Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/Cdxeg7zvY5AYGvUW5rFECET684c.roa
File: Cdxeg7zvY5AYGvUW5rFECET684c.roa (raw, json)
Hash identifier: w1KE0Y2XTFZavKqMDR7iJai8R+fARbGjhsQp/HKW7rU=
Subject key identifier: 09:DC:5E:83:BC:EF:63:90:18:1A:F5:16:E6:B1:44:08:44:FA:F3:87
Certificate issuer: /CN=f0c104041691dc384f3b1a8cdf95c96628ea6daf
Certificate serial: 0189BAA00B1D1811CF354D52F266E13EDD5E
Authority key identifier: F0:C1:04:04:16:91:DC:38:4F:3B:1A:8C:DF:95:C9:66:28:EA:6D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8MEEBBaR3DhPOxqM35XJZijqba8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/Cdxeg7zvY5AYGvUW5rFECET684c.roa
Signing time: Thu 03 Aug 2023 08:59:58 +0000
ROA not before: Thu 03 Aug 2023 08:59:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41881
IP address blocks: 95.38.240.0/21 maxlen: 21
95.38.253.0/24 maxlen: 24
95.38.252.0/24 maxlen: 24
95.38.255.0/24 maxlen: 24
95.38.254.0/24 maxlen: 24
95.38.192.0/21 maxlen: 21
95.38.192.0/24 maxlen: 24
95.38.199.0/24 maxlen: 24
95.38.194.0/24 maxlen: 24
95.38.195.0/24 maxlen: 24
95.38.193.0/24 maxlen: 24
95.38.197.0/24 maxlen: 24
95.38.196.0/24 maxlen: 24
95.38.200.0/22 maxlen: 22
95.38.201.0/24 maxlen: 24
95.38.202.0/24 maxlen: 24
95.38.200.0/24 maxlen: 24
95.38.203.0/24 maxlen: 24
95.38.204.0/23 maxlen: 23
95.38.206.0/24 maxlen: 24
95.38.208.0/22 maxlen: 22
95.38.208.0/21 maxlen: 21
95.38.211.0/24 maxlen: 24
95.38.212.0/23 maxlen: 23
95.38.210.0/24 maxlen: 24
95.38.215.0/24 maxlen: 24
95.38.216.0/23 maxlen: 23
95.38.218.0/24 maxlen: 24
95.38.219.0/24 maxlen: 24
95.38.218.0/23 maxlen: 23
95.38.220.0/22 maxlen: 22
95.38.225.0/24 maxlen: 24
95.38.226.0/23 maxlen: 23
95.38.224.0/24 maxlen: 24
95.38.228.0/22 maxlen: 22
95.38.232.0/21 maxlen: 21
95.38.27.0/24 maxlen: 24
95.38.28.0/24 maxlen: 24
95.38.25.0/24 maxlen: 24
95.38.26.0/24 maxlen: 24
95.38.31.0/24 maxlen: 24
95.38.29.0/24 maxlen: 24
95.38.30.0/24 maxlen: 24
95.38.34.0/24 maxlen: 24
95.38.35.0/24 maxlen: 24
95.38.32.0/24 maxlen: 24
95.38.33.0/24 maxlen: 24
95.38.36.0/23 maxlen: 23
95.38.41.0/24 maxlen: 24
95.38.42.0/24 maxlen: 24
95.38.39.0/24 maxlen: 24
95.38.40.0/24 maxlen: 24
95.38.44.0/24 maxlen: 24
95.38.43.0/24 maxlen: 24
95.38.44.0/22 maxlen: 22
95.38.48.0/24 maxlen: 24
95.38.49.0/24 maxlen: 24
95.38.46.0/24 maxlen: 24
95.38.47.0/24 maxlen: 24
95.38.51.0/24 maxlen: 24
95.38.50.0/24 maxlen: 24
95.38.54.0/23 maxlen: 23
95.38.56.0/23 maxlen: 23
95.38.53.0/24 maxlen: 24
95.38.58.0/24 maxlen: 24
95.38.52.0/24 maxlen: 24
95.38.60.0/24 maxlen: 24
95.38.62.0/23 maxlen: 23
95.38.61.0/24 maxlen: 24
95.38.64.0/24 maxlen: 24
