Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/97ZDoIq7NRCvxE0ssqdz3QPteOs.roa
File: 97ZDoIq7NRCvxE0ssqdz3QPteOs.roa (raw, json)
Hash identifier: snHUpZjQ/2sQxF8d1K/Fn71+lECz/KdqQRS0kuEorZ8=
Subject key identifier: F7:B6:43:A0:8A:BB:35:10:AF:C4:4D:2C:B2:A7:73:DD:03:ED:78:EB
Certificate issuer: /CN=f0c104041691dc384f3b1a8cdf95c96628ea6daf
Certificate serial: 01846F5E9FB61E5B0F014EAE144089E5D267
Authority key identifier: F0:C1:04:04:16:91:DC:38:4F:3B:1A:8C:DF:95:C9:66:28:EA:6D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8MEEBBaR3DhPOxqM35XJZijqba8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/97ZDoIq7NRCvxE0ssqdz3QPteOs.roa
Signing time: Sun 13 Nov 2022 05:03:02 +0000
ROA not before: Sun 13 Nov 2022 05:03:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41881
IP address blocks: 95.38.240.0/21 maxlen: 21
95.38.253.0/24 maxlen: 24
95.38.252.0/24 maxlen: 24
95.38.255.0/24 maxlen: 24
95.38.254.0/24 maxlen: 24
95.38.192.0/24 maxlen: 24
95.38.192.0/21 maxlen: 21
95.38.199.0/24 maxlen: 24
95.38.194.0/24 maxlen: 24
95.38.195.0/24 maxlen: 24
95.38.193.0/24 maxlen: 24
95.38.197.0/24 maxlen: 24
95.38.196.0/24 maxlen: 24
95.38.201.0/24 maxlen: 24
95.38.202.0/24 maxlen: 24
95.38.200.0/24 maxlen: 24
95.38.203.0/24 maxlen: 24
95.38.200.0/22 maxlen: 22
95.38.204.0/23 maxlen: 23
95.38.206.0/24 maxlen: 24
95.38.208.0/21 maxlen: 21
95.38.211.0/24 maxlen: 24
95.38.210.0/24 maxlen: 24
95.38.216.0/23 maxlen: 23
95.38.218.0/23 maxlen: 23
95.38.215.0/24 maxlen: 24
95.38.218.0/24 maxlen: 24
95.38.219.0/24 maxlen: 24
95.38.220.0/22 maxlen: 22
95.38.226.0/23 maxlen: 23
95.38.225.0/24 maxlen: 24
95.38.224.0/24 maxlen: 24
95.38.228.0/22 maxlen: 22
95.38.232.0/21 maxlen: 21
95.38.27.0/24 maxlen: 24
95.38.28.0/24 maxlen: 24
95.38.25.0/24 maxlen: 24
95.38.26.0/24 maxlen: 24
95.38.31.0/24 maxlen: 24
95.38.29.0/24 maxlen: 24
95.38.30.0/24 maxlen: 24
95.38.36.0/23 maxlen: 23
95.38.34.0/24 maxlen: 24
95.38.35.0/24 maxlen: 24
95.38.32.0/24 maxlen: 24
95.38.33.0/24 maxlen: 24
95.38.38.0/24 maxlen: 24
95.38.41.0/24 maxlen: 24
95.38.42.0/24 maxlen: 24
95.38.39.0/24 maxlen: 24
95.38.40.0/24 maxlen: 24
95.38.44.0/24 maxlen: 24
95.38.43.0/24 maxlen: 24
95.38.44.0/22 maxlen: 22
95.38.48.0/24 maxlen: 24
95.38.49.0/24 maxlen: 24
95.38.46.0/24 maxlen: 24
95.38.47.0/24 maxlen: 24
95.38.51.0/24 maxlen: 24
95.38.50.0/24 maxlen: 24
95.38.45.0/24 maxlen: 24
