Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/741f06-c3d1-483b-b908-28a4953f0530/1/gsEMS6AWWSQRybDnXQUIBTcx6wE.roa
File: gsEMS6AWWSQRybDnXQUIBTcx6wE.roa (raw, json)
Hash identifier: /gkhpIC/yaOWEQyOitDg7sfBaTdmDfyYq4oIHCrjmmo=
Subject key identifier: 82:C1:0C:4B:A0:16:59:24:11:C9:B0:E7:5D:05:08:05:37:31:EB:01
Certificate issuer: /CN=f764eed15c52b4c8110a222963dc7b7d4ba2d146
Certificate serial: 01856F14AAD7DF2952302220FA5AF26781C6
Authority key identifier: F7:64:EE:D1:5C:52:B4:C8:11:0A:22:29:63:DC:7B:7D:4B:A2:D1:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/92Tu0VxStMgRCiIpY9x7fUui0UY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/741f06-c3d1-483b-b908-28a4953f0530/1/gsEMS6AWWSQRybDnXQUIBTcx6wE.roa
Signing time: Sun 01 Jan 2023 20:45:03 +0000
ROA not before: Sun 01 Jan 2023 20:45:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 52048
IP address blocks: 46.183.219.0/24 maxlen: 24
46.183.218.0/24 maxlen: 24
46.183.217.0/24 maxlen: 24
46.183.216.0/24 maxlen: 24
46.183.216.0/21 maxlen: 21
46.183.223.0/24 maxlen: 24
46.183.222.0/24 maxlen: 24
46.183.221.0/24 maxlen: 24
46.183.220.0/24 maxlen: 24
84.38.135.0/24 maxlen: 24
84.38.134.0/24 maxlen: 24
84.38.132.0/24 maxlen: 24
84.38.130.0/24 maxlen: 24
2a02:4840:2::/48 maxlen: 48
2a02:4840:1::/48 maxlen: 48
2a02:4840:1000::/48 maxlen: 48
2a02:4840::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:30:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:14:aa:d7:df:29:52:30:22:20:fa:5a:f2:67:81:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f764eed15c52b4c8110a222963dc7b7d4ba2d146
Validity
Not Before: Jan 1 20:45:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=82c10c4ba016592411c9b0e75d0508053731eb01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:25:d4:b8:44:84:ff:a4:44:58:0f:0d:b5:74:
ce:24:a7:fd:bb:45:31:36:52:1e:3a:03:6e:5f:8e:
48:27:6b:ad:7d:d0:72:3e:d9:bc:20:78:0a:52:75:
84:fd:4e:94:80:66:7d:99:d6:63:81:b0:06:f8:fc:
ab:f4:83:2f:d6:23:dd:42:ce:1d:e4:cd:c6:08:aa:
de:45:87:89:3d:b7:a1:e2:eb:77:01:d4:58:b8:31:
b6:7b:a0:ba:ff:2d:e0:4e:4a:e4:0e:24:85:9a:88:
ff:6a:68:e9:11:3a:d7:0d:6b:0c:99:9c:15:cf:87:
fc:4b:c4:77:44:41:c2:b4:e4:e2:02:46:6a:e0:81:
1d:12:76:7a:8a:aa:ce:63:c4:f8:75:3b:48:5d:41:
35:ea:de:a9:80:9f:ee:7e:0e:b1:3f:53:1a:86:0a:
63:39:94:d6:17:5a:08:7c:1a:bd:b6:b8:3d:6e:96:
97:0b:8c:93:dd:23:01:a8:9d:73:66:31:a5:a0:37:
32:75:88:b7:51:5a:63:02:d3:92:8d:09:5e:5c:c5:
9f:c0:2f:a0:8c:22:3a:06:5d:96:2e:a1:6e:2b:61:
ae:71:36:69:4a:18:56:5e:90:e9:62:69:35:95:77:
bd:f6:2c:15:52:b5:82:14:46:77:b1:96:2d:50:39:
9c:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:C1:0C:4B:A0:16:59:24:11:C9:B0:E7:5D:05:08:05:37:31:EB:01
X509v3 Authority Key Identifier:
keyid:F7:64:EE:D1:5C:52:B4:C8:11:0A:22:29:63:DC:7B:7D:4B:A2:D1:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/92Tu0VxStMgRCiIpY9x7fUui0UY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/741f06-c3d1-483b-b908-28a4953f0530/1/gsEMS6AWWSQRybDnXQUIBTcx6wE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/741f06-c3d1-483b-b908-28a4953f0530/1/92Tu0VxStMgRCiIpY9x7fUui0UY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.183.216.0/21