95.38.59.0/24 maxlen: 24
95.38.69.0/24 maxlen: 24
95.38.70.0/24 maxlen: 24
95.38.68.0/24 maxlen: 24
95.38.71.0/24 maxlen: 24
95.38.65.0/24 maxlen: 24
95.38.66.0/23 maxlen: 23
95.38.76.0/24 maxlen: 24
95.38.74.0/23 maxlen: 23
95.38.74.0/24 maxlen: 24
95.38.75.0/24 maxlen: 24
95.38.78.0/23 maxlen: 23
95.38.77.0/24 maxlen: 24
95.38.73.0/24 maxlen: 24
95.38.0.0/21 maxlen: 21
95.38.11.0/24 maxlen: 24
95.38.10.0/24 maxlen: 24
95.38.8.0/24 maxlen: 24
95.38.9.0/24 maxlen: 24
95.38.13.0/24 maxlen: 24
95.38.14.0/24 maxlen: 24
95.38.12.0/24 maxlen: 24
95.38.17.0/24 maxlen: 24
95.38.15.0/24 maxlen: 24
95.38.16.0/20 maxlen: 20
95.38.16.0/24 maxlen: 24
95.38.20.0/24 maxlen: 24
95.38.21.0/24 maxlen: 24
95.38.18.0/24 maxlen: 24
95.38.19.0/24 maxlen: 24
95.38.24.0/24 maxlen: 24
95.38.22.0/24 maxlen: 24
95.38.23.0/24 maxlen: 24
95.38.160.0/21 maxlen: 21
95.38.172.0/23 maxlen: 23
95.38.171.0/24 maxlen: 24
95.38.170.0/24 maxlen: 24
95.38.168.0/22 maxlen: 22
95.38.168.0/23 maxlen: 23
95.38.169.0/24 maxlen: 24
95.38.174.0/24 maxlen: 24
95.38.175.0/24 maxlen: 24
95.38.176.0/20 maxlen: 20
95.38.82.0/23 maxlen: 23
95.38.81.0/24 maxlen: 24
95.38.84.0/23 maxlen: 23
95.38.84.0/24 maxlen: 24
95.38.85.0/24 maxlen: 24
95.38.80.0/24 maxlen: 24
95.38.90.0/24 maxlen: 24
95.38.88.0/22 maxlen: 22
95.38.88.0/24 maxlen: 24
95.38.89.0/24 maxlen: 24
95.38.91.0/24 maxlen: 24
95.38.86.0/24 maxlen: 24
95.38.87.0/24 maxlen: 24
95.38.93.0/24 maxlen: 24
95.38.94.0/23 maxlen: 23
95.38.92.0/24 maxlen: 24
95.38.96.0/23 maxlen: 23
95.38.96.0/21 maxlen: 21
95.38.98.0/23 maxlen: 23
95.38.98.0/24 maxlen: 24
95.38.102.0/23 maxlen: 23
95.38.104.0/22 maxlen: 22
95.38.99.0/24 maxlen: 24
95.38.100.0/23 maxlen: 23
95.38.109.0/24 maxlen: 24
95.38.110.0/23 maxlen: 23
95.38.108.0/24 maxlen: 24
95.38.117.0/24 maxlen: 24
95.38.118.0/24 maxlen: 24
95.38.116.0/23 maxlen: 23
95.38.116.0/24 maxlen: 24
95.38.112.0/21 maxlen: 21
95.38.124.0/24 maxlen: 24
95.38.125.0/24 maxlen: 24
95.38.123.0/24 maxlen: 24
95.38.121.0/24 maxlen: 24
95.38.122.0/24 maxlen: 24
95.38.122.0/23 maxlen: 23
95.38.119.0/24 maxlen: 24
95.38.120.0/24 maxlen: 24
95.38.130.0/23 maxlen: 23
95.38.128.0/24 maxlen: 24
95.38.126.0/23 maxlen: 23
95.38.129.0/24 maxlen: 24
95.38.128.0/20 maxlen: 20
95.38.128.0/23 maxlen: 23
95.38.128.0/22 maxlen: 22
185.20.162.0/24 maxlen: 24
185.20.163.0/24 maxlen: 24
185.20.160.0/24 maxlen: 24
185.20.161.0/24 maxlen: 24
2a01:bd80::/29 maxlen: 29
2a00:52e0::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:33:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:ba:a0:0b:1d:18:11:cf:35:4d:52:f2:66:e1:3e:dd:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0c104041691dc384f3b1a8cdf95c96628ea6daf