95.38.53.0/24 maxlen: 24
95.38.58.0/24 maxlen: 24
95.38.52.0/24 maxlen: 24
95.38.54.0/23 maxlen: 23
95.38.56.0/23 maxlen: 23
95.38.60.0/24 maxlen: 24
95.38.61.0/24 maxlen: 24
95.38.64.0/24 maxlen: 24
95.38.59.0/24 maxlen: 24
95.38.62.0/23 maxlen: 23
95.38.69.0/24 maxlen: 24
95.38.70.0/24 maxlen: 24
95.38.68.0/24 maxlen: 24
95.38.71.0/24 maxlen: 24
95.38.65.0/24 maxlen: 24
95.38.66.0/23 maxlen: 23
95.38.76.0/24 maxlen: 24
95.38.74.0/24 maxlen: 24
95.38.75.0/24 maxlen: 24
95.38.77.0/24 maxlen: 24
95.38.72.0/24 maxlen: 24
95.38.73.0/24 maxlen: 24
95.38.74.0/23 maxlen: 23
95.38.78.0/23 maxlen: 23
95.38.0.0/21 maxlen: 21
95.38.11.0/24 maxlen: 24
95.38.10.0/24 maxlen: 24
95.38.8.0/24 maxlen: 24
95.38.9.0/24 maxlen: 24
95.38.16.0/20 maxlen: 20
95.38.13.0/24 maxlen: 24
95.38.14.0/24 maxlen: 24
95.38.12.0/24 maxlen: 24
95.38.17.0/24 maxlen: 24
95.38.15.0/24 maxlen: 24
95.38.16.0/24 maxlen: 24
95.38.20.0/24 maxlen: 24
95.38.21.0/24 maxlen: 24
95.38.18.0/24 maxlen: 24
95.38.19.0/24 maxlen: 24
95.38.24.0/24 maxlen: 24
95.38.22.0/24 maxlen: 24
95.38.23.0/24 maxlen: 24
95.38.160.0/21 maxlen: 21
95.38.171.0/24 maxlen: 24
95.38.170.0/24 maxlen: 24
95.38.169.0/24 maxlen: 24
95.38.172.0/23 maxlen: 23
95.38.168.0/22 maxlen: 22
95.38.168.0/23 maxlen: 23
95.38.174.0/24 maxlen: 24
95.38.175.0/24 maxlen: 24
95.38.176.0/20 maxlen: 20
95.38.81.0/24 maxlen: 24
95.38.84.0/24 maxlen: 24
95.38.85.0/24 maxlen: 24
95.38.80.0/24 maxlen: 24
95.38.82.0/23 maxlen: 23
95.38.84.0/23 maxlen: 23
95.38.90.0/24 maxlen: 24
95.38.88.0/24 maxlen: 24
95.38.89.0/24 maxlen: 24
95.38.91.0/24 maxlen: 24
95.38.86.0/24 maxlen: 24
95.38.87.0/24 maxlen: 24
95.38.88.0/22 maxlen: 22
95.38.93.0/24 maxlen: 24
95.38.92.0/24 maxlen: 24
95.38.96.0/23 maxlen: 23
95.38.96.0/21 maxlen: 21
95.38.98.0/23 maxlen: 23
95.38.94.0/23 maxlen: 23
95.38.98.0/24 maxlen: 24
95.38.102.0/23 maxlen: 23
95.38.104.0/22 maxlen: 22
95.38.100.0/23 maxlen: 23
95.38.99.0/24 maxlen: 24
95.38.110.0/23 maxlen: 23
95.38.109.0/24 maxlen: 24
95.38.108.0/24 maxlen: 24
95.38.116.0/23 maxlen: 23
95.38.112.0/21 maxlen: 21
95.38.117.0/24 maxlen: 24
95.38.118.0/24 maxlen: 24
95.38.116.0/24 maxlen: 24
95.38.122.0/23 maxlen: 23
95.38.124.0/24 maxlen: 24
95.38.125.0/24 maxlen: 24
95.38.123.0/24 maxlen: 24
95.38.121.0/24 maxlen: 24
95.38.122.0/24 maxlen: 24
95.38.119.0/24 maxlen: 24
95.38.120.0/24 maxlen: 24
