Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/mIFDVXxymvYOk9ebnB1W7kcHo3o.roa
File: mIFDVXxymvYOk9ebnB1W7kcHo3o.roa (raw, json)
Hash identifier: 1PTYVl+ZkeJHw60bTZcIExmrcIV7sWzOt6RAmTFKC2s=
Subject key identifier: 98:81:43:55:7C:72:9A:F6:0E:93:D7:9B:9C:1D:56:EE:47:07:A3:7A
Certificate issuer: /CN=f0c104041691dc384f3b1a8cdf95c96628ea6daf
Certificate serial: 018CCA29D0705A6534CFA75100580AD9C3AF
Authority key identifier: F0:C1:04:04:16:91:DC:38:4F:3B:1A:8C:DF:95:C9:66:28:EA:6D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8MEEBBaR3DhPOxqM35XJZijqba8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/mIFDVXxymvYOk9ebnB1W7kcHo3o.roa
Signing time: Tue 02 Jan 2024 12:33:07 +0000
ROA not before: Tue 02 Jan 2024 12:33:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41881
IP address blocks: 95.38.240.0/21 maxlen: 21
95.38.253.0/24 maxlen: 24
95.38.252.0/24 maxlen: 24
95.38.255.0/24 maxlen: 24
95.38.254.0/24 maxlen: 24
95.38.192.0/24 maxlen: 24
95.38.192.0/21 maxlen: 21
95.38.199.0/24 maxlen: 24
95.38.194.0/24 maxlen: 24
95.38.195.0/24 maxlen: 24
95.38.193.0/24 maxlen: 24
95.38.197.0/24 maxlen: 24
95.38.196.0/24 maxlen: 24
95.38.201.0/24 maxlen: 24
95.38.202.0/24 maxlen: 24
95.38.200.0/24 maxlen: 24
95.38.203.0/24 maxlen: 24
95.38.200.0/22 maxlen: 22
95.38.204.0/23 maxlen: 23
95.38.206.0/24 maxlen: 24
95.38.208.0/22 maxlen: 22
95.38.208.0/21 maxlen: 21
95.38.212.0/23 maxlen: 23
95.38.211.0/24 maxlen: 24
95.38.210.0/24 maxlen: 24
95.38.216.0/23 maxlen: 23
95.38.218.0/23 maxlen: 23
95.38.215.0/24 maxlen: 24
95.38.218.0/24 maxlen: 24
95.38.219.0/24 maxlen: 24
95.38.220.0/22 maxlen: 22
95.38.226.0/23 maxlen: 23
95.38.225.0/24 maxlen: 24
95.38.224.0/24 maxlen: 24
95.38.228.0/22 maxlen: 22
95.38.232.0/21 maxlen: 21
95.38.27.0/24 maxlen: 24
95.38.28.0/24 maxlen: 24
95.38.25.0/24 maxlen: 24
95.38.26.0/24 maxlen: 24
95.38.31.0/24 maxlen: 24
95.38.29.0/24 maxlen: 24
95.38.30.0/24 maxlen: 24
95.38.36.0/23 maxlen: 23
95.38.34.0/24 maxlen: 24
95.38.35.0/24 maxlen: 24
95.38.32.0/24 maxlen: 24
95.38.33.0/24 maxlen: 24
95.38.41.0/24 maxlen: 24
95.38.42.0/24 maxlen: 24
95.38.39.0/24 maxlen: 24
95.38.40.0/24 maxlen: 24
95.38.44.0/24 maxlen: 24
95.38.43.0/24 maxlen: 24
95.38.44.0/22 maxlen: 22
95.38.48.0/24 maxlen: 24
95.38.49.0/24 maxlen: 24
95.38.46.0/24 maxlen: 24
95.38.47.0/24 maxlen: 24
95.38.51.0/24 maxlen: 24
95.38.50.0/24 maxlen: 24
95.38.53.0/24 maxlen: 24
95.38.58.0/24 maxlen: 24
95.38.52.0/24 maxlen: 24
95.38.54.0/23 maxlen: 23
95.38.56.0/23 maxlen: 23
95.38.60.0/24 maxlen: 24
95.38.61.0/24 maxlen: 24
95.38.64.0/24 maxlen: 24
95.38.59.0/24 maxlen: 24
