Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/nl9tMJzgAZDUh4DSQYBzshHWqGo.roa
File: nl9tMJzgAZDUh4DSQYBzshHWqGo.roa (raw, json)
Hash identifier: q0DWXqTqzRc+WzaBSJ0s8yeoUmdV90VbDvJn7AFHL/E=
Subject key identifier: 9E:5F:6D:30:9C:E0:01:90:D4:87:80:D2:41:80:73:B2:11:D6:A8:6A
Certificate issuer: /CN=f0c104041691dc384f3b1a8cdf95c96628ea6daf
Certificate serial: 01856D6F86F17A11D06E6ED3A67C796D16BC
Authority key identifier: F0:C1:04:04:16:91:DC:38:4F:3B:1A:8C:DF:95:C9:66:28:EA:6D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8MEEBBaR3DhPOxqM35XJZijqba8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/nl9tMJzgAZDUh4DSQYBzshHWqGo.roa
Signing time: Sun 01 Jan 2023 13:05:03 +0000
ROA not before: Sun 01 Jan 2023 13:05:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41881
IP address blocks: 95.38.240.0/21 maxlen: 21
95.38.253.0/24 maxlen: 24
95.38.252.0/24 maxlen: 24
95.38.255.0/24 maxlen: 24
95.38.254.0/24 maxlen: 24
95.38.192.0/24 maxlen: 24
95.38.192.0/21 maxlen: 21
95.38.199.0/24 maxlen: 24
95.38.194.0/24 maxlen: 24
95.38.195.0/24 maxlen: 24
95.38.193.0/24 maxlen: 24
95.38.197.0/24 maxlen: 24
95.38.196.0/24 maxlen: 24
95.38.201.0/24 maxlen: 24
95.38.202.0/24 maxlen: 24
95.38.200.0/24 maxlen: 24
95.38.203.0/24 maxlen: 24
95.38.200.0/22 maxlen: 22
95.38.204.0/23 maxlen: 23
95.38.206.0/24 maxlen: 24
95.38.208.0/22 maxlen: 22
95.38.208.0/21 maxlen: 21
95.38.212.0/23 maxlen: 23
95.38.211.0/24 maxlen: 24
95.38.210.0/24 maxlen: 24
95.38.216.0/23 maxlen: 23
95.38.218.0/23 maxlen: 23
95.38.215.0/24 maxlen: 24
95.38.218.0/24 maxlen: 24
95.38.219.0/24 maxlen: 24
95.38.220.0/22 maxlen: 22
95.38.226.0/23 maxlen: 23
95.38.225.0/24 maxlen: 24
95.38.224.0/24 maxlen: 24
95.38.228.0/22 maxlen: 22
95.38.232.0/21 maxlen: 21
95.38.27.0/24 maxlen: 24
95.38.28.0/24 maxlen: 24
95.38.25.0/24 maxlen: 24
95.38.26.0/24 maxlen: 24
95.38.31.0/24 maxlen: 24
95.38.29.0/24 maxlen: 24
95.38.30.0/24 maxlen: 24
95.38.36.0/23 maxlen: 23
95.38.34.0/24 maxlen: 24
95.38.35.0/24 maxlen: 24
95.38.32.0/24 maxlen: 24
95.38.33.0/24 maxlen: 24
95.38.38.0/24 maxlen: 24
95.38.41.0/24 maxlen: 24
95.38.42.0/24 maxlen: 24
95.38.39.0/24 maxlen: 24
95.38.40.0/24 maxlen: 24
95.38.44.0/24 maxlen: 24
95.38.43.0/24 maxlen: 24
95.38.44.0/22 maxlen: 22
95.38.48.0/24 maxlen: 24
95.38.49.0/24 maxlen: 24
95.38.46.0/24 maxlen: 24
95.38.47.0/24 maxlen: 24
95.38.51.0/24 maxlen: 24
95.38.50.0/24 maxlen: 24
95.38.45.0/24 maxlen: 24
95.38.53.0/24 maxlen: 24
95.38.58.0/24 maxlen: 24