95.38.130.0/23 maxlen: 23
95.38.126.0/23 maxlen: 23
95.38.128.0/20 maxlen: 20
95.38.128.0/23 maxlen: 23
95.38.128.0/22 maxlen: 22
95.38.128.0/24 maxlen: 24
95.38.129.0/24 maxlen: 24
185.20.162.0/24 maxlen: 24
185.20.163.0/24 maxlen: 24
185.20.160.0/24 maxlen: 24
185.20.161.0/24 maxlen: 24
2a01:bd80::/29 maxlen: 29
2a00:52e0::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:6f:5e:9f:b6:1e:5b:0f:01:4e:ae:14:40:89:e5:d2:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0c104041691dc384f3b1a8cdf95c96628ea6daf
Validity
Not Before: Nov 13 05:03:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f7b643a08abb3510afc44d2cb2a773dd03ed78eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:9e:be:57:e4:0b:9e:c2:3b:a0:bb:4e:ef:ed:
6c:e7:22:8e:39:fe:6b:d2:f5:7f:41:f7:c8:58:3b:
65:c7:6f:89:ba:cb:91:dc:0c:07:74:06:aa:90:cb:
51:33:d5:72:32:79:2f:67:43:2b:66:a9:c8:6e:91:
6d:4a:00:a0:81:8d:1a:88:4f:74:97:64:73:af:86:
c7:2f:f2:5c:24:ac:65:ae:5e:e6:0d:7f:31:7e:2c:
86:7a:73:16:c1:0a:b7:a4:ee:ef:8f:94:97:d6:09:
da:fa:ad:08:56:b3:a3:09:9e:de:30:ea:34:76:6f:
2f:35:f7:4d:90:1b:ff:ff:f1:b9:d8:86:ab:d9:00:
ce:ab:9c:30:ad:75:f2:50:17:8e:f1:54:a5:16:f7:
f9:d9:a8:85:f0:0b:f3:3e:e3:84:a7:54:cd:36:7c:
9c:c0:26:b4:5a:c0:7a:1b:86:b0:20:d0:68:12:83:
32:a7:3e:7f:ed:13:ec:24:3e:44:62:7a:a6:a3:5a:
f7:66:18:1b:7d:d7:6b:fe:17:f4:75:00:e0:eb:2a:
9e:23:54:5c:62:ba:89:71:92:be:64:96:1c:8b:2d:
6b:7f:9e:2e:a9:a1:c8:53:bb:38:4b:47:28:cd:e7:
9a:51:1d:1b:af:71:3b:37:04:ec:ee:a4:b9:a7:a1:
e7:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:B6:43:A0:8A:BB:35:10:AF:C4:4D:2C:B2:A7:73:DD:03:ED:78:EB
X509v3 Authority Key Identifier:
keyid:F0:C1:04:04:16:91:DC:38:4F:3B:1A:8C:DF:95:C9:66:28:EA:6D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8MEEBBaR3DhPOxqM35XJZijqba8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/97ZDoIq7NRCvxE0ssqdz3QPteOs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.38.0.0-95.38.143.255
95.38.160.0-95.38.206.255
95.38.208.0-95.38.247.255
95.38.252.0/22
185.20.160.0/22
IPv6:
2a00:52e0::/32
2a01:bd80::/29
Signature Algorithm: sha256WithRSAEncryption
4a:ec:2b:bb:ff:df:18:89:14:6a:59:ea:2a:23:05:e1:7c:e4:
c4:99:6d:e3:2e:b6:d3:91:a4:82:67:36:06:d1:16:72:1b:8f:
75:f2:85:9b:b0:f7:14:fe:85:67:b8:2d:77:c8:20:e8:6c:13:
28:63:55:8c:ec:8c:f3:33:dd:aa:3e:6c:64:3b:a1:2e:cd:62:
61:55:55:9b:9c:0b:b0:19:10:78:a3:14:8a:65:d7:83:1b:e8:
