Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/P8dc6xOZ3d-JhJEu1kxRNpj4Flw.roa
File: P8dc6xOZ3d-JhJEu1kxRNpj4Flw.roa (raw, json)
Hash identifier: yq0T6d6PRH+O8wD1rBZRY/iUiMI7PKsgC31gYrkCh5k=
Subject key identifier: 3F:C7:5C:EB:13:99:DD:DF:89:84:91:2E:D6:4C:51:36:98:F8:16:5C
Certificate issuer: /CN=f0c104041691dc384f3b1a8cdf95c96628ea6daf
Certificate serial: 01846F84284374AF9B5D4455D85218F0F262
Authority key identifier: F0:C1:04:04:16:91:DC:38:4F:3B:1A:8C:DF:95:C9:66:28:EA:6D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8MEEBBaR3DhPOxqM35XJZijqba8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/P8dc6xOZ3d-JhJEu1kxRNpj4Flw.roa
Signing time: Sun 13 Nov 2022 05:44:02 +0000
ROA not before: Sun 13 Nov 2022 05:44:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41881
IP address blocks: 95.38.240.0/21 maxlen: 21
95.38.253.0/24 maxlen: 24
95.38.252.0/24 maxlen: 24
95.38.255.0/24 maxlen: 24
95.38.254.0/24 maxlen: 24
95.38.192.0/24 maxlen: 24
95.38.192.0/21 maxlen: 21
95.38.199.0/24 maxlen: 24
95.38.194.0/24 maxlen: 24
95.38.195.0/24 maxlen: 24
95.38.193.0/24 maxlen: 24
95.38.197.0/24 maxlen: 24
95.38.196.0/24 maxlen: 24
95.38.201.0/24 maxlen: 24
95.38.202.0/24 maxlen: 24
95.38.200.0/24 maxlen: 24
95.38.203.0/24 maxlen: 24
95.38.200.0/22 maxlen: 22
95.38.204.0/23 maxlen: 23
95.38.206.0/24 maxlen: 24
95.38.208.0/22 maxlen: 22
95.38.208.0/21 maxlen: 21
95.38.212.0/23 maxlen: 23
95.38.211.0/24 maxlen: 24
95.38.210.0/24 maxlen: 24
95.38.216.0/23 maxlen: 23
95.38.218.0/23 maxlen: 23
95.38.215.0/24 maxlen: 24
95.38.218.0/24 maxlen: 24
95.38.219.0/24 maxlen: 24
95.38.220.0/22 maxlen: 22
95.38.226.0/23 maxlen: 23
95.38.225.0/24 maxlen: 24
95.38.224.0/24 maxlen: 24
95.38.228.0/22 maxlen: 22
95.38.232.0/21 maxlen: 21
95.38.27.0/24 maxlen: 24
95.38.28.0/24 maxlen: 24
95.38.25.0/24 maxlen: 24
95.38.26.0/24 maxlen: 24
95.38.31.0/24 maxlen: 24
95.38.29.0/24 maxlen: 24
95.38.30.0/24 maxlen: 24
95.38.36.0/23 maxlen: 23
95.38.34.0/24 maxlen: 24
95.38.35.0/24 maxlen: 24
95.38.32.0/24 maxlen: 24
95.38.33.0/24 maxlen: 24
95.38.38.0/24 maxlen: 24
95.38.41.0/24 maxlen: 24
95.38.42.0/24 maxlen: 24
95.38.39.0/24 maxlen: 24
95.38.40.0/24 maxlen: 24
95.38.44.0/24 maxlen: 24
95.38.43.0/24 maxlen: 24
95.38.44.0/22 maxlen: 22
95.38.48.0/24 maxlen: 24
95.38.49.0/24 maxlen: 24
95.38.46.0/24 maxlen: 24
95.38.47.0/24 maxlen: 24
95.38.51.0/24 maxlen: 24
95.38.50.0/24 maxlen: 24
95.38.45.0/24 maxlen: 24
95.38.53.0/24 maxlen: 24
95.38.58.0/24 maxlen: 24
95.38.52.0/24 maxlen: 24
95.38.54.0/23 maxlen: 23
95.38.56.0/23 maxlen: 23
95.38.60.0/24 maxlen: 24
