Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/GCAtTy-9Zz80TVxxdSp0iKXEv9g.roa
File: GCAtTy-9Zz80TVxxdSp0iKXEv9g.roa (raw, json)
Hash identifier: 3B3qKm6Q+//r79/43XHu4EQlIB0lf2pXc6sIygryIHo=
Subject key identifier: 18:20:2D:4F:2F:BD:67:3F:34:4D:5C:71:75:2A:74:88:A5:C4:BF:D8
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 018B4BAF377DB8181FBF44AEC72FC1A22998
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/GCAtTy-9Zz80TVxxdSp0iKXEv9g.roa
Signing time: Fri 20 Oct 2023 06:04:16 +0000
ROA not before: Fri 20 Oct 2023 06:04:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7018
IP address blocks: 88.209.232.0/24 maxlen: 24
88.209.233.0/24 maxlen: 24
88.209.230.0/24 maxlen: 24
88.209.234.0/24 maxlen: 24
88.209.235.0/24 maxlen: 24
88.209.255.0/24 maxlen: 24
88.151.63.0/24 maxlen: 24
77.242.159.0/24 maxlen: 24
88.209.203.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:4b:af:37:7d:b8:18:1f:bf:44:ae:c7:2f:c1:a2:29:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Oct 20 06:04:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=18202d4f2fbd673f344d5c71752a7488a5c4bfd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:2b:6e:2c:02:19:aa:e9:5e:e9:e6:6b:54:c5:
0e:c1:7a:f3:07:d1:22:bc:86:47:89:aa:3d:66:ce:
4e:00:29:78:95:bd:c6:70:7e:f2:e3:3c:12:ed:a0:
6c:09:3e:d0:8c:92:1c:e8:c3:15:52:c0:50:ca:db:
4d:77:1c:95:c6:14:91:0b:90:59:fc:c7:af:19:49:
0c:26:e1:c2:1a:69:f5:5d:cf:07:73:64:a1:b1:8b:
9e:d2:90:bc:96:99:4c:98:86:b7:2d:cb:14:b7:e0:
c6:1b:fb:81:a0:65:70:d1:4d:8c:fc:6e:93:e3:cd:
75:5b:da:cb:e5:c3:df:e1:6d:ee:0c:23:b0:3c:11:
b7:33:95:35:52:d2:0d:2a:aa:b0:cb:45:26:4e:03:
a1:cf:9c:d6:47:7a:24:2f:52:eb:f4:1b:4a:b8:bd:
08:2d:7e:59:5b:7e:7c:fb:04:80:91:3e:29:b7:99:
45:67:63:be:17:50:a6:bb:e3:96:af:71:2a:25:26:
49:42:f7:c2:7f:30:32:69:e6:3c:2c:43:56:68:bd:
3b:98:d3:e9:fb:1a:b0:d8:0f:4a:b4:37:ff:c6:a3:
21:4d:fa:d6:ca:d7:c9:07:e5:ec:f2:4d:15:a3:1b:
3f:f8:8d:90:c5:42:47:04:3a:51:6b:35:db:18:90:
5e:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:20:2D:4F:2F:BD:67:3F:34:4D:5C:71:75:2A:74:88:A5:C4:BF:D8
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/GCAtTy-9Zz80TVxxdSp0iKXEv9g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.242.159.0/24
88.151.63.0/24
88.209.203.0/24
88.209.230.0/24
88.209.232.0/22
88.209.255.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:6f:36:00:1d:ed:cb:67:1d:c0:ce:23:c6:07:75:95:d8:9e:
a5:2e:2f:c5:f1:e7:8b:db:7b:d9:59:14:9f:0e:0d:71:7e:a5:
e1:99:6b:26:2b:c7:15:d1:46:ad:63:cb:26:c7:88:9f:32:cc:
bb:d0:e8:6a:bd:5a:b1:9e:44:87:00:9d:60:b0:31:f6:8d:c7:
5d:4c:55:a5:fa:f5:3d:ab:69:90:1a:bb:87:4a:94:2c:7a:ad:
ea:a5:00:ed:20:ca:03:d2:c6:85:03:d3:67:d0:0b:ce:61:b7:
4c:c5:d4:3a:50:59:d0:29:08:44:5d:4f:41:24:8d:79:d8:ce:
41:34:74:dd:02:a7:03:ff:56:0a:3a:a0:e4:6c:8d:c5:9a:1d:
85:f0:f4:5e:68:f0:76:cc:35:ed:8f:28:46:2f:eb:5b:f1:05:
c2:f9:e9:26:15:4a:61:4f:4f:2e:d9:2d:6d:a7:86:e4:a9:0b:
0e:e2:d5:f9:46:a8:47:48:65:19:37:e3:db:13:d2:00:7b:d6:
14:ff:c5:be:bb:70:38:cc:47:92:53:db:d5:49:c6:14:bc:1e:
ad:45:88:ed:59:de:2c:4a:de:31:5a:8d:c9:c7:33:3a:3a:59:
5e:0e:3c:da:74:e1:40:cd:81:93:08:40:66:34:05:40:66:26:
2a:e2:cc:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 16 16:17:46 2023 by rpki-client on console-fra.rpki-client.org