Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/GL9NWXNQZ0rAoGBb5t0QcBoyzlk.roa
File: GL9NWXNQZ0rAoGBb5t0QcBoyzlk.roa (raw, json)
Hash identifier: 3owhJETbKxdHMSTNQ17e2xjJd4IgXu7uk+QOPTDeH/w=
Subject key identifier: 18:BF:4D:59:73:50:67:4A:C0:A0:60:5B:E6:DD:10:70:1A:32:CE:59
Certificate issuer: /CN=517a0c96842bafc9f630ba14b83ea79bd12a53b9
Certificate serial: 018DAF2AEAD3283BA91AD0087D401A59FB5D
Authority key identifier: 51:7A:0C:96:84:2B:AF:C9:F6:30:BA:14:B8:3E:A7:9B:D1:2A:53:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UXoMloQrr8n2MLoUuD6nm9EqU7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/GL9NWXNQZ0rAoGBb5t0QcBoyzlk.roa
Signing time: Thu 15 Feb 2024 23:47:21 +0000
ROA not before: Thu 15 Feb 2024 23:47:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215529
IP address blocks: 2a13:cc82:1::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 01 Jan 2025 03:47:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:af:2a:ea:d3:28:3b:a9:1a:d0:08:7d:40:1a:59:fb:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=517a0c96842bafc9f630ba14b83ea79bd12a53b9
Validity
Not Before: Feb 15 23:47:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=18bf4d597350674ac0a0605be6dd10701a32ce59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:60:22:d1:63:91:91:37:10:b5:9a:3f:10:09:
bc:4f:84:cd:19:08:81:28:b5:a7:95:a5:eb:ab:ec:
39:16:37:5a:9b:df:42:d0:61:8f:09:e4:26:6f:b1:
af:c0:2d:02:2b:a7:4c:49:f2:6b:b6:f1:6c:72:60:
d9:a4:ea:9b:2e:ba:31:9c:40:f5:e9:cf:69:cb:53:
f9:04:72:00:63:7f:3b:30:81:16:15:c1:c4:80:3b:
0b:31:8a:80:96:ed:cd:4a:dc:92:22:ae:68:b9:34:
91:cc:2e:a2:ac:dd:5b:c6:ba:36:a2:82:ab:fa:e9:
56:86:c7:b4:48:aa:a0:19:8d:82:e0:7a:82:4a:80:
3f:9f:a9:c4:46:d4:9a:de:68:d7:c4:87:bc:05:58:
c4:da:5f:16:b7:e0:0c:d8:1c:7d:f2:c8:a2:78:88:
06:37:91:67:ba:04:53:e4:e9:e8:d1:87:43:52:13:
89:35:86:a3:c5:65:96:8a:37:4d:1f:4d:33:16:c9:
fa:55:24:34:73:f3:2b:d5:71:bb:25:7c:fa:93:f7:
d1:55:5f:cc:74:4f:43:4c:ac:3c:e5:ac:7e:4f:48:
0a:ee:72:52:03:07:52:cc:d1:f9:9d:a5:30:1a:7d:
b2:0e:76:04:b5:49:ab:b2:bb:aa:c9:d1:18:1f:3a:
7b:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:BF:4D:59:73:50:67:4A:C0:A0:60:5B:E6:DD:10:70:1A:32:CE:59
X509v3 Authority Key Identifier:
keyid:51:7A:0C:96:84:2B:AF:C9:F6:30:BA:14:B8:3E:A7:9B:D1:2A:53:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UXoMloQrr8n2MLoUuD6nm9EqU7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/GL9NWXNQZ0rAoGBb5t0QcBoyzlk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:cc82:1::/48
Signature Algorithm: sha256WithRSAEncryption
a8:6f:d6:26:b9:a8:8b:00:14:76:ff:5d:d0:5c:a3:f7:9e:15:
43:e1:36:39:2c:57:c6:8a:5b:a8:b1:23:06:15:29:bf:e0:da:
bd:ac:f1:bd:d6:30:bc:15:9a:6a:30:22:90:cb:65:75:26:f5:
5d:27:cf:42:92:f7:0e:0f:bb:13:03:a6:ae:9f:38:18:4b:b5:
ea:ab:6c:ff:6d:ce:3b:78:4b:80:2a:c1:a6:60:35:58:8a:50:
40:94:48:06:11:f7:7e:65:54:60:4c:25:42:74:2d:b3:aa:de:
5f:8f:da:00:dc:16:f4:54:4b:8c:e7:65:a7:46:df:fe:86:df:
ad:57:5e:c7:8f:ae:6c:ac:10:db:81:94:4a:8f:fe:86:50:19:
1a:ef:35:6f:81:8e:6e:81:42:85:9a:35:1a:f6:43:36:e3:b1:
59:cb:65:e3:17:40:db:cb:ae:1a:ca:12:57:a5:96:46:36:3c:
2a:98:f6:d1:a6:00:f4:84:8f:6e:1f:4c:6e:b8:e5:b1:0f:79:
25:42:27:7c:c6:3d:26:53:1d:a4:11:b6:92:0e:70:2c:90:ef:
ae:9e:80:b0:e7:95:8a:f5:b4:1b:f2:f8:7c:85:f6:11:a0:24:
02:e0:07:99:a6:fc:6e:33:89:d7:2c:03:76:4f:bd:1e:4a:42:
17:14:23:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:52:02 2025 by rpki-client