Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/YHeqA9Wa0G-mwHd5F1zr7tO1z9w.roa
File: YHeqA9Wa0G-mwHd5F1zr7tO1z9w.roa (raw, json)
Hash identifier: OJNfhGedDP5V7sa9SBbthYr3aRAiCEJJAqHjmQGncJI=
Subject key identifier: 60:77:AA:03:D5:9A:D0:6F:A6:C0:77:79:17:5C:EB:EE:D3:B5:CF:DC
Certificate issuer: /CN=f0c104041691dc384f3b1a8cdf95c96628ea6daf
Certificate serial: 06D954BC
Authority key identifier: F0:C1:04:04:16:91:DC:38:4F:3B:1A:8C:DF:95:C9:66:28:EA:6D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8MEEBBaR3DhPOxqM35XJZijqba8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/YHeqA9Wa0G-mwHd5F1zr7tO1z9w.roa
Signing time: Sun 29 May 2022 12:54:13 +0000
ROA not before: Sun 29 May 2022 12:54:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41881
IP address blocks: 95.38.240.0/21 maxlen: 21
95.38.253.0/24 maxlen: 24
95.38.252.0/24 maxlen: 24
95.38.255.0/24 maxlen: 24
95.38.254.0/24 maxlen: 24
95.38.192.0/21 maxlen: 21
95.38.200.0/22 maxlen: 22
95.38.201.0/24 maxlen: 24
95.38.202.0/24 maxlen: 24
95.38.200.0/24 maxlen: 24
95.38.203.0/24 maxlen: 24
95.38.204.0/23 maxlen: 23
95.38.206.0/24 maxlen: 24
95.38.208.0/21 maxlen: 21
95.38.211.0/24 maxlen: 24
95.38.210.0/24 maxlen: 24
95.38.215.0/24 maxlen: 24
95.38.216.0/23 maxlen: 23
95.38.218.0/24 maxlen: 24
95.38.219.0/24 maxlen: 24
95.38.218.0/23 maxlen: 23
95.38.220.0/22 maxlen: 22
95.38.225.0/24 maxlen: 24
95.38.226.0/23 maxlen: 23
95.38.224.0/24 maxlen: 24
95.38.228.0/22 maxlen: 22
95.38.232.0/21 maxlen: 21
95.38.27.0/24 maxlen: 24
95.38.28.0/24 maxlen: 24
95.38.25.0/24 maxlen: 24
95.38.26.0/24 maxlen: 24
95.38.31.0/24 maxlen: 24
95.38.29.0/24 maxlen: 24
95.38.30.0/24 maxlen: 24
95.38.34.0/24 maxlen: 24
95.38.35.0/24 maxlen: 24
95.38.32.0/24 maxlen: 24
95.38.33.0/24 maxlen: 24
95.38.36.0/23 maxlen: 23
95.38.38.0/24 maxlen: 24
95.38.41.0/24 maxlen: 24
95.38.42.0/24 maxlen: 24
95.38.39.0/24 maxlen: 24
95.38.40.0/24 maxlen: 24
95.38.44.0/24 maxlen: 24
95.38.43.0/24 maxlen: 24
95.38.44.0/22 maxlen: 22
95.38.48.0/24 maxlen: 24
95.38.49.0/24 maxlen: 24
95.38.46.0/24 maxlen: 24
95.38.47.0/24 maxlen: 24
95.38.51.0/24 maxlen: 24
95.38.50.0/24 maxlen: 24
95.38.45.0/24 maxlen: 24
95.38.54.0/23 maxlen: 23
95.38.56.0/23 maxlen: 23
95.38.53.0/24 maxlen: 24
95.38.58.0/24 maxlen: 24
95.38.52.0/24 maxlen: 24
95.38.60.0/24 maxlen: 24
95.38.62.0/23 maxlen: 23
95.38.61.0/24 maxlen: 24
95.38.64.0/24 maxlen: 24
95.38.59.0/24 maxlen: 24
95.38.69.0/24 maxlen: 24
95.38.70.0/24 maxlen: 24
