Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/90add8-f3be-48a8-9e92-3b32c19f6385/1/GzsEl2l1KIE7hSqpfn4l8-eu-TE.roa
File: GzsEl2l1KIE7hSqpfn4l8-eu-TE.roa (raw, json)
Hash identifier: jVIVVi1LBIzRLj4gcfMuWfYxl3ntzB7f20Nr2PWnJSY=
Subject key identifier: 1B:3B:04:97:69:75:28:81:3B:85:2A:A9:7E:7E:25:F3:E7:AE:F9:31
Certificate issuer: /CN=241455f852c6ad4a0412e5ea308aa66172d1d147
Certificate serial: 01856FE712D0C9636DFC590081D6A00F03E3
Authority key identifier: 24:14:55:F8:52:C6:AD:4A:04:12:E5:EA:30:8A:A6:61:72:D1:D1:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JBRV-FLGrUoEEuXqMIqmYXLR0Uc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/90add8-f3be-48a8-9e92-3b32c19f6385/1/GzsEl2l1KIE7hSqpfn4l8-eu-TE.roa
Signing time: Mon 02 Jan 2023 00:34:52 +0000
ROA not before: Mon 02 Jan 2023 00:34:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51569
IP address blocks: 185.159.55.0/24 maxlen: 24
185.159.52.0/22 maxlen: 22
185.159.52.0/24 maxlen: 24
185.159.53.0/24 maxlen: 24
185.159.54.0/24 maxlen: 24
46.20.82.0/24 maxlen: 24
46.20.80.0/20 maxlen: 20
46.20.83.0/24 maxlen: 24
46.20.84.0/24 maxlen: 24
46.20.85.0/24 maxlen: 24
46.20.80.0/24 maxlen: 24
46.20.81.0/24 maxlen: 24
46.20.89.0/24 maxlen: 24
46.20.90.0/24 maxlen: 24
46.20.91.0/24 maxlen: 24
46.20.86.0/24 maxlen: 24
46.20.87.0/24 maxlen: 24
46.20.88.0/24 maxlen: 24
46.20.92.0/24 maxlen: 24
46.20.93.0/24 maxlen: 24
46.20.94.0/24 maxlen: 24
46.20.95.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:29:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:e7:12:d0:c9:63:6d:fc:59:00:81:d6:a0:0f:03:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=241455f852c6ad4a0412e5ea308aa66172d1d147
Validity
Not Before: Jan 2 00:34:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1b3b0497697528813b852aa97e7e25f3e7aef931
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:43:8e:62:0c:68:93:4f:45:9d:0d:ba:13:6f:
5b:d5:77:c2:7c:05:3c:c0:4d:c1:c8:c5:4e:26:b5:
25:c0:95:e9:9c:1f:8a:de:aa:b8:c1:12:95:c4:f6:
47:cf:9a:0d:02:c7:56:ca:ba:c2:a5:14:d5:3c:59:
21:71:0c:a3:d4:da:0e:fa:34:aa:55:2e:42:c1:8a:
46:92:af:06:fc:d4:62:13:ff:7a:2f:74:bb:8c:bd:
3f:b5:14:a5:a5:ad:97:bb:da:63:5d:b6:2b:a4:ae:
04:c5:c7:72:54:b3:4e:8c:aa:86:11:35:7e:36:1f:
e2:74:a5:d7:b3:61:af:4c:60:93:c5:2e:1b:18:81:
ea:c7:63:9f:f7:80:a5:5c:cd:a1:51:97:21:b6:fe:
93:0d:de:4b:fd:8a:52:f9:bd:b7:49:41:4f:d2:2b:
69:42:64:95:9b:4f:4c:15:12:39:d0:a4:e1:80:96:
1a:35:1b:58:06:88:3b:fb:c5:b9:8e:74:c6:0f:d8:
a3:bd:d4:9d:85:22:c0:50:38:9e:c5:59:a0:f9:52:
e6:35:12:76:11:9e:b5:8d:2d:0c:1d:89:c1:59:15:
52:f6:a5:85:46:30:06:29:8b:2b:1a:5c:b5:bf:29:
b1:99:02:42:b7:f2:30:f2:13:b7:5e:5a:7d:a8:8c:
55:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:3B:04:97:69:75:28:81:3B:85:2A:A9:7E:7E:25:F3:E7:AE:F9:31
X509v3 Authority Key Identifier:
