Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/kR_baFwOGvg-7RMCJnyKG2mHY4k.roa
File: kR_baFwOGvg-7RMCJnyKG2mHY4k.roa (raw, json)
Hash identifier: qZpUmIPhJNUO0SQlThwNRictvTgazZZlN7oGoeWfbxY=
Subject key identifier: 91:1F:DB:68:5C:0E:1A:F8:3E:ED:13:02:26:7C:8A:1B:69:87:63:89
Certificate issuer: /CN=f0c104041691dc384f3b1a8cdf95c96628ea6daf
Certificate serial: 01902FD2ACDECA81A0B3A00998805EA194F7
Authority key identifier: F0:C1:04:04:16:91:DC:38:4F:3B:1A:8C:DF:95:C9:66:28:EA:6D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8MEEBBaR3DhPOxqM35XJZijqba8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/kR_baFwOGvg-7RMCJnyKG2mHY4k.roa
Signing time: Wed 19 Jun 2024 09:27:34 +0000
ROA not before: Wed 19 Jun 2024 09:27:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41881
IP address blocks: 95.38.0.0/21 maxlen: 21
95.38.8.0/24 maxlen: 24
95.38.9.0/24 maxlen: 24
95.38.10.0/24 maxlen: 24
95.38.11.0/24 maxlen: 24
95.38.12.0/24 maxlen: 24
95.38.13.0/24 maxlen: 24
95.38.14.0/24 maxlen: 24
95.38.15.0/24 maxlen: 24
95.38.16.0/20 maxlen: 20
95.38.16.0/24 maxlen: 24
95.38.17.0/24 maxlen: 24
95.38.18.0/24 maxlen: 24
95.38.19.0/24 maxlen: 24
95.38.20.0/24 maxlen: 24
95.38.21.0/24 maxlen: 24
95.38.22.0/24 maxlen: 24
95.38.23.0/24 maxlen: 24
95.38.24.0/24 maxlen: 24
95.38.25.0/24 maxlen: 24
95.38.26.0/24 maxlen: 24
95.38.27.0/24 maxlen: 24
95.38.28.0/24 maxlen: 24
95.38.29.0/24 maxlen: 24
95.38.30.0/24 maxlen: 24
95.38.31.0/24 maxlen: 24
95.38.32.0/24 maxlen: 24
95.38.33.0/24 maxlen: 24
95.38.34.0/24 maxlen: 24
95.38.35.0/24 maxlen: 24
95.38.36.0/23 maxlen: 23
95.38.39.0/24 maxlen: 24
95.38.40.0/24 maxlen: 24
95.38.41.0/24 maxlen: 24
95.38.42.0/24 maxlen: 24
95.38.43.0/24 maxlen: 24
95.38.44.0/22 maxlen: 22
95.38.44.0/24 maxlen: 24
95.38.46.0/24 maxlen: 24
95.38.47.0/24 maxlen: 24
95.38.48.0/24 maxlen: 24
95.38.49.0/24 maxlen: 24
95.38.50.0/24 maxlen: 24
95.38.51.0/24 maxlen: 24
95.38.52.0/24 maxlen: 24
95.38.53.0/24 maxlen: 24
95.38.54.0/23 maxlen: 23
95.38.56.0/23 maxlen: 23
95.38.58.0/24 maxlen: 24
95.38.59.0/24 maxlen: 24
95.38.60.0/24 maxlen: 24
95.38.61.0/24 maxlen: 24
95.38.62.0/23 maxlen: 23
95.38.63.0/24 maxlen: 24
95.38.64.0/24 maxlen: 24
95.38.65.0/24 maxlen: 24
95.38.66.0/23 maxlen: 23
95.38.68.0/24 maxlen: 24
95.38.69.0/24 maxlen: 24
95.38.70.0/24 maxlen: 24
95.38.71.0/24 maxlen: 24
95.38.73.0/24 maxlen: 24
95.38.74.0/23 maxlen: 23
95.38.74.0/24 maxlen: 24
95.38.75.0/24 maxlen: 24
95.38.76.0/24 maxlen: 24
95.38.77.0/24 maxlen: 24
95.38.78.0/23 maxlen: 23
95.38.80.0/24 maxlen: 24
95.38.81.0/24 maxlen: 24
95.38.82.0/23 maxlen: 23
95.38.84.0/23 maxlen: 23
