Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/QlmBHZ7STVNLzDmsJ2FqF9Jt1uk.roa
File: QlmBHZ7STVNLzDmsJ2FqF9Jt1uk.roa (raw, json)
Hash identifier: R0kUI3697TZpn+PBGupwZXFA3WAw5YjYYs71/wCndBI=
Subject key identifier: 42:59:81:1D:9E:D2:4D:53:4B:CC:39:AC:27:61:6A:17:D2:6D:D6:E9
Certificate issuer: /CN=f0c104041691dc384f3b1a8cdf95c96628ea6daf
Certificate serial: 0189BA0468214C5B61C57C9C3DFF8E9B2E10
Authority key identifier: F0:C1:04:04:16:91:DC:38:4F:3B:1A:8C:DF:95:C9:66:28:EA:6D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8MEEBBaR3DhPOxqM35XJZijqba8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/QlmBHZ7STVNLzDmsJ2FqF9Jt1uk.roa
Signing time: Thu 03 Aug 2023 06:09:58 +0000
ROA not before: Thu 03 Aug 2023 06:09:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41881
IP address blocks: 95.38.240.0/21 maxlen: 21
95.38.253.0/24 maxlen: 24
95.38.252.0/24 maxlen: 24
95.38.255.0/24 maxlen: 24
95.38.254.0/24 maxlen: 24
95.38.192.0/21 maxlen: 21
95.38.192.0/24 maxlen: 24
95.38.199.0/24 maxlen: 24
95.38.194.0/24 maxlen: 24
95.38.195.0/24 maxlen: 24
95.38.193.0/24 maxlen: 24
95.38.197.0/24 maxlen: 24
95.38.196.0/24 maxlen: 24
95.38.200.0/22 maxlen: 22
95.38.201.0/24 maxlen: 24
95.38.202.0/24 maxlen: 24
95.38.200.0/24 maxlen: 24
95.38.203.0/24 maxlen: 24
95.38.204.0/23 maxlen: 23
95.38.206.0/24 maxlen: 24
95.38.208.0/22 maxlen: 22
95.38.208.0/21 maxlen: 21
95.38.211.0/24 maxlen: 24
95.38.212.0/23 maxlen: 23
95.38.210.0/24 maxlen: 24
95.38.215.0/24 maxlen: 24
95.38.216.0/23 maxlen: 23
95.38.218.0/24 maxlen: 24
95.38.219.0/24 maxlen: 24
95.38.218.0/23 maxlen: 23
95.38.220.0/22 maxlen: 22
95.38.225.0/24 maxlen: 24
95.38.226.0/23 maxlen: 23
95.38.224.0/24 maxlen: 24
95.38.228.0/22 maxlen: 22
95.38.232.0/21 maxlen: 21
95.38.27.0/24 maxlen: 24
95.38.28.0/24 maxlen: 24
95.38.25.0/24 maxlen: 24
95.38.26.0/24 maxlen: 24
95.38.31.0/24 maxlen: 24
95.38.29.0/24 maxlen: 24
95.38.30.0/24 maxlen: 24
95.38.34.0/24 maxlen: 24
95.38.35.0/24 maxlen: 24
95.38.32.0/24 maxlen: 24
95.38.33.0/24 maxlen: 24
95.38.36.0/23 maxlen: 23
95.38.41.0/24 maxlen: 24
95.38.42.0/24 maxlen: 24
95.38.39.0/24 maxlen: 24
95.38.40.0/24 maxlen: 24
95.38.44.0/24 maxlen: 24
95.38.43.0/24 maxlen: 24
95.38.44.0/22 maxlen: 22
95.38.48.0/24 maxlen: 24
95.38.49.0/24 maxlen: 24
95.38.46.0/24 maxlen: 24
95.38.47.0/24 maxlen: 24
95.38.51.0/24 maxlen: 24
95.38.50.0/24 maxlen: 24
95.38.54.0/23 maxlen: 23
95.38.56.0/23 maxlen: 23
95.38.53.0/24 maxlen: 24
95.38.58.0/24 maxlen: 24
95.38.52.0/24 maxlen: 24
95.38.60.0/24 maxlen: 24
95.38.62.0/23 maxlen: 23
95.38.61.0/24 maxlen: 24
