Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/hSjuQQIC1Jwz6FTKGWtYDzYhj-Y.roa
File: hSjuQQIC1Jwz6FTKGWtYDzYhj-Y.roa (raw, json)
Hash identifier: HeG+gCH/K1gRbY2SPUi0UuUjgtP8ujq+Rb01afY1pPY=
Subject key identifier: 85:28:EE:41:02:02:D4:9C:33:E8:54:CA:19:6B:58:0F:36:21:8F:E6
Certificate issuer: /CN=f0c104041691dc384f3b1a8cdf95c96628ea6daf
Certificate serial: 0197BCC34215023A813FF01784F235D5A6B9
Authority key identifier: F0:C1:04:04:16:91:DC:38:4F:3B:1A:8C:DF:95:C9:66:28:EA:6D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8MEEBBaR3DhPOxqM35XJZijqba8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/hSjuQQIC1Jwz6FTKGWtYDzYhj-Y.roa
Signing time: Sun 29 Jun 2025 17:36:42 +0000
ROA not before: Sun 29 Jun 2025 17:36:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42337
IP address blocks: 95.38.96.0/21 maxlen: 21
95.38.96.0/24 maxlen: 24
95.38.99.0/24 maxlen: 24
95.38.100.0/24 maxlen: 24
95.38.101.0/24 maxlen: 24
95.38.102.0/24 maxlen: 24
95.38.103.0/24 maxlen: 24
95.38.104.0/22 maxlen: 22
95.38.104.0/24 maxlen: 24
95.38.105.0/24 maxlen: 24
95.38.106.0/24 maxlen: 24
95.38.107.0/24 maxlen: 24
95.38.130.0/23 maxlen: 23
95.38.130.0/24 maxlen: 24
95.38.131.0/24 maxlen: 24
95.38.132.0/22 maxlen: 22
95.38.132.0/24 maxlen: 24
95.38.133.0/24 maxlen: 24
95.38.134.0/24 maxlen: 24
95.38.135.0/24 maxlen: 24
95.38.136.0/22 maxlen: 22
95.38.136.0/24 maxlen: 24
95.38.137.0/24 maxlen: 24
95.38.138.0/24 maxlen: 24
95.38.139.0/24 maxlen: 24
95.38.140.0/22 maxlen: 22
95.38.140.0/24 maxlen: 24
95.38.141.0/24 maxlen: 24
95.38.142.0/24 maxlen: 24
95.38.143.0/24 maxlen: 24
95.38.152.0/21 maxlen: 21
95.38.152.0/24 maxlen: 24
95.38.153.0/24 maxlen: 24
95.38.154.0/24 maxlen: 24
95.38.155.0/24 maxlen: 24
95.38.156.0/24 maxlen: 24
95.38.157.0/24 maxlen: 24
95.38.158.0/24 maxlen: 24
95.38.159.0/24 maxlen: 24
95.38.168.0/22 maxlen: 22
95.38.168.0/24 maxlen: 24
95.38.169.0/24 maxlen: 24
95.38.170.0/24 maxlen: 24
95.38.171.0/24 maxlen: 24
95.38.174.0/24 maxlen: 24
95.38.200.0/22 maxlen: 22
95.38.200.0/24 maxlen: 24
95.38.201.0/24 maxlen: 24
95.38.202.0/24 maxlen: 24
95.38.203.0/24 maxlen: 24
95.38.208.0/22 maxlen: 22
95.38.208.0/24 maxlen: 24
95.38.209.0/24 maxlen: 24
95.38.210.0/24 maxlen: 24
95.38.211.0/24 maxlen: 24
95.38.240.0/21 maxlen: 21
95.38.240.0/24 maxlen: 24
95.38.241.0/24 maxlen: 24
95.38.242.0/24 maxlen: 24
95.38.243.0/24 maxlen: 24
95.38.244.0/24 maxlen: 24
95.38.245.0/24 maxlen: 24
95.38.246.0/24 maxlen: 24
95.38.247.0/24 maxlen: 24
95.38.248.0/22 maxlen: 22
95.38.248.0/24 maxlen: 24
95.38.249.0/24 maxlen: 24
95.38.250.0/24 maxlen: 24