75:27:fb:c7:68:46:11:3a:6f:cb:36:13:ea:c4:25:06:69:be:
43:59:b1:1e:ab:87:af:42:13:77:98:cf:6b:e7:31:de:21:12:
9a:0a:c6:88:e6:84:e5:0d:df:28:ce:7d:aa:b4:d9:d8:bc:0d:
2d:8e:ad:ae:09:7e:06:e1:19:80:9f:a4:63:32:fb:e8:ac:1f:
2e:2d:fe:fd:42:79:1b:58:1a:09:40:e1:29:47:32:50:82:dc:
aa:f9:d1:cb:9a:44:65:d1:d2:94:33:fa:89:8c:14:25:1f:0e:
27:73:7b:1b:98:fa:ea:f0:17:46:01:a2:2a:b3:9d:1b:62:3e:
3f:c1:75:f4:a9:da:52:31:62:e2:74:b2:0b:3c:bd:59:fe:e2:
4a:fa:83:fc:e8:66:48:ee:ec:45:76:a4:f7:1d:aa:e4:56:0b:
5c:30:c6:1c
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgISAYRvXp+2HlsPAU6uFECJ5dJnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwYzEwNDA0MTY5MWRjMzg0ZjNiMWE4Y2RmOTVjOTY2Mjhl
YTZkYWYwHhcNMjIxMTEzMDUwMzAyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmN2I2NDNhMDhhYmIzNTEwYWZjNDRkMmNiMmE3NzNkZDAzZWQ3OGViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq56+V+QLnsI7oLtO7+1s5yKOOf5r
0vV/QffIWDtlx2+JusuR3AwHdAaqkMtRM9VyMnkvZ0MrZqnIbpFtSgCggY0aiE90
l2Rzr4bHL/JcJKxlrl7mDX8xfiyGenMWwQq3pO7vj5SX1gna+q0IVrOjCZ7eMOo0
dm8vNfdNkBv///G52Iar2QDOq5wwrXXyUBeO8VSlFvf52aiF8AvzPuOEp1TNNnyc
wCa0WsB6G4awINBoEoMypz5/7RPsJD5EYnqmo1r3Zhgbfddr/hf0dQDg6yqeI1Rc
YrqJcZK+ZJYciy1rf54uqaHIU7s4S0cozeeaUR0br3E7NwTs7qS5p6HnJwIDAQAB
o4ICTjCCAkowHQYDVR0OBBYEFPe2Q6CKuzUQr8RNLLKnc90D7XjrMB8GA1UdIwQY
MBaAFPDBBAQWkdw4TzsajN+VyWYo6m2vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOE1FRUJCYVIzRGhQT3hxTTM1WEpaaWpxYmE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS83ODljYWYtYzhkMi00MTllLWFlMDQt
NjkxNDIyMzExNzI5LzEvOTdaRG9JcTdOUkN2eEUwc3NxZHozUVB0ZU9zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS83ODljYWYtYzhkMi00MTllLWFlMDQtNjkxNDIyMzExNzI5
LzEvOE1FRUJCYVIzRGhQT3hxTTM1WEpaaWpxYmE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGQGCCsGAQUFBwEHAQH/BFUwUzA7BAIAATA1MAsDAwFfJgME
BF8mgDAMAwQFXyagAwQAXybOMAwDBARfJtADBANfJvADBAJfJvwDBAK5FKAwFAQC
AAIwDgMFACoAUuADBQMqAb2AMA0GCSqGSIb3DQEBCwUAA4IBAQBK7Cu7/98YiRRq
WeoqIwXhfOTEmW3jLrbTkaSCZzYG0RZyG4918oWbsPcU/oVnuC13yCDobBMoY1WM
7IzzM92qPmxkO6EuzWJhVVWbnAuwGRB4oxSKZdeDG+h1J/vHaEYROm/LNhPqxCUG
ab5DWbEeq4evQhN3mM9r5zHeIRKaCsaI5oTlDd8ozn2qtNnYvA0tjq2uCX4G4RmA
n6RjMvvorB8uLf79QnkbWBoJQOEpRzJQgtyq+dHLmkRl0dKUM/qJjBQlHw4nc3sb
mPrq8BdGAaIqs50bYj4/wXX0qdpSMWLidLILPL1Z/uJK+oP86GZI7uxFdqT3Hark
VgtcMMYc
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:54 2024 by rpki-client on console-fra.rpki-client.org