Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8CwSnZmnirT9SmdoBb0VNN1HJ-g.roa
File: 8CwSnZmnirT9SmdoBb0VNN1HJ-g.roa (raw, json)
Hash identifier: 3Hzrwefy3sRzPUehLMmcSaxY4yDx/bHuRGrIqmIOs00=
Subject key identifier: F0:2C:12:9D:99:A7:8A:B4:FD:4A:67:68:05:BD:15:34:DD:47:27:E8
Certificate issuer: /CN=f0c104041691dc384f3b1a8cdf95c96628ea6daf
Certificate serial: 0189B4E8B4E0D925AE866277AA666B303788
Authority key identifier: F0:C1:04:04:16:91:DC:38:4F:3B:1A:8C:DF:95:C9:66:28:EA:6D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8MEEBBaR3DhPOxqM35XJZijqba8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8CwSnZmnirT9SmdoBb0VNN1HJ-g.roa
Signing time: Wed 02 Aug 2023 06:21:36 +0000
ROA not before: Wed 02 Aug 2023 06:21:36 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41881
IP address blocks: 95.38.240.0/21 maxlen: 21
95.38.253.0/24 maxlen: 24
95.38.252.0/24 maxlen: 24
95.38.255.0/24 maxlen: 24
95.38.254.0/24 maxlen: 24
95.38.192.0/21 maxlen: 21
95.38.192.0/24 maxlen: 24
95.38.199.0/24 maxlen: 24
95.38.194.0/24 maxlen: 24
95.38.195.0/24 maxlen: 24
95.38.193.0/24 maxlen: 24
95.38.197.0/24 maxlen: 24
95.38.196.0/24 maxlen: 24
95.38.200.0/22 maxlen: 22
95.38.201.0/24 maxlen: 24
95.38.202.0/24 maxlen: 24
95.38.200.0/24 maxlen: 24
95.38.203.0/24 maxlen: 24
95.38.204.0/23 maxlen: 23
95.38.206.0/24 maxlen: 24
95.38.208.0/22 maxlen: 22
95.38.208.0/21 maxlen: 21
95.38.211.0/24 maxlen: 24
95.38.212.0/23 maxlen: 23
95.38.210.0/24 maxlen: 24
95.38.215.0/24 maxlen: 24
95.38.216.0/23 maxlen: 23
95.38.218.0/24 maxlen: 24
95.38.219.0/24 maxlen: 24
95.38.218.0/23 maxlen: 23
95.38.220.0/22 maxlen: 22
95.38.225.0/24 maxlen: 24
95.38.226.0/23 maxlen: 23
95.38.224.0/24 maxlen: 24
95.38.228.0/22 maxlen: 22
95.38.232.0/21 maxlen: 21
95.38.27.0/24 maxlen: 24
95.38.28.0/24 maxlen: 24
95.38.25.0/24 maxlen: 24
95.38.26.0/24 maxlen: 24
95.38.31.0/24 maxlen: 24
95.38.29.0/24 maxlen: 24
95.38.30.0/24 maxlen: 24
95.38.34.0/24 maxlen: 24
95.38.35.0/24 maxlen: 24
95.38.32.0/24 maxlen: 24
95.38.33.0/24 maxlen: 24
95.38.36.0/23 maxlen: 23
95.38.41.0/24 maxlen: 24
95.38.42.0/24 maxlen: 24
95.38.39.0/24 maxlen: 24
95.38.40.0/24 maxlen: 24
95.38.44.0/24 maxlen: 24
95.38.43.0/24 maxlen: 24
95.38.44.0/22 maxlen: 22
95.38.48.0/24 maxlen: 24
95.38.49.0/24 maxlen: 24
95.38.46.0/24 maxlen: 24
95.38.47.0/24 maxlen: 24
95.38.51.0/24 maxlen: 24
95.38.50.0/24 maxlen: 24
95.38.45.0/24 maxlen: 24
95.38.54.0/23 maxlen: 23
95.38.56.0/23 maxlen: 23
95.38.53.0/24 maxlen: 24
95.38.58.0/24 maxlen: 24
95.38.52.0/24 maxlen: 24
95.38.60.0/24 maxlen: 24
95.38.62.0/23 maxlen: 23
95.38.61.0/24 maxlen: 24