keyid:24:14:55:F8:52:C6:AD:4A:04:12:E5:EA:30:8A:A6:61:72:D1:D1:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JBRV-FLGrUoEEuXqMIqmYXLR0Uc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/90add8-f3be-48a8-9e92-3b32c19f6385/1/GzsEl2l1KIE7hSqpfn4l8-eu-TE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/90add8-f3be-48a8-9e92-3b32c19f6385/1/JBRV-FLGrUoEEuXqMIqmYXLR0Uc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.20.80.0/20
185.159.52.0/22
Signature Algorithm: sha256WithRSAEncryption
42:8e:bb:88:3f:f1:0b:99:3c:18:34:c7:94:9c:91:b6:25:3e:
42:cb:0e:01:f3:92:33:30:79:a2:3d:fd:c8:b4:a3:d6:0f:13:
df:8e:f3:19:94:4e:18:c2:1a:4d:72:76:e0:53:1b:c3:ba:fc:
61:50:7d:77:ea:a1:d3:ac:48:db:fe:e9:10:ff:75:e6:96:ed:
25:9b:65:19:01:63:d6:a4:51:8f:aa:f0:cf:bb:35:3a:2e:95:
f3:e9:ad:51:ed:5a:f2:c3:2d:c4:e1:32:f4:fd:7c:aa:17:7e:
56:cf:c4:4e:fc:8a:1f:8e:d3:bb:da:72:9d:56:c4:17:2c:6a:
6f:9c:69:0c:85:49:41:79:d7:39:57:f1:87:1f:eb:35:02:06:
c7:17:f4:9e:59:07:76:89:12:6d:e5:f6:74:91:58:23:d8:58:
52:fa:ac:d9:96:db:06:93:4d:54:78:28:83:fe:11:ce:8e:1c:
1e:42:6b:ba:fb:1b:73:c3:e2:25:0b:15:3a:8d:d5:b0:52:af:
87:23:5e:80:7d:02:a6:8c:9c:20:d6:75:48:62:ac:8c:12:0d:
84:16:40:15:b7:ec:60:d8:ba:3d:db:21:5f:dc:13:b5:f5:71:
3a:f3:07:7a:69:92:0b:17:5f:c0:28:a9:93:55:e5:91:ca:40:
a3:2f:f1:56
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVv5xLQyWNt/FkAgdagDwPjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0MTQ1NWY4NTJjNmFkNGEwNDEyZTVlYTMwOGFhNjYxNzJk
MWQxNDcwHhcNMjMwMTAyMDAzNDUyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYjNiMDQ5NzY5NzUyODgxM2I4NTJhYTk3ZTdlMjVmM2U3YWVmOTMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsUOOYgxok09FnQ26E29b1XfCfAU8
wE3ByMVOJrUlwJXpnB+K3qq4wRKVxPZHz5oNAsdWyrrCpRTVPFkhcQyj1NoO+jSq
VS5CwYpGkq8G/NRiE/96L3S7jL0/tRSlpa2Xu9pjXbYrpK4ExcdyVLNOjKqGETV+
Nh/idKXXs2GvTGCTxS4bGIHqx2Of94ClXM2hUZchtv6TDd5L/YpS+b23SUFP0itp
QmSVm09MFRI50KThgJYaNRtYBog7+8W5jnTGD9ijvdSdhSLAUDiexVmg+VLmNRJ2
EZ61jS0MHYnBWRVS9qWFRjAGKYsrGly1vymxmQJCt/Iw8hO3Xlp9qIxVGQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFBs7BJdpdSiBO4UqqX5+JfPnrvkxMB8GA1UdIwQY
MBaAFCQUVfhSxq1KBBLl6jCKpmFy0dFHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSkJSVi1GTEdyVW9FRXVYcU1JcW1ZWExSMFVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi85MGFkZDgtZjNiZS00OGE4LTllOTIt
M2IzMmMxOWY2Mzg1LzEvR3pzRWwybDFLSUU3aFNxcGZuNGw4LWV1LVRFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi85MGFkZDgtZjNiZS00OGE4LTllOTItM2IzMmMxOWY2Mzg1
LzEvSkJSVi1GTEdyVW9FRXVYcU1JcW1ZWExSMFVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQELhRQAwQC
uZ80MA0GCSqGSIb3DQEBCwUAA4IBAQBCjruIP/ELmTwYNMeUnJG2JT5Cyw4B85Iz
MHmiPf3ItKPWDxPfjvMZlE4YwhpNcnbgUxvDuvxhUH136qHTrEjb/ukQ/3Xmlu0l
m2UZAWPWpFGPqvDPuzU6LpXz6a1R7Vrywy3E4TL0/XyqF35Wz8RO/IofjtO72nKd
VsQXLGpvnGkMhUlBedc5V/GHH+s1AgbHF/SeWQd2iRJt5fZ0kVgj2FhS+qzZltsG
k01UeCiD/hHOjhweQmu6+xtzw+IlCxU6jdWwUq+HI16AfQKmjJwg1nVIYqyMEg2E
FkAVt+xg2Lo92yFf3BO19XE68wd6aZILF1/AKKmTVeWRykCjL/FW
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:47 2024 by rpki-client on console-ams.rpki-client.org