Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/GgFTL3LlsEXtCtKp3z62KOCbDg4.roa
File: GgFTL3LlsEXtCtKp3z62KOCbDg4.roa (raw, json)
Hash identifier: ghEJX/o54Ke9iVWy7+07UXyq9PlY86S/up8/Zi1caZA=
Subject key identifier: 1A:01:53:2F:72:E5:B0:45:ED:0A:D2:A9:DF:3E:B6:28:E0:9B:0E:0E
Certificate issuer: /CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Certificate serial: 018731F862CECCF5895C778291B85AE10A24
Authority key identifier: D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/GgFTL3LlsEXtCtKp3z62KOCbDg4.roa
Signing time: Thu 30 Mar 2023 10:02:54 +0000
ROA not before: Thu 30 Mar 2023 10:02:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43160
IP address blocks: 185.44.233.0/24 maxlen: 24
185.44.232.0/22 maxlen: 24
212.63.118.0/24 maxlen: 24
212.63.116.0/22 maxlen: 24
212.63.123.0/24 maxlen: 24
212.63.119.0/24 maxlen: 24
212.63.120.0/24 maxlen: 24
212.63.122.0/24 maxlen: 24
185.162.172.0/23 maxlen: 24
185.94.48.0/22 maxlen: 24
195.82.104.0/24 maxlen: 24
195.82.106.0/24 maxlen: 24
185.235.103.0/24 maxlen: 24
185.196.203.0/24 maxlen: 24
185.196.202.0/23 maxlen: 24
185.196.202.0/24 maxlen: 24
85.217.136.0/24 maxlen: 24
85.217.138.0/24 maxlen: 24
85.217.135.0/24 maxlen: 24
85.217.137.0/24 maxlen: 24
85.217.142.0/24 maxlen: 24
85.217.143.0/24 maxlen: 24
85.217.141.0/24 maxlen: 24
85.217.146.0/24 maxlen: 24
85.217.150.0/24 maxlen: 24
85.217.152.0/24 maxlen: 24
85.217.151.0/24 maxlen: 24
85.217.158.0/24 maxlen: 24
85.217.154.0/24 maxlen: 24
85.217.157.0/24 maxlen: 24
85.217.159.0/24 maxlen: 24
85.217.153.0/24 maxlen: 24
85.217.155.0/24 maxlen: 24
185.130.24.0/23 maxlen: 24
185.130.24.0/22 maxlen: 24
88.98.96.0/23 maxlen: 24
88.98.96.0/20 maxlen: 24
88.98.98.0/24 maxlen: 24
88.98.104.0/23 maxlen: 24
88.98.99.0/24 maxlen: 24
88.98.100.0/22 maxlen: 24
88.98.106.0/23 maxlen: 24
88.98.111.0/24 maxlen: 24
88.98.110.0/24 maxlen: 24
185.130.26.0/23 maxlen: 24
185.202.164.0/22 maxlen: 24
185.202.166.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 30 Oct 2023 09:59:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:31:f8:62:ce:cc:f5:89:5c:77:82:91:b8:5a:e1:0a:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Validity
Not Before: Mar 30 10:02:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1a01532f72e5b045ed0ad2a9df3eb628e09b0e0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:26:cd:f4:81:a8:6b:44:68:36:86:6d:9f:78:
cf:22:8a:29:87:30:91:24:66:3f:86:72:8f:18:93:
82:f8:b9:02:77:ae:e6:a9:bd:ad:35:ef:cb:82:09:
49:0f:f5:10:50:c5:90:c3:6f:0e:2b:aa:2a:f0:9a:
d6:a3:35:95:f4:d0:71:41:25:9c:b5:71:c9:0e:dc:
45:12:5c:46:16:0e:fb:ce:9f:7f:c8:87:e3:9b:24:
31:e8:c4:89:ea:67:e2:3a:c1:1a:d5:69:88:69:ff:
ac:2c:76:05:d9:a1:53:7b:3d:b5:54:43:a7:cc:d4:
13:a9:e4:40:4b:26:4e:e9:6a:16:8c:de:36:94:88:
f2:4e:1c:23:c2:79:fe:30:ce:7d:02:39:53:f8:29:
45:b9:67:22:60:5c:e4:1a:13:a1:f8:40:3e:0a:83:
b3:e4:ee:86:9e:68:09:7e:99:2d:3b:22:d9:a6:e3:
42:e9:11:bb:6d:83:12:1f:7f:1f:14:e2:49:c1:6d:
07:d1:0d:5c:a5:ad:85:87:71:48:7c:26:c9:52:1d:
a6:ee:4b:fa:3f:77:56:ee:0a:4f:c8:d7:6a:72:f7:
ea:3a:91:36:a1:d5:14:d3:42:c8:02:73:bf:70:5b:
9f:aa:cf:60:0c:12:ce:1f:e7:3e:0e:1a:74:76:6d:
8f:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:01:53:2F:72:E5:B0:45:ED:0A:D2:A9:DF:3E:B6:28:E0:9B:0E:0E
X509v3 Authority Key Identifier:
keyid:D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/GgFTL3LlsEXtCtKp3z62KOCbDg4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.217.135.0-85.217.138.255
85.217.141.0-85.217.143.255
85.217.146.0/24
85.217.150.0-85.217.155.255
85.217.157.0-85.217.159.255
88.98.96.0/20
185.44.232.0/22
185.94.48.0/22
185.130.24.0/22
185.162.172.0/23
185.196.202.0/23
185.202.164.0/22
185.235.103.0/24
195.82.104.0/24
195.82.106.0/24
212.63.116.0-212.63.120.255
212.63.122.0/23
Signature Algorithm: sha256WithRSAEncryption
b1:24:42:ea:e7:08:e7:e6:b7:77:de:85:fd:90:f6:7c:ca:7b:
9e:0e:e8:3a:36:f9:b8:00:82:81:39:38:84:69:d0:cd:a2:0a:
24:56:17:ff:7a:7d:8a:e2:f7:fc:7c:1b:ac:82:39:25:b5:cb:
5c:6d:df:c3:4e:13:2b:96:12:0b:8a:30:17:7a:a9:a8:cf:c8:
bc:85:ea:cd:66:38:77:f1:3b:10:b8:f9:4e:6e:9d:cd:c9:5c:
ff:fe:b1:5c:8c:c9:a9:36:87:10:5a:28:8c:ad:d5:0d:bf:9c:
97:f8:99:a6:74:be:21:5f:b9:fb:1c:aa:44:a0:fc:51:ad:ed:
72:01:50:14:7e:f8:9f:50:b9:ff:1c:1a:3c:45:1c:fa:8e:f5:
6e:78:c3:8a:da:8f:cf:7e:58:9d:14:15:87:11:5f:60:a9:b8:
0a:f0:43:5c:20:18:7f:e5:7f:8d:c4:d0:d0:4f:8a:2c:98:22:
cf:c3:5d:67:8b:c2:bb:7a:bc:f9:41:01:59:25:8c:53:e9:79:
17:d5:b1:ea:0a:29:fb:19:6a:44:e5:3e:9a:c1:a2:c5:4b:0e:
75:29:f0:bb:1c:cb:37:49:0c:15:e0:40:ef:aa:ed:8a:09:4d:
48:d5:12:82:63:14:f7:08:a8:99:f3:b0:f3:3b:65:cf:ce:f7:
bb:cd:5e:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:36 2024 by rpki-client on console-fra.rpki-client.org