95.38.68.0/24 maxlen: 24
95.38.71.0/24 maxlen: 24
95.38.65.0/24 maxlen: 24
95.38.66.0/23 maxlen: 23
95.38.76.0/24 maxlen: 24
95.38.74.0/23 maxlen: 23
95.38.74.0/24 maxlen: 24
95.38.75.0/24 maxlen: 24
95.38.78.0/23 maxlen: 23
95.38.77.0/24 maxlen: 24
95.38.72.0/24 maxlen: 24
95.38.73.0/24 maxlen: 24
95.38.0.0/21 maxlen: 21
95.38.11.0/24 maxlen: 24
95.38.10.0/24 maxlen: 24
95.38.8.0/24 maxlen: 24
95.38.9.0/24 maxlen: 24
95.38.13.0/24 maxlen: 24
95.38.14.0/24 maxlen: 24
95.38.12.0/24 maxlen: 24
95.38.17.0/24 maxlen: 24
95.38.15.0/24 maxlen: 24
95.38.16.0/20 maxlen: 20
95.38.16.0/24 maxlen: 24
95.38.20.0/24 maxlen: 24
95.38.21.0/24 maxlen: 24
95.38.18.0/24 maxlen: 24
95.38.19.0/24 maxlen: 24
95.38.24.0/24 maxlen: 24
95.38.22.0/24 maxlen: 24
95.38.23.0/24 maxlen: 24
95.38.160.0/21 maxlen: 21
95.38.172.0/23 maxlen: 23
95.38.171.0/24 maxlen: 24
95.38.170.0/24 maxlen: 24
95.38.168.0/23 maxlen: 23
95.38.168.0/22 maxlen: 22
95.38.169.0/24 maxlen: 24
95.38.174.0/24 maxlen: 24
95.38.175.0/24 maxlen: 24
95.38.176.0/20 maxlen: 20
95.38.82.0/23 maxlen: 23
95.38.81.0/24 maxlen: 24
95.38.84.0/23 maxlen: 23
95.38.84.0/24 maxlen: 24
95.38.85.0/24 maxlen: 24
95.38.80.0/24 maxlen: 24
95.38.90.0/24 maxlen: 24
95.38.88.0/22 maxlen: 22
95.38.88.0/24 maxlen: 24
95.38.89.0/24 maxlen: 24
95.38.91.0/24 maxlen: 24
95.38.86.0/24 maxlen: 24
95.38.87.0/24 maxlen: 24
95.38.93.0/24 maxlen: 24
95.38.94.0/23 maxlen: 23
95.38.92.0/24 maxlen: 24
95.38.96.0/23 maxlen: 23
95.38.96.0/21 maxlen: 21
95.38.98.0/23 maxlen: 23
95.38.98.0/24 maxlen: 24
95.38.102.0/23 maxlen: 23
95.38.104.0/22 maxlen: 22
95.38.99.0/24 maxlen: 24
95.38.100.0/23 maxlen: 23
95.38.109.0/24 maxlen: 24
95.38.110.0/23 maxlen: 23
95.38.108.0/24 maxlen: 24
95.38.117.0/24 maxlen: 24
95.38.116.0/23 maxlen: 23
95.38.118.0/24 maxlen: 24
95.38.116.0/24 maxlen: 24
95.38.112.0/21 maxlen: 21
95.38.124.0/24 maxlen: 24
95.38.125.0/24 maxlen: 24
95.38.123.0/24 maxlen: 24
95.38.121.0/24 maxlen: 24
95.38.122.0/24 maxlen: 24
95.38.119.0/24 maxlen: 24
95.38.120.0/24 maxlen: 24
95.38.128.0/24 maxlen: 24
95.38.126.0/23 maxlen: 23
95.38.129.0/24 maxlen: 24
95.38.128.0/20 maxlen: 20
95.38.128.0/22 maxlen: 22
95.38.128.0/23 maxlen: 23
185.20.162.0/24 maxlen: 24
185.20.163.0/24 maxlen: 24
185.20.160.0/24 maxlen: 24
185.20.161.0/24 maxlen: 24
2a01:bd80::/29 maxlen: 29
2a00:52e0::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114906300 (0x6d954bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0c104041691dc384f3b1a8cdf95c96628ea6daf