95.38.84.0/24 maxlen: 24
95.38.85.0/24 maxlen: 24
95.38.86.0/24 maxlen: 24
95.38.87.0/24 maxlen: 24
95.38.88.0/22 maxlen: 22
95.38.88.0/24 maxlen: 24
95.38.89.0/24 maxlen: 24
95.38.90.0/24 maxlen: 24
95.38.91.0/24 maxlen: 24
95.38.92.0/24 maxlen: 24
95.38.93.0/24 maxlen: 24
95.38.94.0/23 maxlen: 23
95.38.96.0/21 maxlen: 21
95.38.96.0/23 maxlen: 23
95.38.98.0/23 maxlen: 23
95.38.98.0/24 maxlen: 24
95.38.99.0/24 maxlen: 24
95.38.100.0/23 maxlen: 23
95.38.102.0/23 maxlen: 23
95.38.104.0/22 maxlen: 22
95.38.108.0/24 maxlen: 24
95.38.109.0/24 maxlen: 24
95.38.110.0/23 maxlen: 23
95.38.112.0/21 maxlen: 21
95.38.116.0/23 maxlen: 23
95.38.116.0/24 maxlen: 24
95.38.117.0/24 maxlen: 24
95.38.118.0/24 maxlen: 24
95.38.119.0/24 maxlen: 24
95.38.120.0/24 maxlen: 24
95.38.121.0/24 maxlen: 24
95.38.122.0/23 maxlen: 23
95.38.122.0/24 maxlen: 24
95.38.123.0/24 maxlen: 24
95.38.124.0/24 maxlen: 24
95.38.125.0/24 maxlen: 24
95.38.126.0/23 maxlen: 23
95.38.128.0/20 maxlen: 20
95.38.128.0/22 maxlen: 22
95.38.128.0/23 maxlen: 23
95.38.128.0/24 maxlen: 24
95.38.129.0/24 maxlen: 24
95.38.130.0/23 maxlen: 23
95.38.160.0/21 maxlen: 21
95.38.168.0/22 maxlen: 22
95.38.168.0/23 maxlen: 23
95.38.169.0/24 maxlen: 24
95.38.170.0/24 maxlen: 24
95.38.171.0/24 maxlen: 24
95.38.172.0/23 maxlen: 23
95.38.174.0/24 maxlen: 24
95.38.175.0/24 maxlen: 24
95.38.176.0/20 maxlen: 20
95.38.192.0/21 maxlen: 21
95.38.192.0/24 maxlen: 24
95.38.193.0/24 maxlen: 24
95.38.194.0/24 maxlen: 24
95.38.195.0/24 maxlen: 24
95.38.196.0/24 maxlen: 24
95.38.197.0/24 maxlen: 24
95.38.199.0/24 maxlen: 24
95.38.200.0/22 maxlen: 22
95.38.200.0/24 maxlen: 24
95.38.201.0/24 maxlen: 24
95.38.202.0/24 maxlen: 24
95.38.203.0/24 maxlen: 24
95.38.204.0/23 maxlen: 23
95.38.206.0/24 maxlen: 24
95.38.208.0/21 maxlen: 21
95.38.208.0/22 maxlen: 22
95.38.210.0/24 maxlen: 24
95.38.211.0/24 maxlen: 24
95.38.212.0/23 maxlen: 23
95.38.215.0/24 maxlen: 24
95.38.216.0/23 maxlen: 23
95.38.218.0/23 maxlen: 23
95.38.218.0/24 maxlen: 24
95.38.219.0/24 maxlen: 24
95.38.220.0/22 maxlen: 22
95.38.224.0/24 maxlen: 24
95.38.225.0/24 maxlen: 24
95.38.226.0/23 maxlen: 23
95.38.228.0/22 maxlen: 22
95.38.232.0/21 maxlen: 21
95.38.240.0/21 maxlen: 21
95.38.252.0/24 maxlen: 24
95.38.253.0/24 maxlen: 24
95.38.254.0/24 maxlen: 24
95.38.255.0/24 maxlen: 24
185.20.160.0/24 maxlen: 24
185.20.161.0/24 maxlen: 24
185.20.162.0/24 maxlen: 24
185.20.163.0/24 maxlen: 24
2a00:52e0::/32 maxlen: 32
2a01:bd80::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 26 Jun 2024 10:19:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:2f:d2:ac:de:ca:81:a0:b3:a0:09:98:80:5e:a1:94:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0c104041691dc384f3b1a8cdf95c96628ea6daf