95.38.61.0/24 maxlen: 24
95.38.64.0/24 maxlen: 24
95.38.59.0/24 maxlen: 24
95.38.62.0/23 maxlen: 23
95.38.69.0/24 maxlen: 24
95.38.70.0/24 maxlen: 24
95.38.68.0/24 maxlen: 24
95.38.71.0/24 maxlen: 24
95.38.65.0/24 maxlen: 24
95.38.66.0/23 maxlen: 23
95.38.76.0/24 maxlen: 24
95.38.74.0/24 maxlen: 24
95.38.75.0/24 maxlen: 24
95.38.77.0/24 maxlen: 24
95.38.72.0/24 maxlen: 24
95.38.73.0/24 maxlen: 24
95.38.74.0/23 maxlen: 23
95.38.78.0/23 maxlen: 23
95.38.0.0/21 maxlen: 21
95.38.11.0/24 maxlen: 24
95.38.10.0/24 maxlen: 24
95.38.8.0/24 maxlen: 24
95.38.9.0/24 maxlen: 24
95.38.16.0/20 maxlen: 20
95.38.13.0/24 maxlen: 24
95.38.14.0/24 maxlen: 24
95.38.12.0/24 maxlen: 24
95.38.17.0/24 maxlen: 24
95.38.15.0/24 maxlen: 24
95.38.16.0/24 maxlen: 24
95.38.20.0/24 maxlen: 24
95.38.21.0/24 maxlen: 24
95.38.18.0/24 maxlen: 24
95.38.19.0/24 maxlen: 24
95.38.24.0/24 maxlen: 24
95.38.22.0/24 maxlen: 24
95.38.23.0/24 maxlen: 24
95.38.160.0/21 maxlen: 21
95.38.171.0/24 maxlen: 24
95.38.170.0/24 maxlen: 24
95.38.169.0/24 maxlen: 24
95.38.172.0/23 maxlen: 23
95.38.168.0/22 maxlen: 22
95.38.168.0/23 maxlen: 23
95.38.174.0/24 maxlen: 24
95.38.175.0/24 maxlen: 24
95.38.176.0/20 maxlen: 20
95.38.81.0/24 maxlen: 24
95.38.84.0/24 maxlen: 24
95.38.85.0/24 maxlen: 24
95.38.80.0/24 maxlen: 24
95.38.82.0/23 maxlen: 23
95.38.84.0/23 maxlen: 23
95.38.90.0/24 maxlen: 24
95.38.88.0/24 maxlen: 24
95.38.89.0/24 maxlen: 24
95.38.91.0/24 maxlen: 24
95.38.86.0/24 maxlen: 24
95.38.87.0/24 maxlen: 24
95.38.88.0/22 maxlen: 22
95.38.93.0/24 maxlen: 24
95.38.92.0/24 maxlen: 24
95.38.96.0/23 maxlen: 23
95.38.96.0/21 maxlen: 21
95.38.98.0/23 maxlen: 23
95.38.94.0/23 maxlen: 23
95.38.98.0/24 maxlen: 24
95.38.102.0/23 maxlen: 23
95.38.104.0/22 maxlen: 22
95.38.100.0/23 maxlen: 23
95.38.99.0/24 maxlen: 24
95.38.110.0/23 maxlen: 23
95.38.109.0/24 maxlen: 24
95.38.108.0/24 maxlen: 24
95.38.116.0/23 maxlen: 23
95.38.112.0/21 maxlen: 21
95.38.117.0/24 maxlen: 24
95.38.118.0/24 maxlen: 24
95.38.116.0/24 maxlen: 24
95.38.122.0/23 maxlen: 23
95.38.124.0/24 maxlen: 24
95.38.125.0/24 maxlen: 24
95.38.123.0/24 maxlen: 24
95.38.121.0/24 maxlen: 24
95.38.122.0/24 maxlen: 24
95.38.119.0/24 maxlen: 24
95.38.120.0/24 maxlen: 24
95.38.130.0/23 maxlen: 23
95.38.126.0/23 maxlen: 23
95.38.128.0/20 maxlen: 20
95.38.128.0/23 maxlen: 23
95.38.128.0/22 maxlen: 22
95.38.128.0/24 maxlen: 24
95.38.129.0/24 maxlen: 24
185.20.162.0/24 maxlen: 24
185.20.163.0/24 maxlen: 24
185.20.160.0/24 maxlen: 24
185.20.161.0/24 maxlen: 24
2a01:bd80::/29 maxlen: 29
