Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/GgETDBX1Hu1lp3-WW_2uyzLDZak.roa
File: GgETDBX1Hu1lp3-WW_2uyzLDZak.roa (raw, json)
Hash identifier: ao/SsLCN/wNTSCA00rhr2cxMEybWzG5JSYLwk/BN+TY=
Subject key identifier: 1A:01:13:0C:15:F5:1E:ED:65:A7:7F:96:5B:FD:AE:CB:32:C3:65:A9
Certificate issuer: /CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Certificate serial: 018C0A5F3880791617E61FA01725DB11F8B1
Authority key identifier: 6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/GgETDBX1Hu1lp3-WW_2uyzLDZak.roa
Signing time: Sun 26 Nov 2023 06:44:21 +0000
ROA not before: Sun 26 Nov 2023 06:44:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 216054
IP address blocks: 185.239.3.0/24 maxlen: 24
185.3.200.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:0a:5f:38:80:79:16:17:e6:1f:a0:17:25:db:11:f8:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Validity
Not Before: Nov 26 06:44:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1a01130c15f51eed65a77f965bfdaecb32c365a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:98:1b:24:53:17:43:64:e2:1d:ad:47:b3:3c:
f4:d8:35:96:a2:83:d9:83:35:cd:6a:8c:f5:96:4e:
e0:97:04:38:f9:50:ce:2b:88:e8:2c:44:b9:b5:ab:
4d:81:40:6f:61:ec:1e:94:8e:68:7c:cf:24:58:f5:
bf:5f:94:73:d0:31:0e:0d:df:d0:e0:86:bd:f8:76:
ac:34:9d:f8:4f:a1:eb:3b:6f:69:6c:ba:22:ff:9b:
42:d9:a0:3c:63:5b:fe:f1:cb:63:6c:3a:7a:05:a0:
c3:99:78:d5:82:01:a9:d5:f3:88:44:2f:90:3f:29:
d9:71:a4:23:08:e4:e0:c1:53:a7:26:5b:a2:9a:26:
de:b7:1a:7e:7d:5a:f6:9f:61:73:7a:f0:57:8e:d5:
ea:6d:a0:0e:49:57:aa:ef:13:e5:7a:aa:a5:52:2b:
f6:2d:40:e3:34:13:dc:70:f9:80:a1:85:a6:e9:eb:
b8:0a:24:a7:3c:da:c0:40:f6:f6:3d:fd:65:94:f9:
ab:b8:ad:f4:50:32:3b:e6:cc:97:66:64:06:51:0b:
95:eb:2a:c9:21:fa:3a:30:3b:c7:19:a3:21:0b:a5:
39:20:2c:47:c7:3a:fd:45:f8:d8:69:49:31:f1:5b:
18:d7:bf:b7:35:f3:e6:24:ca:53:a3:bc:10:f4:9c:
d1:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:01:13:0C:15:F5:1E:ED:65:A7:7F:96:5B:FD:AE:CB:32:C3:65:A9
X509v3 Authority Key Identifier:
keyid:6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/GgETDBX1Hu1lp3-WW_2uyzLDZak.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.3.200.0/24
185.239.3.0/24
Signature Algorithm: sha256WithRSAEncryption
03:bd:53:d9:1a:46:61:cd:e1:d2:b1:3c:38:a5:86:e7:2e:10:
b7:8e:57:9f:c2:59:ad:86:1b:f7:b0:92:38:e9:c2:29:9f:41:
7a:ef:e6:4d:bb:03:6f:88:89:53:e7:c0:c4:00:5f:32:bb:18:
ba:0c:86:34:26:7b:89:83:38:40:ec:52:a5:a0:07:39:82:5d:
ed:d2:6a:f7:d1:d5:9a:19:37:ec:86:29:4f:65:60:a4:6a:ea:
1d:f6:73:6d:29:b0:92:a7:d2:26:7d:48:a9:de:7b:57:a9:d5:
a4:ae:b8:33:f0:83:5e:d7:10:49:6e:69:08:c6:f1:9e:65:6c:
f0:69:07:a7:bd:2f:b2:c8:44:99:02:7c:b2:b0:ea:fc:a8:d0:
f3:2a:a4:e1:03:ff:81:66:0a:9e:34:e3:e5:ad:87:35:2a:f5:
33:d4:ec:c5:81:2a:ff:77:b8:24:73:3a:87:4e:55:19:79:03:
6e:6c:8e:10:1e:4f:05:51:e6:2f:8f:db:80:60:ad:42:6b:90:
02:4c:7e:e8:e1:58:95:46:9a:2c:26:b7:c9:6b:e1:39:06:72:
60:83:15:fa:b4:a6:fc:61:40:3c:31:90:6c:47:e0:f0:d9:3c:
97:7f:a3:2f:dd:70:fc:20:bb:8b:c6:8f:c7:7e:7f:fa:58:d9:
f6:c6:6f:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 19:16:14 2024 by rpki-client on console-ams.rpki-client.org