:c0:c6:c8:
de:b3:c6:74:62:e7:0a:34:13:5e:46:ac:89:0b:53:
e8:e3:89:8d:08:39:0f:c3:7a:4c:49:27:3c:a5:c5:
72:38:e0:9f:0f:66:79:e2:0d:7c:37:b6:3a:b9:92:
8c:d3:7d:d5:75:87:73:18:25:e5:cc:75:a9:62:cc:
e0:8a:5c:c8:89:0b:7c:94:6b:12:dd:24:22:23:73:
8b:e1:3b:27:55:05:8e:c8:b3:da:77:9b:75:78:fe:
79:f4:0e:7f:55:40:6d:e8:63:73:35:44:7e:ae:00:
cb:f8:cb:63:d4:8e:ea:dd:f4:84:dd:6a:50:d3:95:
4f:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:59:BF:D9:1A:04:29:FC:1D:80:AB:D8:53:DD:9C:B5:0E:C8:3F:9A
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/glm_2RoEKfwdgKvYU92ctQ7IP5o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.51.0/24
163.5.154.0/24
163.5.211.0/24
163.5.215.0/24
Signature Algorithm: sha256WithRSAEncryption
37:7c:3a:6c:dd:c8:18:6b:a9:26:84:19:46:10:bb:1a:6e:22:
91:ac:02:8f:ea:e6:a7:34:3f:42:57:03:18:f1:fd:3b:55:54:
6a:6b:c2:06:c4:f3:89:0c:31:a5:4d:74:d8:bb:0e:63:9b:73:
cd:92:51:d5:5d:55:9d:13:e5:17:ff:2c:27:a8:66:80:cb:fc:
56:db:8d:5c:8f:08:74:d6:9a:4c:f5:2a:ae:f7:22:0a:80:f2:
4a:77:e1:af:d6:00:26:55:5e:0b:15:94:05:bc:3d:60:9d:7d:
0a:e4:5b:53:11:88:3a:5f:b1:76:c9:2e:3b:ef:0f:92:73:3f:
46:e9:3d:b7:5a:c7:35:9a:23:27:9e:48:66:fc:70:7f:4e:13:
e2:9b:7b:7e:ac:40:ce:52:47:28:f0:90:ac:dd:d8:fe:b6:85:
82:54:59:57:47:51:e3:23:5c:d7:58:7d:5e:0e:23:4e:0b:5b:
0f:b7:a6:de:df:56:b1:2c:2c:e7:36:3e:f7:9a:a1:25:6f:c6:
73:eb:c7:7a:f2:72:5d:ab:44:94:a0:e2:98:66:cb:d5:15:30:
44:79:15:45:94:26:f0:15:d4:f4:8e:bb:f5:d0:15:5a:8e:fb:
36:a0:71:1a:fb:2d:cb:0d:6e:04:e6:2e:38:be:c7:6b:3a:8b:
96:97:3a:15
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAY/dvWV9NollQsFIbpi5bc4zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2
MjRiY2IwHhcNMjQwNjAzMTA1NTI3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MjU5YmZkOTFhMDQyOWZjMWQ4MGFiZDg1M2RkOWNiNTBlYzgzZjlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1izN08HMNr/44VVDQOmm3tvM621H
vtUKVI7A+qYfaOm7OxDzlV66z/4Hf6tQcsUNTY6uXqluQG6ikEa7nYBVU/4Ixi0e
MNmKNI5EWQjTnNQXGJx5XDeMBkM2aLQ0yZD/7+O+8KEW4JJIpmBuK7Ie7NXBIkAU
WBa0n2JIYmdlNH0/2LvAxsjes8Z0YucKNBNeRqyJC1Po44mNCDkPw3pMSSc8pcVy
OOCfD2Z54g18N7Y6uZKM033VdYdzGCXlzHWpYszgilzIiQt8lGsS3SQiI3OL4Tsn
VQWOyLPad5t1eP559A5/VUBt6GNzNUR+rgDL+Mtj1I7q3fSE3WpQ05VPRQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFIJZv9kaBCn8HYCr2FPdnLUOyD+aMB8GA1UdIwQY
MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt
OWZlOTQxMDhmZjAxLzEvZ2xtXzJSb0VLZndkZ0t2WVU5MmN0UTdJUDVvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx
LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAowUzAwQA
owWaAwQAowXTAwQAowXXMA0GCSqGSIb3DQEBCwUAA4IBAQA3fDps3cgYa6kmhBlG
ELsabiKRrAKP6uanND9CVwMY8f07VVRqa8IGxPOJDDGlTXTYuw5jm3PNklHVXVWd
E+UX/ywnqGaAy/xW241cjwh01ppM9Squ9yIKgPJKd+Gv1gAmVV4LFZQFvD1gnX0K
5FtTEYg6X7F2yS477w+Scz9G6T23Wsc1miMnnkhm/HB/ThPim3t+rEDOUkco8JCs
3dj+toWCVFlXR1HjI1zXWH1eDiNOC1sPt6be31axLCznNj73mqElb8Zz68d68nJd
q0SUoOKYZsvVFTBEeRVFlCbwFdT0jrv10BVajvs2oHEa+y3LDW4E5i44vsdrOouW
lzoV
-----END CERTIFICATE-----
Generated at Wed Jul 3 16:42:01 2024 by rpki-client on console-ams.rpki-client.org