Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/938abd-1019-4e7a-aa82-ee1126a28195/1/kuyHDngpJTjDsT-pxvpqGYnaPAg.roa
File: kuyHDngpJTjDsT-pxvpqGYnaPAg.roa (raw, json)
Hash identifier: UpyDeisQIZ8hL2ZVk06h9OF4MaG87t1dWeP6z3C1WqM=
Subject key identifier: 92:EC:87:0E:78:29:25:38:C3:B1:3F:A9:C6:FA:6A:19:89:DA:3C:08
Certificate issuer: /CN=574cca899ef5bf4237f0f6bdd1779221b20052f3
Certificate serial: 018CC86F9BB6B0325849FA826DFA3802988C
Authority key identifier: 57:4C:CA:89:9E:F5:BF:42:37:F0:F6:BD:D1:77:92:21:B2:00:52:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V0zKiZ71v0I38Pa90XeSIbIAUvM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/938abd-1019-4e7a-aa82-ee1126a28195/1/kuyHDngpJTjDsT-pxvpqGYnaPAg.roa
Signing time: Tue 02 Jan 2024 04:30:06 +0000
ROA not before: Tue 02 Jan 2024 04:30:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12365
IP address blocks: 185.78.136.0/22 maxlen: 22
89.146.84.0/22 maxlen: 22
89.146.80.0/22 maxlen: 22
82.215.92.0/22 maxlen: 22
89.146.88.0/22 maxlen: 22
82.215.112.0/22 maxlen: 22
89.146.96.0/22 maxlen: 22
89.146.92.0/22 maxlen: 22
89.146.104.0/22 maxlen: 22
82.215.116.0/22 maxlen: 22
81.95.224.0/20 maxlen: 20
89.146.100.0/22 maxlen: 22
89.146.112.0/22 maxlen: 22
82.215.124.0/22 maxlen: 22
89.146.108.0/22 maxlen: 22
82.215.120.0/22 maxlen: 22
89.146.116.0/22 maxlen: 22
89.146.124.0/22 maxlen: 22
89.146.120.0/22 maxlen: 22
82.215.68.0/23 maxlen: 23
82.215.66.0/23 maxlen: 23
89.146.64.0/22 maxlen: 22
82.215.77.0/24 maxlen: 24
82.215.78.0/23 maxlen: 23
82.215.72.0/22 maxlen: 22
82.215.85.0/24 maxlen: 24
89.146.68.0/22 maxlen: 22
89.146.64.0/18 maxlen: 18
82.215.80.0/22 maxlen: 22
89.146.76.0/22 maxlen: 22
82.215.88.0/21 maxlen: 21
82.215.88.0/22 maxlen: 22
82.215.86.0/23 maxlen: 23
89.146.72.0/22 maxlen: 22
2a00:8841::/32 maxlen: 32
2a00:8840:f000::/36 maxlen: 36
2a00:8840::/32 maxlen: 32
2a00:8842::/32 maxlen: 32
2a00:8846::/32 maxlen: 32
2a00:8843::/32 maxlen: 32
2a00:8844::/32 maxlen: 32
2a00:8845::/32 maxlen: 32
2a00:8847::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 28 Aug 2024 03:58:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:9b:b6:b0:32:58:49:fa:82:6d:fa:38:02:98:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=574cca899ef5bf4237f0f6bdd1779221b20052f3
Validity
Not Before: Jan 2 04:30:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=92ec870e78292538c3b13fa9c6fa6a1989da3c08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:0b:31:7c:66:cf:bb:94:df:29:0d:ae:53:2a:
68:db:de:e4:63:a0:1c:40:55:ec:40:56:f0:aa:17:
d4:1c:be:d4:e0:76:94:da:8d:df:bf:fe:51:dd:19:
74:1c:a5:97:9e:d4:f3:78:67:98:a8:c0:b3:d1:7e:
fb:26:26:5a:0b:94:9b:ac:23:cb:fd:b6:00:cc:b5:
21:80:db:72:18:a7:a3:9b:ce:08:6a:e9:cc:43:1d:
09:ec:85:c2:63:dd:17:a2:0d:7e:fc:e9:76:fa:69:
bc:62:c2:98:3e:83:9e:6f:9c:01:6d:b2:f4:ca:b6:
78:94:ee:89:f6:25:0b:8e:b9:44:3b:13:0a:42:fd:
63:03:4d:91:95:9f:6c:45:7c:f4:b2:d7:55:15:39:
11:40:bc:3d:98:00:52:7f:c4:bb:2f:c5:15:d7:19:
9d:90:26:54:68:9d:01:91:31:33:84:ba:f2:63:6c:
9e:b6:70:7a:f4:b0:45:0a:80:0e:bc:8d:34:d4:f2:
f8:8a:60:9f:c6:3a:96:29:88:21:b3:30:91:53:d7:
c2:5e:77:1f:45:04:7a:37:55:ef:30:2e:2e:0c:b9:
12:ab:e6:9f:7a:8f:bd:e2:7a:97:b9:08:da:af:a3:
27:1f:9c:1f:24:ff:41:4d:78:aa:17:e3:91:7b:2f:
fc:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:EC:87:0E:78:29:25:38:C3:B1:3F:A9:C6:FA:6A:19:89:DA:3C:08