95.38.62.0/23 maxlen: 23
95.38.69.0/24 maxlen: 24
95.38.70.0/24 maxlen: 24
95.38.68.0/24 maxlen: 24
95.38.71.0/24 maxlen: 24
95.38.65.0/24 maxlen: 24
95.38.66.0/23 maxlen: 23
95.38.76.0/24 maxlen: 24
95.38.74.0/24 maxlen: 24
95.38.75.0/24 maxlen: 24
95.38.77.0/24 maxlen: 24
95.38.73.0/24 maxlen: 24
95.38.74.0/23 maxlen: 23
95.38.78.0/23 maxlen: 23
95.38.0.0/21 maxlen: 21
95.38.11.0/24 maxlen: 24
95.38.10.0/24 maxlen: 24
95.38.8.0/24 maxlen: 24
95.38.9.0/24 maxlen: 24
95.38.16.0/20 maxlen: 20
95.38.13.0/24 maxlen: 24
95.38.14.0/24 maxlen: 24
95.38.12.0/24 maxlen: 24
95.38.17.0/24 maxlen: 24
95.38.15.0/24 maxlen: 24
95.38.16.0/24 maxlen: 24
95.38.20.0/24 maxlen: 24
95.38.21.0/24 maxlen: 24
95.38.18.0/24 maxlen: 24
95.38.19.0/24 maxlen: 24
95.38.24.0/24 maxlen: 24
95.38.22.0/24 maxlen: 24
95.38.23.0/24 maxlen: 24
95.38.160.0/21 maxlen: 21
95.38.171.0/24 maxlen: 24
95.38.170.0/24 maxlen: 24
95.38.169.0/24 maxlen: 24
95.38.172.0/23 maxlen: 23
95.38.168.0/23 maxlen: 23
95.38.168.0/22 maxlen: 22
95.38.174.0/24 maxlen: 24
95.38.175.0/24 maxlen: 24
95.38.176.0/20 maxlen: 20
95.38.81.0/24 maxlen: 24
95.38.84.0/24 maxlen: 24
95.38.85.0/24 maxlen: 24
95.38.80.0/24 maxlen: 24
95.38.82.0/23 maxlen: 23
95.38.84.0/23 maxlen: 23
95.38.90.0/24 maxlen: 24
95.38.88.0/24 maxlen: 24
95.38.89.0/24 maxlen: 24
95.38.91.0/24 maxlen: 24
95.38.86.0/24 maxlen: 24
95.38.87.0/24 maxlen: 24
95.38.88.0/22 maxlen: 22
95.38.93.0/24 maxlen: 24
95.38.92.0/24 maxlen: 24
95.38.96.0/23 maxlen: 23
95.38.96.0/21 maxlen: 21
95.38.98.0/23 maxlen: 23
95.38.94.0/23 maxlen: 23
95.38.98.0/24 maxlen: 24
95.38.102.0/23 maxlen: 23
95.38.104.0/22 maxlen: 22
95.38.100.0/23 maxlen: 23
95.38.99.0/24 maxlen: 24
95.38.110.0/23 maxlen: 23
95.38.109.0/24 maxlen: 24
95.38.108.0/24 maxlen: 24
95.38.116.0/23 maxlen: 23
95.38.112.0/21 maxlen: 21
95.38.117.0/24 maxlen: 24
95.38.118.0/24 maxlen: 24
95.38.116.0/24 maxlen: 24
95.38.122.0/23 maxlen: 23
95.38.124.0/24 maxlen: 24
95.38.125.0/24 maxlen: 24
95.38.123.0/24 maxlen: 24
95.38.121.0/24 maxlen: 24
95.38.122.0/24 maxlen: 24
95.38.119.0/24 maxlen: 24
95.38.120.0/24 maxlen: 24
95.38.130.0/23 maxlen: 23
95.38.126.0/23 maxlen: 23
95.38.128.0/20 maxlen: 20
95.38.128.0/22 maxlen: 22
95.38.128.0/23 maxlen: 23
95.38.128.0/24 maxlen: 24
95.38.129.0/24 maxlen: 24
185.20.162.0/24 maxlen: 24
185.20.163.0/24 maxlen: 24
185.20.160.0/24 maxlen: 24
185.20.161.0/24 maxlen: 24
2a01:bd80::/29 maxlen: 29
2a00:52e0::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 19 Jun 2024 09:27:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:d0:70:5a:65:34:cf:a7:51:00:58:0a:d9:c3:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0c104041691dc384f3b1a8cdf95c96628ea6daf