2a00:52e0::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:6f:84:28:43:74:af:9b:5d:44:55:d8:52:18:f0:f2:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0c104041691dc384f3b1a8cdf95c96628ea6daf
Validity
Not Before: Nov 13 05:44:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3fc75ceb1399dddf8984912ed64c513698f8165c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:fb:dd:04:37:b3:40:39:22:17:90:fe:5d:1b:
11:6c:a9:5c:c6:18:6b:11:f1:9f:6a:91:c5:ba:fc:
ba:76:38:92:62:89:00:8b:8c:d7:a8:c5:15:94:64:
c2:f9:de:fe:a6:22:e2:d2:b6:c0:f2:98:3b:e4:7c:
bd:2a:0c:bd:29:50:6c:c0:a4:be:4d:15:b6:3a:4c:
8b:98:d0:bd:ff:c6:79:f1:dd:f7:5b:39:c0:3f:d5:
cf:d4:dc:9a:74:03:69:60:b5:8d:5e:64:01:d9:c2:
13:eb:e5:fa:33:f6:c0:29:10:9d:5c:e1:8b:9f:47:
68:63:c4:38:15:e1:f4:6e:e4:92:2b:1d:61:fd:bd:
0b:ea:f1:ae:e2:65:b9:37:48:59:71:f5:2a:8c:b2:
5e:31:74:7f:86:43:24:89:41:21:6b:bd:3d:32:81:
3e:d2:71:1a:af:93:ce:bf:bd:ac:b2:e7:da:e7:06:
d6:b7:6c:f9:ce:5a:f6:8c:c5:c9:f3:94:df:56:d4:
19:91:7f:36:c1:c2:a6:c1:ea:a0:ac:bc:e7:5b:3a:
93:dc:e3:1d:d7:82:b0:4c:6a:1c:ad:59:7d:d8:f4:
77:24:c7:47:11:17:10:3a:29:b9:5e:d0:eb:5f:b2:
b0:23:4c:00:2a:67:84:0f:35:bb:11:06:86:b4:a9:
24:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:C7:5C:EB:13:99:DD:DF:89:84:91:2E:D6:4C:51:36:98:F8:16:5C
X509v3 Authority Key Identifier:
keyid:F0:C1:04:04:16:91:DC:38:4F:3B:1A:8C:DF:95:C9:66:28:EA:6D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8MEEBBaR3DhPOxqM35XJZijqba8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/P8dc6xOZ3d-JhJEu1kxRNpj4Flw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.38.0.0-95.38.143.255
95.38.160.0-95.38.206.255
95.38.208.0-95.38.247.255
95.38.252.0/22
185.20.160.0/22
IPv6:
2a00:52e0::/32
2a01:bd80::/29
Signature Algorithm: sha256WithRSAEncryption
47:92:a4:90:ab:63:75:7f:b8:dd:61:e0:74:f8:e1:e2:48:56:
82:61:87:4c:34:0f:b1:d1:88:1c:ba:75:4b:ce:a9:95:f9:2d:
14:c9:f7:86:6c:09:e8:b6:2d:af:d4:0b:d3:bd:20:96:bf:c9:
a9:d0:ff:90:57:d1:26:5c:cd:df:aa:ef:8f:68:0a:85:c1:4e:
5e:29:46:7b:f2:ce:36:00:27:9e:fc:31:8c:7a:c3:9b:49:c7:
7f:ee:a2:4c:6e:31:1e:5d:26:03:e1:66:cc:63:fa:f2:fd:f9:
c4:6a:7c:af:18:3e:1a:cb:43:bf:a2:bd:90:43:3c:d8:a3:c5:
bc:d5:20:61:06:ed:44:67:ff:97:69:54:68:bb:1b:a7:14:e4:
90:94:c0:b1:75:86:bd:2a:1f:50:7d:9d:74:32:86:9c:7d:88:
b9:ed:7f:63:56:f4:0c:a5:f7:e5:f1:48:ff:90:2d:e3:d1:a8:
4d:b1:a6:71:bf:6f:d9:46:43:b4:2f:fb:86:f4:87:82:75:72:
3c:91:5a:11:f9:84:03:dc:41:99:f1:32:d4:96:99:bd:c6:a9:
06:ac:c7:87:8f:f6:aa:18:1d:e3:3a:76:07:93:69:81:07:46:
3d:f7:77:51:a4:7a:a6:de:bd:c3:8e:5d:16:e4:c4:c1:dd:41:
26:3a:38:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:45 2024 by rpki-client on console-ams.rpki-client.org