X509v3 Authority Key Identifier:
keyid:57:4C:CA:89:9E:F5:BF:42:37:F0:F6:BD:D1:77:92:21:B2:00:52:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V0zKiZ71v0I38Pa90XeSIbIAUvM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/938abd-1019-4e7a-aa82-ee1126a28195/1/kuyHDngpJTjDsT-pxvpqGYnaPAg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/938abd-1019-4e7a-aa82-ee1126a28195/1/V0zKiZ71v0I38Pa90XeSIbIAUvM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.95.224.0/20
82.215.66.0-82.215.69.255
82.215.72.0/22
82.215.77.0-82.215.83.255
82.215.85.0-82.215.95.255
82.215.112.0/20
89.146.64.0/18
185.78.136.0/22
IPv6:
2a00:8840::/29
Signature Algorithm: sha256WithRSAEncryption
41:07:8c:9e:a8:76:f9:79:e1:e4:57:aa:62:19:e2:e0:8f:2e:
7c:dc:ca:1e:c1:ab:e8:a2:0c:50:a9:fc:ac:9c:50:61:df:9e:
9c:ba:f5:64:0f:c7:59:60:46:ec:b9:41:57:11:85:db:06:f6:
fe:bc:e2:3b:70:24:c2:e1:a4:12:da:86:d6:1a:f9:45:f5:c3:
69:61:f3:af:a3:2c:35:a8:91:ae:eb:43:56:41:fc:1c:20:da:
11:9c:99:56:3b:04:f5:36:10:1a:77:de:cb:80:6c:ea:44:4f:
61:a4:17:b7:b7:9c:9b:a1:a9:bf:22:65:4c:b1:27:c3:ba:9e:
31:6b:f9:04:b6:93:91:20:56:b3:3a:c6:ba:ff:82:22:15:d0:
c4:e6:9e:25:c1:d0:ba:99:65:74:fd:c7:c3:85:c1:01:0d:f4:
f5:86:48:25:b4:35:2c:ad:4b:b1:27:c0:8a:57:2b:17:b1:e1:
67:49:0e:e4:d2:b6:7b:e7:33:68:da:00:1e:74:d1:9a:cc:8f:
cb:86:4a:39:9b:ce:0a:4d:82:5e:66:46:63:ac:2d:a5:20:25:
97:87:a2:7b:8d:24:53:b3:43:86:49:0a:2c:4c:63:0d:0a:94:
4d:af:da:c4:50:f4:88:80:5d:14:c6:22:d2:8c:cf:0d:a5:12:
6a:e2:86:00
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgISAYzIb5u2sDJYSfqCbfo4ApiMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3NGNjYTg5OWVmNWJmNDIzN2YwZjZiZGQxNzc5MjIxYjIw
MDUyZjMwHhcNMjQwMTAyMDQzMDA2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MmVjODcwZTc4MjkyNTM4YzNiMTNmYTljNmZhNmExOTg5ZGEzYzA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlgsxfGbPu5TfKQ2uUypo297kY6Ac
QFXsQFbwqhfUHL7U4HaU2o3fv/5R3Rl0HKWXntTzeGeYqMCz0X77JiZaC5SbrCPL
/bYAzLUhgNtyGKejm84IaunMQx0J7IXCY90Xog1+/Ol2+mm8YsKYPoOeb5wBbbL0
yrZ4lO6J9iULjrlEOxMKQv1jA02RlZ9sRXz0stdVFTkRQLw9mABSf8S7L8UV1xmd
kCZUaJ0BkTEzhLryY2yetnB69LBFCoAOvI001PL4imCfxjqWKYghszCRU9fCXncf
RQR6N1XvMC4uDLkSq+afeo+94nqXuQjar6MnH5wfJP9BTXiqF+ORey/8DQIDAQAB
o4ICWjCCAlYwHQYDVR0OBBYEFJLshw54KSU4w7E/qcb6ahmJ2jwIMB8GA1UdIwQY
MBaAFFdMyome9b9CN/D2vdF3kiGyAFLzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVjB6S2laNzF2MEkzOFBhOTBYZVNJYklBVXZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC85MzhhYmQtMTAxOS00ZTdhLWFhODIt
ZWUxMTI2YTI4MTk1LzEva3V5SERuZ3BKVGpEc1QtcHh2cHFHWW5hUEFnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC85MzhhYmQtMTAxOS00ZTdhLWFhODItZWUxMTI2YTI4MTk1
LzEvVjB6S2laNzF2MEkzOFBhOTBYZVNJYklBVXZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHAGCCsGAQUFBwEHAQH/BGEwXzBOBAIAATBIAwQEUV/gMAwD
BAFS10IDBAFS10QDBAJS10gwDAMEAFLXTQMEAlLXUDAMAwQAUtdVAwQFUtdAAwQE
UtdwAwQGWZJAAwQCuU6IMA0EAgACMAcDBQMqAIhAMA0GCSqGSIb3DQEBCwUAA4IB
AQBBB4yeqHb5eeHkV6piGeLgjy583MoewavoogxQqfysnFBh356cuvVkD8dZYEbs
uUFXEYXbBvb+vOI7cCTC4aQS2obWGvlF9cNpYfOvoyw1qJGu60NWQfwcINoRnJlW
OwT1NhAad97LgGzqRE9hpBe3t5yboam/ImVMsSfDup4xa/kEtpORIFazOsa6/4Ii
FdDE5p4lwdC6mWV0/cfDhcEBDfT1hkgltDUsrUuxJ8CKVysXseFnSQ7k0rZ75zNo
2gAedNGazI/Lhko5m84KTYJeZkZjrC2lICWXh6J7jSRTs0OGSQosTGMNCpRNr9rE
UPSIgF0UxiLSjM8NpRJq4oYA
Generated at Wed Aug 28 06:15:28 2024 by rpki-client on console-fra.rpki-client.org