95.38.64.0/24 maxlen: 24
95.38.59.0/24 maxlen: 24
95.38.69.0/24 maxlen: 24
95.38.70.0/24 maxlen: 24
95.38.68.0/24 maxlen: 24
95.38.71.0/24 maxlen: 24
95.38.65.0/24 maxlen: 24
95.38.66.0/23 maxlen: 23
95.38.76.0/24 maxlen: 24
95.38.74.0/23 maxlen: 23
95.38.74.0/24 maxlen: 24
95.38.75.0/24 maxlen: 24
95.38.78.0/23 maxlen: 23
95.38.77.0/24 maxlen: 24
95.38.73.0/24 maxlen: 24
95.38.0.0/21 maxlen: 21
95.38.11.0/24 maxlen: 24
95.38.10.0/24 maxlen: 24
95.38.8.0/24 maxlen: 24
95.38.9.0/24 maxlen: 24
95.38.13.0/24 maxlen: 24
95.38.14.0/24 maxlen: 24
95.38.12.0/24 maxlen: 24
95.38.17.0/24 maxlen: 24
95.38.15.0/24 maxlen: 24
95.38.16.0/20 maxlen: 20
95.38.16.0/24 maxlen: 24
95.38.20.0/24 maxlen: 24
95.38.21.0/24 maxlen: 24
95.38.18.0/24 maxlen: 24
95.38.19.0/24 maxlen: 24
95.38.24.0/24 maxlen: 24
95.38.22.0/24 maxlen: 24
95.38.23.0/24 maxlen: 24
95.38.160.0/21 maxlen: 21
95.38.172.0/23 maxlen: 23
95.38.171.0/24 maxlen: 24
95.38.170.0/24 maxlen: 24
95.38.168.0/22 maxlen: 22
95.38.168.0/23 maxlen: 23
95.38.169.0/24 maxlen: 24
95.38.174.0/24 maxlen: 24
95.38.175.0/24 maxlen: 24
95.38.176.0/20 maxlen: 20
95.38.82.0/23 maxlen: 23
95.38.81.0/24 maxlen: 24
95.38.84.0/23 maxlen: 23
95.38.84.0/24 maxlen: 24
95.38.85.0/24 maxlen: 24
95.38.80.0/24 maxlen: 24
95.38.90.0/24 maxlen: 24
95.38.88.0/22 maxlen: 22
95.38.88.0/24 maxlen: 24
95.38.89.0/24 maxlen: 24
95.38.91.0/24 maxlen: 24
95.38.86.0/24 maxlen: 24
95.38.87.0/24 maxlen: 24
95.38.93.0/24 maxlen: 24
95.38.94.0/23 maxlen: 23
95.38.92.0/24 maxlen: 24
95.38.96.0/23 maxlen: 23
95.38.96.0/21 maxlen: 21
95.38.98.0/23 maxlen: 23
95.38.98.0/24 maxlen: 24
95.38.102.0/23 maxlen: 23
95.38.104.0/22 maxlen: 22
95.38.99.0/24 maxlen: 24
95.38.100.0/23 maxlen: 23
95.38.109.0/24 maxlen: 24
95.38.110.0/23 maxlen: 23
95.38.108.0/24 maxlen: 24
95.38.117.0/24 maxlen: 24
95.38.118.0/24 maxlen: 24
95.38.116.0/23 maxlen: 23
95.38.116.0/24 maxlen: 24
95.38.112.0/21 maxlen: 21
95.38.124.0/24 maxlen: 24
95.38.125.0/24 maxlen: 24
95.38.123.0/24 maxlen: 24
95.38.121.0/24 maxlen: 24
95.38.122.0/24 maxlen: 24
95.38.122.0/23 maxlen: 23
95.38.119.0/24 maxlen: 24
95.38.120.0/24 maxlen: 24
95.38.130.0/23 maxlen: 23
95.38.128.0/24 maxlen: 24
95.38.126.0/23 maxlen: 23
95.38.129.0/24 maxlen: 24
95.38.128.0/20 maxlen: 20
95.38.128.0/23 maxlen: 23
95.38.128.0/22 maxlen: 22
185.20.162.0/24 maxlen: 24
185.20.163.0/24 maxlen: 24
185.20.160.0/24 maxlen: 24
185.20.161.0/24 maxlen: 24
2a01:bd80::/29 maxlen: 29
2a00:52e0::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:ba:04:68:21:4c:5b:61:c5:7c:9c:3d:ff:8e:9b:2e:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0c104041691dc384f3b1a8cdf95c96628ea6daf
