Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/4f7bb9-4d69-49de-9a49-a4d9dc76c2b8/1/glTMTT1Jd0ES5E10q6WvklNdy5Y.roa
File: glTMTT1Jd0ES5E10q6WvklNdy5Y.roa (raw, json)
Hash identifier: n9Ks7O58vaZo4koU9wPtUdJo9Fp8BeG1rf2EL561S5k=
Subject key identifier: 82:54:CC:4D:3D:49:77:41:12:E4:4D:74:AB:A5:AF:92:53:5D:CB:96
Certificate issuer: /CN=6da0ee9ff09c7cfc7ee9761f1a3c8f30efac5848
Certificate serial: 01856D01B15B957E126D672426C6BFD37ED0
Authority key identifier: 6D:A0:EE:9F:F0:9C:7C:FC:7E:E9:76:1F:1A:3C:8F:30:EF:AC:58:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/baDun_CcfPx-6XYfGjyPMO-sWEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/4f7bb9-4d69-49de-9a49-a4d9dc76c2b8/1/glTMTT1Jd0ES5E10q6WvklNdy5Y.roa
Signing time: Sun 01 Jan 2023 11:05:05 +0000
ROA not before: Sun 01 Jan 2023 11:05:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 22773
IP address blocks: 2a13:55c2::/32 maxlen: 32
2a13:55c0::/32 maxlen: 32
2a13:55c5::/32 maxlen: 32
2a13:55c6::/32 maxlen: 32
2a13:55c1::/32 maxlen: 32
2a13:55c3::/32 maxlen: 32
2a13:55c7::/32 maxlen: 32
2a13:55c4::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:31:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:01:b1:5b:95:7e:12:6d:67:24:26:c6:bf:d3:7e:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6da0ee9ff09c7cfc7ee9761f1a3c8f30efac5848
Validity
Not Before: Jan 1 11:05:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8254cc4d3d49774112e44d74aba5af92535dcb96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:5d:f5:0e:84:87:0a:d5:b9:c6:fe:82:35:16:
8d:67:2c:17:fa:a8:11:b2:c8:73:30:96:d5:e9:d6:
ea:f6:4a:e2:45:2c:71:54:6e:f2:54:52:d9:50:e0:
1f:91:02:6d:46:bf:be:56:4b:98:d1:6b:76:a3:5c:
62:70:c4:2e:e3:c4:d3:4f:7c:1c:4f:0d:d4:9d:66:
85:4d:14:2a:21:95:6c:73:c3:00:bc:49:fb:94:ad:
d0:36:cd:9b:e7:5e:59:eb:04:dc:cc:2c:31:70:e1:
30:ba:99:58:5b:a4:56:dc:6c:c0:a1:dd:c7:cf:68:
49:c7:52:1e:d9:ea:e1:1e:a4:fd:fe:0f:61:cd:ff:
5b:01:bf:80:12:63:41:e5:0e:6f:7b:93:11:37:24:
06:ca:07:2c:89:d9:b9:35:89:aa:f4:48:05:2f:5c:
96:02:d0:fd:c0:3d:9a:a2:36:9f:5e:24:14:c5:28:
27:8d:0b:d3:34:17:28:32:ac:e0:48:47:72:69:fa:
b0:08:e4:40:96:b0:63:20:f6:cc:48:e7:75:30:80:
cd:a8:c3:cd:87:76:96:cc:47:14:49:da:c2:69:fc:
89:c7:d5:76:2e:63:73:18:78:50:e0:19:0a:d2:15:
15:1c:6d:ae:d1:b9:78:39:d3:da:b1:02:2c:83:7b:
3e:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:54:CC:4D:3D:49:77:41:12:E4:4D:74:AB:A5:AF:92:53:5D:CB:96
X509v3 Authority Key Identifier:
keyid:6D:A0:EE:9F:F0:9C:7C:FC:7E:E9:76:1F:1A:3C:8F:30:EF:AC:58:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/baDun_CcfPx-6XYfGjyPMO-sWEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/4f7bb9-4d69-49de-9a49-a4d9dc76c2b8/1/glTMTT1Jd0ES5E10q6WvklNdy5Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/4f7bb9-4d69-49de-9a49-a4d9dc76c2b8/1/baDun_CcfPx-6XYfGjyPMO-sWEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:55c0::/29
Signature Algorithm: sha256WithRSAEncryption
17:ac:96:e6:ce:d9:81:e9:43:d9:0b:ee:a5:b1:a1:fe:90:71:
6d:05:36:83:ae:dd:2b:e9:06:40:ea:0c:6e:ad:8f:b3:f2:db:
4b:af:23:50:5d:c7:0f:66:38:48:fc:b0:11:25:b5:59:b7:f5:
d2:87:1b:e4:91:c6:f1:bc:fd:8c:04:bc:ac:94:72:43:47:db:
5e:c2:44:79:06:51:95:13:70:bf:58:b7:e8:8b:7e:71:26:0e:
f4:e0:bd:42:1e:be:11:69:30:5d:50:2d:c1:1f:95:b2:d7:d9:
3e:92:28:c9:53:35:15:89:1c:66:be:3f:de:18:a2:0a:09:30:
10:8c:b9:0c:58:90:40:af:63:27:73:6f:41:09:7b:3b:13:82:
2a:a3:08:51:ff:f3:a5:84:87:c4:ce:0f:90:35:40:53:7e:7d:
bd:a5:60:17:41:92:6c:b3:53:00:72:60:ee:54:46:27:26:32:
b5:d6:e0:f4:52:ba:79:4b:bf:ff:ab:d5:c5:67:38:75:47:60:
d6:7c:a8:89:43:05:e7:b4:6c:e7:1f:0a:46:5a:35:78:ed:1e:
f8:33:93:d9:9b:05:d9:dc:8e:2d:19:76:63:82:14:3c:f5:7d:
08:50:8a:61:7d:2d:42:8f:74:45:50:e1:9c:19:21:3d:01:86:
0b:2e:a6:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:02 2024 by rpki-client on console-fra.rpki-client.org