Validity
Not Before: Jun 19 09:27:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=911fdb685c0e1af83eed1302267c8a1b69876389
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:96:14:b5:3a:a1:64:76:a8:1e:02:85:03:bc:
fc:77:3e:27:1d:fc:46:67:10:cb:85:f1:e3:c2:a4:
ce:3f:c9:74:23:a4:90:b3:94:dc:db:72:2c:de:c9:
56:31:bd:d8:81:93:2e:76:43:f3:d1:2d:89:08:e0:
a6:f4:01:66:a7:0b:13:0c:95:ff:81:d1:5c:94:6e:
6f:5e:c9:37:e3:67:09:dc:02:e1:00:c9:8f:ca:56:
df:44:63:eb:17:86:ca:43:17:2e:bf:4f:76:35:51:
86:5b:dd:7d:8d:0e:13:f0:b7:70:c3:53:db:2b:9a:
5b:66:a0:4b:0c:b5:82:64:e3:42:d6:a0:61:e9:b9:
9d:91:0b:5c:80:05:28:c8:9d:1a:a2:c7:42:65:3f:
e3:5b:6e:94:ff:5c:2a:e9:9b:a7:a9:7a:87:6d:aa:
42:74:c0:c0:8b:07:56:48:f9:17:1b:3d:f5:0d:6c:
69:2b:7d:5e:ec:ba:cf:98:47:9f:95:79:2d:fe:f4:
ea:0d:42:dd:f2:0d:98:f8:c4:7f:6e:c4:3d:cd:bf:
48:02:e3:42:58:5a:1e:d2:91:e3:b4:8d:91:ba:fa:
b8:d0:34:aa:0d:c8:a3:b1:aa:37:64:81:41:b8:94:
84:42:7f:a6:b7:63:54:2f:b0:11:5d:db:0b:ad:31:
df:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:1F:DB:68:5C:0E:1A:F8:3E:ED:13:02:26:7C:8A:1B:69:87:63:89
X509v3 Authority Key Identifier:
keyid:F0:C1:04:04:16:91:DC:38:4F:3B:1A:8C:DF:95:C9:66:28:EA:6D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8MEEBBaR3DhPOxqM35XJZijqba8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/kR_baFwOGvg-7RMCJnyKG2mHY4k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.38.0.0-95.38.37.255
95.38.39.0-95.38.71.255
95.38.73.0-95.38.143.255
95.38.160.0-95.38.206.255
95.38.208.0-95.38.247.255
95.38.252.0/22
185.20.160.0/22
IPv6:
2a00:52e0::/32
2a01:bd80::/29
Signature Algorithm: sha256WithRSAEncryption
4e:ed:1e:94:cc:3c:c9:54:44:53:a8:8a:61:55:8f:cf:fe:98:
e3:70:c5:a7:cb:be:42:70:7b:6f:e1:a9:48:f0:2d:63:67:c2:
49:d0:09:31:96:d3:46:37:ce:9c:20:4d:43:b0:dc:05:c2:65:
31:88:d8:c8:7b:52:0a:d3:f5:42:c8:09:63:b9:89:64:78:1d:
58:4e:89:8e:31:25:a4:bf:ff:f4:c7:9d:21:31:d8:54:7a:c3:
a0:7d:2d:b6:6d:07:66:15:ee:ca:d1:27:63:4d:86:22:a2:67:
13:63:17:d3:ef:66:94:50:d8:05:4d:ee:6f:ae:18:dd:01:f3:
58:61:3c:58:7a:90:3e:7f:16:16:21:f2:f1:5b:e2:01:5f:1d:
eb:aa:f5:6a:8c:b8:e7:90:08:05:21:3b:38:68:b2:d6:44:ec:
98:ae:ac:7c:31:15:07:d7:45:73:5a:67:ef:ee:25:cd:32:7c:
26:34:51:14:42:f6:e2:24:c9:43:02:62:fb:9d:ab:b9:b0:9b:
09:fd:76:f7:6b:29:9d:ba:13:a4:79:66:fe:fc:49:ff:aa:69:
bb:83:8a:4a:76:0a:2d:77:b8:5f:01:8f:65:51:78:a4:e3:2a:
bd:cb:25:5b:0d:5a:e8:e3:d9:21:9c:52:eb:ff:5e:e0:8a:e1:
b0:1d:b6:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 15:27:03 2024 by rpki-client on console-fra.rpki-client.org