Validity
Not Before: Aug 3 08:59:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=09dc5e83bcef6390181af516e6b1440844faf387
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:d1:3d:9c:17:7b:2a:8f:0f:2d:6b:2d:15:bb:
a7:f1:59:15:17:e3:6b:8a:53:a8:29:38:62:ad:00:
d8:c4:bf:d5:90:e1:4c:f1:72:0d:e2:c4:28:0b:6c:
90:61:30:a2:2f:36:ec:e7:94:76:53:4a:a5:eb:ee:
3a:03:00:62:b4:ab:d6:8b:ae:98:d2:67:18:c9:71:
29:14:0f:03:cd:f2:a6:2f:18:12:4b:43:02:35:16:
40:f7:33:78:c9:a0:f8:83:3c:00:d8:7d:85:b9:56:
6c:3c:1f:5c:7e:6e:48:3a:af:16:d9:7f:e3:99:b2:
11:b7:32:12:0b:04:d0:33:d1:43:54:d1:e2:68:94:
7b:28:9e:a7:7d:c1:ec:00:bd:82:b8:4e:3d:06:60:
29:e5:6b:8e:85:37:f6:57:7c:3f:78:a5:6f:08:99:
d7:4d:e3:9c:9b:94:b2:49:08:68:5e:99:db:03:46:
e8:ca:d7:0a:cc:36:23:17:66:08:e2:c7:33:43:44:
8e:a8:d8:e4:54:43:b8:18:3f:00:5e:84:7e:f1:cc:
91:5c:ea:df:8b:07:1a:07:b4:5a:d5:0e:25:2c:12:
be:7a:a0:aa:f1:c4:27:10:1f:3d:c3:6c:c0:f9:ca:
1d:ba:9a:4d:41:d3:70:03:d1:07:74:bd:95:dc:7f:
01:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:DC:5E:83:BC:EF:63:90:18:1A:F5:16:E6:B1:44:08:44:FA:F3:87
X509v3 Authority Key Identifier:
keyid:F0:C1:04:04:16:91:DC:38:4F:3B:1A:8C:DF:95:C9:66:28:EA:6D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8MEEBBaR3DhPOxqM35XJZijqba8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/Cdxeg7zvY5AYGvUW5rFECET684c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.38.0.0-95.38.37.255
95.38.39.0-95.38.71.255
95.38.73.0-95.38.143.255
95.38.160.0-95.38.206.255
95.38.208.0-95.38.247.255
95.38.252.0/22
185.20.160.0/22
IPv6:
2a00:52e0::/32
2a01:bd80::/29
Signature Algorithm: sha256WithRSAEncryption
3f:4a:02:9e:c0:e8:05:32:9c:48:33:a9:52:6a:91:50:9f:90:
be:3c:16:25:4e:b5:af:77:64:d6:21:81:64:05:64:8a:c8:89:
88:51:69:c2:fc:54:28:f0:59:84:97:0a:98:77:e9:bd:fe:9b:
0c:17:86:59:20:5b:63:02:2a:a8:c6:75:c1:09:c1:65:ca:21:
09:0c:34:28:75:ff:07:45:32:63:37:a5:a1:ad:56:3f:11:ad:
b7:fd:e0:d0:e4:a1:65:0f:5f:59:a5:67:ad:88:e0:52:e6:04:
28:6a:f2:90:1e:e4:e6:8b:f0:68:a3:2c:5c:67:95:83:e0:c3:
ca:d4:6c:43:40:03:17:6f:c5:d0:1e:fb:dd:72:f5:55:bf:cd:
93:46:97:ba:45:6b:74:9e:ff:90:cd:bf:28:21:cf:08:2a:70:
eb:0c:09:d3:37:a8:70:64:88:ed:a3:ba:ee:a4:e8:66:ce:87:
6c:df:29:af:0c:7a:31:c2:1a:05:ea:b8:66:53:f2:fe:c6:5a:
7d:3f:67:ed:d5:ee:12:da:f7:0d:eb:c4:38:db:b5:01:67:07:
ef:ee:4d:5d:ba:1f:85:89:be:63:e3:51:72:75:39:bc:49:35:
db:34:9c:94:eb:dc:33:26:e5:ee:3f:5f:f9:f3:da:31:7d:81:
c6:c1:a4:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:54 2024 by rpki-client on console-fra.rpki-client.org