Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/000465-83cb-41b4-8e60-08d65b38639d/1/GATGFS_LU3_HftRh_ABiLV-3fY8.roa
File: GATGFS_LU3_HftRh_ABiLV-3fY8.roa (raw, json)
Hash identifier: EsPZXRXc9yLrV9PtbxL23j2QXt4U539k5T2rEqrZpEM=
Subject key identifier: 18:04:C6:15:2F:CB:53:7F:C7:7E:D4:61:FC:00:62:2D:5F:B7:7D:8F
Certificate issuer: /CN=682c842dfa2a1e714727bccb95f165347103f277
Certificate serial: 01856C9CADB0A903D0B8E55EB5664A3663B0
Authority key identifier: 68:2C:84:2D:FA:2A:1E:71:47:27:BC:CB:95:F1:65:34:71:03:F2:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aCyELfoqHnFHJ7zLlfFlNHED8nc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/000465-83cb-41b4-8e60-08d65b38639d/1/GATGFS_LU3_HftRh_ABiLV-3fY8.roa
Signing time: Sun 01 Jan 2023 09:14:45 +0000
ROA not before: Sun 01 Jan 2023 09:14:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59835
IP address blocks: 77.80.128.0/17 maxlen: 17
77.80.253.0/24 maxlen: 24
77.80.254.0/24 maxlen: 24
77.80.255.0/24 maxlen: 24
185.69.168.0/24 maxlen: 24
2a05:2240::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:9c:ad:b0:a9:03:d0:b8:e5:5e:b5:66:4a:36:63:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=682c842dfa2a1e714727bccb95f165347103f277
Validity
Not Before: Jan 1 09:14:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1804c6152fcb537fc77ed461fc00622d5fb77d8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:07:cd:ad:9b:78:74:c2:8d:b5:34:31:07:05:
84:82:ca:3c:ca:53:57:91:49:02:1b:df:ac:4c:35:
83:9f:8d:3a:3d:ab:f0:66:ce:ae:13:dd:20:79:f6:
2f:19:2a:42:2c:ee:5c:04:4d:be:a0:7d:ba:68:f2:
fc:48:77:67:32:9f:81:23:93:fd:5e:e2:d5:f4:f1:
2d:be:e4:81:86:29:e0:7d:88:fa:73:6a:0f:f4:3b:
1d:72:97:50:3f:2b:b5:86:00:d5:24:64:7b:a3:a2:
c2:29:0c:be:2d:a3:c5:06:48:b9:3b:fc:a0:50:f3:
74:9c:8d:ea:6f:49:dc:2a:c6:de:cb:8d:36:be:a1:
7e:ef:8d:67:97:33:bd:be:4a:b1:fd:5c:2e:42:f2:
ed:f4:dc:1a:71:6a:e7:e6:c6:05:2a:66:b9:56:5e:
5f:4a:60:e7:0d:f0:3b:f4:80:4c:a4:a5:05:50:c3:
fe:ae:75:08:cc:12:62:c1:3e:98:91:79:10:a7:b6:
f7:30:c9:9d:59:79:b0:a8:05:02:61:84:e1:8f:f1:
3b:a9:f4:95:6b:06:19:4f:16:4f:74:b1:14:aa:79:
95:ed:7d:fb:cb:e8:c8:f2:db:37:5d:13:c1:2d:96:
cc:82:12:7b:4b:fb:25:cd:8a:35:81:da:0b:27:2c:
f5:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:04:C6:15:2F:CB:53:7F:C7:7E:D4:61:FC:00:62:2D:5F:B7:7D:8F
X509v3 Authority Key Identifier:
keyid:68:2C:84:2D:FA:2A:1E:71:47:27:BC:CB:95:F1:65:34:71:03:F2:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aCyELfoqHnFHJ7zLlfFlNHED8nc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/000465-83cb-41b4-8e60-08d65b38639d/1/GATGFS_LU3_HftRh_ABiLV-3fY8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/000465-83cb-41b4-8e60-08d65b38639d/1/aCyELfoqHnFHJ7zLlfFlNHED8nc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.80.128.0/17
185.69.168.0/24
IPv6:
2a05:2240::/32
Signature Algorithm: sha256WithRSAEncryption
84:0f:6d:42:f6:65:d5:66:a5:8c:22:09:33:df:7c:e3:a4:e8:
55:e1:18:5a:e0:c5:f4:2f:a8:84:99:81:80:7e:5c:d8:9a:99:
aa:01:de:c3:97:e2:27:ab:e3:6b:8b:96:b5:25:4d:34:8a:18:
88:37:ef:ff:5b:33:e0:ef:43:28:7b:e6:c8:20:58:87:31:0f:
83:54:1c:f5:8b:75:14:f9:16:d4:3b:70:56:8d:d5:14:43:5f:
56:76:dc:45:21:01:e2:9f:b4:a0:ee:ce:78:43:e9:79:e3:18:
ee:53:b9:bf:0e:51:f2:79:50:ea:3c:52:f1:6d:14:33:eb:9c:
54:d9:9d:2e:dc:b6:16:ec:56:a0:a3:ee:45:cb:f0:bd:f1:e9:
56:17:af:07:1c:be:ac:ad:fd:9d:13:bf:3a:df:d1:f3:59:78:
e3:73:aa:0a:3a:17:64:43:e3:3c:5d:38:f4:7f:25:31:1c:ee:
c6:98:6f:7a:50:21:2d:ef:bf:25:3a:25:a8:93:2f:b0:9d:17:
f9:43:75:7d:1a:b9:0b:a2:df:63:04:76:35:77:52:60:db:96:
e9:44:7e:bd:fa:f2:d5:db:df:6b:87:01:2a:b4:b8:86:8a:3b:
ae:91:b9:af:2e:91:55:58:55:1d:30:8d:9b:7f:e7:a9:b6:0d:
78:63:a7:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:20 2024 by rpki-client on console-ams.rpki-client.org