Validity
Not Before: Jan 2 12:33:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=988143557c729af60e93d79b9c1d56ee4707a37a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:e8:0d:70:ae:89:57:5e:86:92:88:ca:7a:19:
f6:12:2f:bb:0d:3d:74:3e:08:93:46:1c:f8:f0:d7:
af:12:c0:5f:64:88:d6:d9:ad:9d:cc:9a:b7:d4:0d:
ce:ac:3c:27:a3:c1:c3:4b:a3:53:b9:68:84:0c:18:
f8:1d:e6:96:33:0b:b6:3b:48:30:80:e0:a9:3c:1d:
71:4b:75:d9:65:7e:48:8a:b8:dd:d6:2a:bc:3b:c7:
27:fa:9e:8d:0c:78:32:c6:9a:28:2b:59:d0:b6:a4:
9e:96:39:d8:06:82:2d:65:cb:89:37:52:f1:3b:df:
0a:b9:91:57:35:c3:89:36:08:54:69:c7:7a:75:ba:
9b:ec:5c:9d:c1:30:fd:4b:a2:b9:45:07:74:9b:7d:
a7:78:eb:af:68:22:39:a0:32:e5:1a:a9:0f:30:ff:
00:ef:f8:1c:d4:03:81:51:1e:c0:86:cd:ff:ca:4f:
82:94:10:70:b8:90:8a:49:53:ca:8d:bf:ee:42:ee:
a8:9a:5c:66:07:5d:2b:7b:8e:e4:ca:ba:a4:de:c8:
6f:b6:08:dc:1e:8d:f6:39:aa:8a:d5:c2:de:05:42:
bd:74:d7:ba:47:a0:b4:f6:f4:f7:1a:21:d4:af:23:
92:ed:54:a3:7a:3a:f5:0d:86:f3:b0:d8:9e:91:78:
0e:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:81:43:55:7C:72:9A:F6:0E:93:D7:9B:9C:1D:56:EE:47:07:A3:7A
X509v3 Authority Key Identifier:
keyid:F0:C1:04:04:16:91:DC:38:4F:3B:1A:8C:DF:95:C9:66:28:EA:6D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8MEEBBaR3DhPOxqM35XJZijqba8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/mIFDVXxymvYOk9ebnB1W7kcHo3o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.38.0.0-95.38.37.255
95.38.39.0-95.38.71.255
95.38.73.0-95.38.143.255
95.38.160.0-95.38.206.255
95.38.208.0-95.38.247.255
95.38.252.0/22
185.20.160.0/22
IPv6:
2a00:52e0::/32
2a01:bd80::/29
Signature Algorithm: sha256WithRSAEncryption
36:c0:3d:6b:c7:42:15:da:fe:b7:21:e4:0b:3f:d2:41:46:73:
81:2e:dc:a7:92:f1:d0:52:30:41:81:ea:60:50:56:97:d3:98:
76:0e:f2:e5:ac:91:93:09:51:f2:ad:81:8d:35:ec:1f:48:3a:
78:6b:d4:a8:26:ff:34:65:28:97:97:d3:78:d5:f0:b7:ff:29:
65:6a:16:35:00:51:5a:35:bb:a5:d1:40:9c:f5:aa:b6:99:a7:
79:fa:6c:cf:75:c2:ac:fe:dd:00:27:6b:7b:d6:ac:8a:39:5a:
5c:3e:ad:52:20:42:bf:eb:38:e3:8d:43:c5:13:37:77:cb:b9:
33:27:d1:29:7d:5a:24:07:03:02:bc:3c:fb:5d:6a:63:53:0d:
16:40:b6:6b:7f:42:5d:20:b8:12:59:f7:1c:cd:d3:ac:8e:e7:
4e:0a:48:9f:01:a0:e3:f8:c4:b0:ac:fa:f6:e4:c3:b8:0e:b1:
f7:6a:31:2a:34:2f:f0:bf:da:c7:cf:b5:d3:75:59:b4:17:73:
51:d8:25:4c:54:3d:66:72:bc:8c:9f:ef:cf:d4:a9:9a:25:34:
cd:bf:3f:b7:ea:b6:d5:3e:8d:8f:87:7e:4e:74:6f:1b:d4:c3:
f5:62:2a:e1:16:c2:b1:2c:de:d6:69:3b:bc:bc:74:d1:b4:57:
eb:6f:52:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 19 11:35:05 2024 by rpki-client on console-fra.rpki-client.org