Validity
Not Before: May 29 12:54:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6077aa03d59ad06fa6c07779175cebeed3b5cfdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:77:d3:42:5f:23:07:1f:45:e3:2e:62:30:d3:
d8:4a:b7:81:e0:07:4f:9d:8e:87:c7:35:df:36:03:
03:a0:e1:fa:1d:d5:78:61:6e:ed:ce:ce:93:c2:1e:
b1:91:0e:5e:e1:5f:41:ad:ec:c2:91:19:5f:d5:04:
47:16:a9:96:c7:ce:7c:4d:0a:05:c5:f8:e8:26:16:
19:35:87:00:a0:25:97:76:de:94:0e:97:ff:07:fd:
8c:55:69:3c:0d:d1:1f:79:44:26:29:cf:8a:e7:9e:
a7:a1:df:8e:84:f1:79:c6:3f:6b:23:e6:93:34:05:
6d:86:97:95:57:d5:de:ae:8c:d7:45:ea:d1:74:77:
68:9d:d2:06:80:d0:2a:13:5e:3f:33:a6:33:b7:4c:
ad:e3:d4:46:d1:b3:f6:39:a8:10:07:5a:61:8f:af:
e8:e5:80:91:d8:62:a9:a8:aa:03:4d:82:20:8a:00:
3a:40:b0:5f:0a:b3:ac:d0:be:36:18:39:62:5e:f6:
6a:b9:5d:50:9e:91:a1:08:cd:cb:44:7e:e5:e5:f8:
8d:8e:a5:94:45:a6:c2:64:00:3e:2a:7a:f7:96:c4:
bf:61:01:78:81:fb:3b:ea:66:26:fb:07:08:e1:88:
86:2f:09:f6:30:ce:e4:f7:8e:b7:c2:96:73:df:81:
62:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:77:AA:03:D5:9A:D0:6F:A6:C0:77:79:17:5C:EB:EE:D3:B5:CF:DC
X509v3 Authority Key Identifier:
keyid:F0:C1:04:04:16:91:DC:38:4F:3B:1A:8C:DF:95:C9:66:28:EA:6D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8MEEBBaR3DhPOxqM35XJZijqba8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/YHeqA9Wa0G-mwHd5F1zr7tO1z9w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.38.0.0-95.38.143.255
95.38.160.0-95.38.206.255
95.38.208.0-95.38.247.255
95.38.252.0/22
185.20.160.0/22
IPv6:
2a00:52e0::/32
2a01:bd80::/29
Signature Algorithm: sha256WithRSAEncryption
2a:b2:fe:4a:6c:d8:b8:50:aa:13:48:83:7a:c3:65:22:2b:35:
57:be:13:9d:49:57:93:fa:b0:cd:33:5f:ca:7c:27:0d:ef:ce:
b0:11:7a:d1:77:1b:9a:6d:6b:26:c8:5d:07:07:99:23:93:02:
ff:ed:31:d0:ee:5b:86:30:71:c1:10:35:b9:11:2e:7a:b8:58:
1b:38:f0:9b:6b:40:43:a4:71:3a:e3:79:0f:e3:a0:f5:93:23:
92:e8:53:e9:2b:85:a2:88:4b:48:ad:ee:f2:45:61:52:69:34:
43:3c:e6:18:60:cf:a0:53:ab:72:9f:5d:cf:fb:98:8b:62:7e:
42:5c:87:b8:51:be:cb:f1:b9:f6:75:dc:d3:84:da:ea:7d:68:
12:e5:c0:93:69:25:bd:a3:78:42:24:8b:d4:28:38:46:55:2b:
56:1a:ad:3d:40:3f:0d:6f:50:29:c1:ca:4c:ba:b0:6d:f0:ec:
90:35:3f:4a:18:21:76:fb:16:29:95:2f:8b:50:e4:bc:61:fc:
70:10:7c:d5:27:03:03:ed:dc:1a:82:03:d7:3c:b4:23:6d:47:
73:d3:67:32:25:b1:71:fc:09:a2:db:70:fe:b5:8c:75:96:2b:
1e:ec:63:4c:9c:6c:d7:11:99:30:d2:ac:9a:63:b6:ed:90:77:
fe:82:fa:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:54 2024 by rpki-client on console-fra.rpki-client.org