95.38.64.0/24 maxlen: 24
95.38.59.0/24 maxlen: 24
95.38.69.0/24 maxlen: 24
95.38.70.0/24 maxlen: 24
95.38.68.0/24 maxlen: 24
95.38.71.0/24 maxlen: 24
95.38.65.0/24 maxlen: 24
95.38.66.0/23 maxlen: 23
95.38.76.0/24 maxlen: 24
95.38.74.0/23 maxlen: 23
95.38.74.0/24 maxlen: 24
95.38.75.0/24 maxlen: 24
95.38.78.0/23 maxlen: 23
95.38.77.0/24 maxlen: 24
95.38.73.0/24 maxlen: 24
95.38.0.0/21 maxlen: 21
95.38.11.0/24 maxlen: 24
95.38.10.0/24 maxlen: 24
95.38.8.0/24 maxlen: 24
95.38.9.0/24 maxlen: 24
95.38.13.0/24 maxlen: 24
95.38.14.0/24 maxlen: 24
95.38.12.0/24 maxlen: 24
95.38.17.0/24 maxlen: 24
95.38.15.0/24 maxlen: 24
95.38.16.0/20 maxlen: 20
95.38.16.0/24 maxlen: 24
95.38.20.0/24 maxlen: 24
95.38.21.0/24 maxlen: 24
95.38.18.0/24 maxlen: 24
95.38.19.0/24 maxlen: 24
95.38.24.0/24 maxlen: 24
95.38.22.0/24 maxlen: 24
95.38.23.0/24 maxlen: 24
95.38.160.0/21 maxlen: 21
95.38.172.0/23 maxlen: 23
95.38.171.0/24 maxlen: 24
95.38.170.0/24 maxlen: 24
95.38.168.0/23 maxlen: 23
95.38.168.0/22 maxlen: 22
95.38.169.0/24 maxlen: 24
95.38.174.0/24 maxlen: 24
95.38.175.0/24 maxlen: 24
95.38.176.0/20 maxlen: 20
95.38.82.0/23 maxlen: 23
95.38.81.0/24 maxlen: 24
95.38.84.0/23 maxlen: 23
95.38.84.0/24 maxlen: 24
95.38.85.0/24 maxlen: 24
95.38.80.0/24 maxlen: 24
95.38.90.0/24 maxlen: 24
95.38.88.0/22 maxlen: 22
95.38.88.0/24 maxlen: 24
95.38.89.0/24 maxlen: 24
95.38.91.0/24 maxlen: 24
95.38.86.0/24 maxlen: 24
95.38.87.0/24 maxlen: 24
95.38.93.0/24 maxlen: 24
95.38.94.0/23 maxlen: 23
95.38.92.0/24 maxlen: 24
95.38.96.0/23 maxlen: 23
95.38.96.0/21 maxlen: 21
95.38.98.0/23 maxlen: 23
95.38.98.0/24 maxlen: 24
95.38.102.0/23 maxlen: 23
95.38.104.0/22 maxlen: 22
95.38.99.0/24 maxlen: 24
95.38.100.0/23 maxlen: 23
95.38.109.0/24 maxlen: 24
95.38.110.0/23 maxlen: 23
95.38.108.0/24 maxlen: 24
95.38.117.0/24 maxlen: 24
95.38.116.0/23 maxlen: 23
95.38.118.0/24 maxlen: 24
95.38.116.0/24 maxlen: 24
95.38.112.0/21 maxlen: 21
95.38.124.0/24 maxlen: 24
95.38.125.0/24 maxlen: 24
95.38.123.0/24 maxlen: 24
95.38.121.0/24 maxlen: 24
95.38.122.0/24 maxlen: 24
95.38.122.0/23 maxlen: 23
95.38.119.0/24 maxlen: 24
95.38.120.0/24 maxlen: 24
95.38.130.0/23 maxlen: 23
95.38.128.0/24 maxlen: 24
95.38.126.0/23 maxlen: 23
95.38.129.0/24 maxlen: 24
95.38.128.0/20 maxlen: 20
95.38.128.0/22 maxlen: 22
95.38.128.0/23 maxlen: 23
185.20.162.0/24 maxlen: 24
185.20.163.0/24 maxlen: 24
185.20.160.0/24 maxlen: 24
185.20.161.0/24 maxlen: 24
2a01:bd80::/29 maxlen: 29
2a00:52e0::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 03 Aug 2023 06:09:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:b4:e8:b4:e0:d9:25:ae:86:62:77:aa:66:6b:30:37:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0c104041691dc384f3b1a8cdf95c96628ea6daf