84.38.130.0/24
84.38.132.0/24
84.38.134.0/23
IPv6:
2a02:4840::-2a02:4840:2:ffff:ffff:ffff:ffff:ffff
2a02:4840:1000::/48
Signature Algorithm: sha256WithRSAEncryption
5f:bf:3e:52:2d:27:34:4b:a0:54:ef:9f:65:12:22:a7:f5:2d:
44:b7:30:07:8d:be:a5:d5:9d:f4:76:2f:52:72:c6:79:67:ab:
80:07:99:67:59:bd:d2:44:30:8a:55:5c:0f:ee:15:3c:d3:a7:
bc:23:11:6f:28:ab:25:81:ad:be:88:a8:aa:4f:6a:59:8b:c2:
e6:2f:e6:8d:7e:80:38:34:55:05:2d:c3:5d:d8:fc:ff:24:4b:
80:81:0a:3b:08:5c:c8:5c:46:8a:99:40:f0:64:24:97:f8:2f:
4e:5b:c0:17:e2:0a:b7:99:3e:7a:4a:ae:55:b8:2a:7b:af:ef:
cc:48:8b:fa:6c:ce:c9:5d:dd:ac:cb:16:90:65:63:98:9d:5c:
06:b7:9c:16:b1:a0:a3:4e:4e:d7:54:fc:fd:9e:ed:a3:8a:d0:
c5:b1:8c:f1:6e:27:e3:6f:75:f6:31:e1:2e:e8:02:af:72:87:
04:43:79:b8:41:b9:61:b0:8e:db:88:27:9c:7b:ef:74:eb:4e:
91:43:96:f0:63:02:2d:d1:c7:a9:c9:e5:b0:a5:6d:9b:e7:b1:
e6:d3:b0:1d:f9:79:2d:be:0b:79:5d:68:c8:10:53:b7:e9:c2:
4f:fb:3d:62:46:4c:ca:db:22:af:2b:b5:15:47:ef:ad:31:de:
3c:b8:c4:e2
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgISAYVvFKrX3ylSMCIg+lryZ4HGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3NjRlZWQxNWM1MmI0YzgxMTBhMjIyOTYzZGM3YjdkNGJh
MmQxNDYwHhcNMjMwMTAxMjA0NTAzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MmMxMGM0YmEwMTY1OTI0MTFjOWIwZTc1ZDA1MDgwNTM3MzFlYjAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnyXUuESE/6REWA8NtXTOJKf9u0Ux
NlIeOgNuX45IJ2utfdByPtm8IHgKUnWE/U6UgGZ9mdZjgbAG+Pyr9IMv1iPdQs4d
5M3GCKreRYeJPbeh4ut3AdRYuDG2e6C6/y3gTkrkDiSFmoj/amjpETrXDWsMmZwV
z4f8S8R3REHCtOTiAkZq4IEdEnZ6iqrOY8T4dTtIXUE16t6pgJ/ufg6xP1Mahgpj
OZTWF1oIfBq9trg9bpaXC4yT3SMBqJ1zZjGloDcydYi3UVpjAtOSjQleXMWfwC+g
jCI6Bl2WLqFuK2GucTZpShhWXpDpYmk1lXe99iwVUrWCFEZ3sZYtUDmcNQIDAQAB
o4ICPjCCAjowHQYDVR0OBBYEFILBDEugFlkkEcmw510FCAU3MesBMB8GA1UdIwQY
MBaAFPdk7tFcUrTIEQoiKWPce31LotFGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOTJUdTBWeFN0TWdSQ2lJcFk5eDdmVXVpMFVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi83NDFmMDYtYzNkMS00ODNiLWI5MDgt
MjhhNDk1M2YwNTMwLzEvZ3NFTVM2QVdXU1FSeWJEblhRVUlCVGN4NndFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi83NDFmMDYtYzNkMS00ODNiLWI5MDgtMjhhNDk1M2YwNTMw
LzEvOTJUdTBWeFN0TWdSQ2lJcFk5eDdmVXVpMFVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFQGCCsGAQUFBwEHAQH/BEUwQzAeBAIAATAYAwQDLrfYAwQA
VCaCAwQAVCaEAwQBVCaGMCEEAgACMBswEAMFBioCSEADBwAqAkhAAAIDBwAqAkhA
EAAwDQYJKoZIhvcNAQELBQADggEBAF+/PlItJzRLoFTvn2USIqf1LUS3MAeNvqXV
nfR2L1Jyxnlnq4AHmWdZvdJEMIpVXA/uFTzTp7wjEW8oqyWBrb6IqKpPalmLwuYv
5o1+gDg0VQUtw13Y/P8kS4CBCjsIXMhcRoqZQPBkJJf4L05bwBfiCreZPnpKrlW4
Knuv78xIi/pszsld3azLFpBlY5idXAa3nBaxoKNOTtdU/P2e7aOK0MWxjPFuJ+Nv
dfYx4S7oAq9yhwRDebhBuWGwjtuIJ5x773TrTpFDlvBjAi3Rx6nJ5bClbZvnsebT
sB35eS2+C3ldaMgQU7fpwk/7PWJGTMrbIq8rtRVH760x3jy4xOI=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:37 2024 by rpki-client on console-fra.rpki-client.org