95.38.251.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 30 Jun 2025 10:48:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:bc:c3:42:15:02:3a:81:3f:f0:17:84:f2:35:d5:a6:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0c104041691dc384f3b1a8cdf95c96628ea6daf
Validity
Not Before: Jun 29 17:36:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8528ee410202d49c33e854ca196b580f36218fe6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:f3:61:64:1a:0e:24:b4:81:73:64:96:09:71:
60:25:83:a0:b2:f6:a1:f9:34:02:ff:45:25:be:21:
bd:b8:09:be:38:ad:ce:2e:03:06:41:31:48:34:e7:
e9:83:ff:f3:cd:9b:70:4c:3f:57:5c:ea:bd:61:b9:
2e:e5:a0:15:79:46:13:5a:b3:1a:e7:19:24:5c:12:
0b:2d:ce:55:94:f7:d4:65:0f:b0:a1:cc:66:5b:41:
49:48:e7:c9:58:13:d4:df:b1:0a:54:1a:f0:97:6b:
61:e4:4f:48:19:b0:1b:66:48:2e:5d:f6:2f:ec:89:
52:60:2d:c2:85:fe:db:89:66:1e:55:38:a9:4b:48:
b2:ef:ed:21:89:c8:da:26:8c:a0:e3:02:30:6f:65:
9d:6e:5e:cf:ef:34:89:26:be:78:9b:5a:3b:20:3f:
cf:52:72:31:d6:c3:0a:5a:03:4c:f5:61:9f:e9:7d:
93:c0:65:79:2c:e6:ef:35:09:3d:11:9e:79:7a:c2:
8b:c9:63:87:77:5c:df:34:94:ea:29:9a:5f:da:e8:
37:91:eb:ca:92:54:24:8e:9b:02:a6:17:8c:b9:db:
28:9d:6b:c1:95:f9:1a:f0:74:93:4d:82:44:a6:65:
2a:0c:76:87:c3:6e:9a:37:ad:65:c4:fb:b6:33:4a:
9f:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:28:EE:41:02:02:D4:9C:33:E8:54:CA:19:6B:58:0F:36:21:8F:E6
X509v3 Authority Key Identifier:
keyid:F0:C1:04:04:16:91:DC:38:4F:3B:1A:8C:DF:95:C9:66:28:EA:6D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8MEEBBaR3DhPOxqM35XJZijqba8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/hSjuQQIC1Jwz6FTKGWtYDzYhj-Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.38.96.0-95.38.107.255
95.38.130.0-95.38.143.255
95.38.152.0/21
95.38.168.0/22
95.38.174.0/24
95.38.200.0/22
95.38.208.0/22
95.38.240.0-95.38.251.255
Signature Algorithm: sha256WithRSAEncryption
23:e6:67:1f:d3:9e:a9:ab:38:dd:72:29:72:93:36:65:8a:04:
33:39:0f:7e:24:32:43:0b:52:ab:7e:1f:25:e2:5b:a3:ad:8d:
6f:d6:4b:18:f4:93:e6:b2:f3:f7:9b:5d:f9:c8:03:c9:e9:da:
24:f3:6b:ea:b3:2c:39:2a:ff:ab:49:1e:cc:b5:ae:e5:19:d0:
22:ee:00:f5:09:77:af:da:e0:e0:7e:21:0a:92:52:95:b7:f2:
6e:24:80:6f:15:b0:7f:e6:d1:5c:67:00:15:d7:2f:49:58:47:
d2:97:24:d9:2c:59:a6:30:29:04:fe:1a:e0:41:e1:77:68:49:
9a:ec:89:39:b6:58:bd:b6:99:aa:8e:a8:88:50:bd:81:e1:00:
9b:a0:20:a8:18:1f:1b:4e:b6:44:2f:95:56:5d:28:51:38:d8:
81:9a:e0:ef:fd:9e:25:91:cc:85:df:f3:fe:51:15:99:d2:cc:
2d:2c:a2:42:41:6a:54:5a:c8:53:17:a0:ff:af:02:8d:07:d5:
f3:7b:2f:58:b6:a1:0e:72:a7:c1:f1:8b:1a:37:ac:a4:17:00:
9b:88:34:65:69:c0:4d:54:c2:5a:c7:b2:cf:d0:93:3a:62:85:
eb:35:e0:e2:cb:60:f4:87:f3:06:8b:c3:c7:d4:ba:93:d0:ee:
8e:84:80:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 02:05:43 2025 by rpki-client