Validity
Not Before: Aug 2 06:21:36 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f02c129d99a78ab4fd4a676805bd1534dd4727e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:c7:b1:23:52:a0:58:48:3c:bd:71:6d:15:e7:
73:94:e3:47:f5:a1:69:52:b2:f3:c3:85:bb:81:81:
89:ce:71:a1:7a:c6:b4:e0:80:da:2a:88:18:da:79:
4a:b6:c6:73:2e:d0:66:63:1b:7c:3d:3f:9d:52:78:
76:3b:48:7f:04:09:0c:d4:be:5e:3a:52:f3:11:7b:
f4:99:d0:30:6e:fa:4d:ad:d6:31:d4:22:1a:92:d5:
5a:cf:16:b6:ff:e8:b1:10:ec:55:a2:d7:d9:11:bd:
0e:93:7e:90:d2:d9:2c:fe:f5:67:f4:f8:f3:8d:71:
71:30:cc:03:e3:e1:2b:46:a4:9b:94:c4:1b:58:d8:
a0:a8:be:1a:83:27:24:27:c2:61:a3:6a:83:e5:ea:
aa:33:9b:d1:45:a8:7a:80:e4:69:ed:a2:cb:cf:3a:
10:f5:bf:aa:f3:95:4b:1f:63:7a:d9:b7:e2:c6:60:
07:dd:fa:70:45:3c:0b:41:7f:cf:4f:f2:4d:bf:b3:
9b:3f:3f:3d:dd:91:bf:02:82:12:75:3d:76:43:eb:
38:9a:f8:23:a8:05:b9:cf:d0:ab:a3:04:c2:54:ea:
7f:13:9d:e3:13:86:82:05:d3:93:73:3a:74:65:91:
17:b4:f5:58:50:91:0c:9b:b9:7e:42:4e:4f:74:7c:
09:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:2C:12:9D:99:A7:8A:B4:FD:4A:67:68:05:BD:15:34:DD:47:27:E8
X509v3 Authority Key Identifier:
keyid:F0:C1:04:04:16:91:DC:38:4F:3B:1A:8C:DF:95:C9:66:28:EA:6D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8MEEBBaR3DhPOxqM35XJZijqba8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8CwSnZmnirT9SmdoBb0VNN1HJ-g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.38.0.0-95.38.37.255
95.38.39.0-95.38.71.255
95.38.73.0-95.38.143.255
95.38.160.0-95.38.206.255
95.38.208.0-95.38.247.255
95.38.252.0/22
185.20.160.0/22
IPv6:
2a00:52e0::/32
2a01:bd80::/29
Signature Algorithm: sha256WithRSAEncryption
55:df:58:0b:2b:90:b3:dc:00:87:96:5f:3e:0d:7c:29:a7:cc:
46:45:8f:11:3b:64:29:a4:4b:54:4b:f8:11:32:53:f1:9c:6e:
48:bb:a0:b7:1d:dd:34:01:54:07:f1:be:9f:c9:29:4c:62:0a:
b3:8c:9c:b2:4c:f7:23:d3:7b:14:ff:8d:a0:23:c6:4f:01:9c:
48:1e:87:52:dd:8f:0a:c6:b3:89:a2:ec:61:5e:4e:54:e9:1a:
20:ee:3d:51:11:c5:0e:91:1c:4a:fe:2e:c8:b5:b4:26:b9:c3:
68:5f:0e:59:c4:f7:fa:cd:1f:e3:72:a3:48:15:07:77:d2:19:
b6:5b:51:ff:60:f5:2f:a0:04:8c:e6:73:7c:e2:eb:a3:48:43:
e1:b6:a6:82:12:64:a9:7b:0f:55:98:19:fb:16:de:1c:0a:1d:
9d:24:71:46:41:e5:81:e5:55:4f:03:3e:31:ce:39:ae:2a:de:
fc:c0:55:5f:34:4b:1e:40:df:13:8b:61:0a:c1:08:ba:d3:6d:
48:62:8f:30:2f:f7:c1:2f:f2:a3:fa:a7:4b:72:ca:76:d6:a7:
9a:05:40:35:35:53:c7:96:c1:27:94:a8:ff:43:65:86:68:14:
a6:2c:79:96:14:a7:63:f4:bb:df:96:49:70:5e:dc:a2:20:c9:
22:db:e9:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:45 2024 by rpki-client on console-ams.rpki-client.org