Validity
Not Before: Aug 3 06:09:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4259811d9ed24d534bcc39ac27616a17d26dd6e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:cc:a2:b3:f5:fe:c4:fa:d4:e7:cb:24:0b:2a:
44:38:2b:b0:95:1f:c4:06:29:4e:1b:f3:b4:66:e1:
7d:e1:21:9f:68:70:e4:9c:fb:21:88:b8:ec:0b:2e:
32:87:e3:db:cc:ae:ca:ed:df:6c:89:f7:bb:51:5b:
13:80:a2:4e:08:a0:3c:7e:3b:f5:ad:e9:95:cb:a6:
d7:e9:48:79:ba:50:26:4c:99:87:37:d6:46:f7:c4:
1d:e1:1e:5e:72:98:85:ed:aa:57:bb:5a:eb:57:62:
8f:2f:55:89:ea:70:82:73:22:a6:22:73:8b:e4:35:
da:d2:27:40:7b:9d:94:9e:72:2a:1f:99:a5:fb:ce:
b5:f5:cb:d1:a0:ff:bc:19:08:30:b0:f6:18:55:87:
68:5b:85:39:1a:04:da:5e:dd:c6:2e:24:4a:84:c3:
86:b2:9c:29:75:bc:ce:cd:03:6d:28:03:52:f4:1d:
2d:cb:ba:3d:0e:77:8d:eb:82:d5:a6:31:7c:c7:04:
69:71:73:dd:ed:b7:73:02:46:22:e7:fc:b1:30:74:
ca:94:88:a9:32:83:d2:3b:5f:1d:55:f1:67:5c:e9:
3c:a5:3a:47:e6:e5:88:11:3b:67:92:93:08:fe:7f:
a8:29:c5:e4:aa:a2:c4:cf:3b:ce:2c:8e:e3:58:b2:
38:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:59:81:1D:9E:D2:4D:53:4B:CC:39:AC:27:61:6A:17:D2:6D:D6:E9
X509v3 Authority Key Identifier:
keyid:F0:C1:04:04:16:91:DC:38:4F:3B:1A:8C:DF:95:C9:66:28:EA:6D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8MEEBBaR3DhPOxqM35XJZijqba8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/QlmBHZ7STVNLzDmsJ2FqF9Jt1uk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.38.0.0-95.38.37.255
95.38.39.0-95.38.71.255
95.38.73.0-95.38.143.255
95.38.160.0-95.38.206.255
95.38.208.0-95.38.247.255
95.38.252.0/22
185.20.160.0/22
IPv6:
2a00:52e0::/32
2a01:bd80::/29
Signature Algorithm: sha256WithRSAEncryption
6f:b0:31:71:fb:01:9a:8c:7c:8b:92:cf:5a:48:4c:c4:b5:97:
ae:01:91:e0:6a:8e:f8:17:2c:b3:44:d9:62:65:18:b4:c7:28:
fc:a2:7a:8c:8d:0b:ef:b3:be:a1:26:2c:72:26:64:d7:89:7e:
f7:16:bb:c1:2c:d3:28:30:c2:c3:36:ca:6d:f0:2c:7c:b2:e7:
d4:05:d5:6b:46:b1:be:e9:6e:d7:a6:5a:f4:ad:99:b8:19:36:
19:72:49:e6:04:bc:99:73:3f:88:de:d5:2b:c2:72:e4:be:f3:
26:e1:58:ea:46:4d:f2:75:3e:10:e2:49:90:89:81:8f:1b:c4:
bb:dd:a1:0e:c2:5a:89:12:ea:c1:66:58:51:ba:a7:03:b4:a9:
5e:91:87:d2:f8:73:e9:56:2a:67:e6:b6:ea:1e:d2:b2:9f:1c:
be:df:2f:d1:04:09:e1:27:04:53:a8:aa:0a:db:e4:f7:a6:41:
0d:c4:ba:88:0f:22:92:28:69:e7:f6:a4:c5:54:92:18:c7:c8:
20:ff:d6:12:f1:6e:c1:c2:47:d5:66:79:ca:30:c6:65:64:39:
b5:77:84:d8:4c:b2:70:13:57:69:99:6b:46:38:70:a4:cf:b4:
03:c9:7f:df:16:30:dd:98:8f:be:8c:cb:60:a8:6e:67:6b:8a:
d4:0f:e2:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 22:40:09 2025 by rpki-client