95.38.52.0/24 maxlen: 24
95.38.54.0/23 maxlen: 23
95.38.56.0/23 maxlen: 23
95.38.60.0/24 maxlen: 24
95.38.61.0/24 maxlen: 24
95.38.64.0/24 maxlen: 24
95.38.59.0/24 maxlen: 24
95.38.62.0/23 maxlen: 23
95.38.69.0/24 maxlen: 24
95.38.70.0/24 maxlen: 24
95.38.68.0/24 maxlen: 24
95.38.71.0/24 maxlen: 24
95.38.65.0/24 maxlen: 24
95.38.66.0/23 maxlen: 23
95.38.76.0/24 maxlen: 24
95.38.74.0/24 maxlen: 24
95.38.75.0/24 maxlen: 24
95.38.77.0/24 maxlen: 24
95.38.72.0/24 maxlen: 24
95.38.73.0/24 maxlen: 24
95.38.74.0/23 maxlen: 23
95.38.78.0/23 maxlen: 23
95.38.0.0/21 maxlen: 21
95.38.11.0/24 maxlen: 24
95.38.10.0/24 maxlen: 24
95.38.8.0/24 maxlen: 24
95.38.9.0/24 maxlen: 24
95.38.16.0/20 maxlen: 20
95.38.13.0/24 maxlen: 24
95.38.14.0/24 maxlen: 24
95.38.12.0/24 maxlen: 24
95.38.17.0/24 maxlen: 24
95.38.15.0/24 maxlen: 24
95.38.16.0/24 maxlen: 24
95.38.20.0/24 maxlen: 24
95.38.21.0/24 maxlen: 24
95.38.18.0/24 maxlen: 24
95.38.19.0/24 maxlen: 24
95.38.24.0/24 maxlen: 24
95.38.22.0/24 maxlen: 24
95.38.23.0/24 maxlen: 24
95.38.160.0/21 maxlen: 21
95.38.171.0/24 maxlen: 24
95.38.170.0/24 maxlen: 24
95.38.169.0/24 maxlen: 24
95.38.172.0/23 maxlen: 23
95.38.168.0/22 maxlen: 22
95.38.168.0/23 maxlen: 23
95.38.174.0/24 maxlen: 24
95.38.175.0/24 maxlen: 24
95.38.176.0/20 maxlen: 20
95.38.81.0/24 maxlen: 24
95.38.84.0/24 maxlen: 24
95.38.85.0/24 maxlen: 24
95.38.80.0/24 maxlen: 24
95.38.82.0/23 maxlen: 23
95.38.84.0/23 maxlen: 23
95.38.90.0/24 maxlen: 24
95.38.88.0/24 maxlen: 24
95.38.89.0/24 maxlen: 24
95.38.91.0/24 maxlen: 24
95.38.86.0/24 maxlen: 24
95.38.87.0/24 maxlen: 24
95.38.88.0/22 maxlen: 22
95.38.93.0/24 maxlen: 24
95.38.92.0/24 maxlen: 24
95.38.96.0/23 maxlen: 23
95.38.96.0/21 maxlen: 21
95.38.98.0/23 maxlen: 23
95.38.94.0/23 maxlen: 23
95.38.98.0/24 maxlen: 24
95.38.102.0/23 maxlen: 23
95.38.104.0/22 maxlen: 22
95.38.100.0/23 maxlen: 23
95.38.99.0/24 maxlen: 24
95.38.110.0/23 maxlen: 23
95.38.109.0/24 maxlen: 24
95.38.108.0/24 maxlen: 24
95.38.116.0/23 maxlen: 23
95.38.112.0/21 maxlen: 21
95.38.117.0/24 maxlen: 24
95.38.118.0/24 maxlen: 24
95.38.116.0/24 maxlen: 24
95.38.122.0/23 maxlen: 23
95.38.124.0/24 maxlen: 24
95.38.125.0/24 maxlen: 24
95.38.123.0/24 maxlen: 24
95.38.121.0/24 maxlen: 24
95.38.122.0/24 maxlen: 24
95.38.119.0/24 maxlen: 24
95.38.120.0/24 maxlen: 24
95.38.130.0/23 maxlen: 23
95.38.126.0/23 maxlen: 23
95.38.128.0/20 maxlen: 20
95.38.128.0/23 maxlen: 23
95.38.128.0/22 maxlen: 22
95.38.128.0/24 maxlen: 24
95.38.129.0/24 maxlen: 24
185.20.162.0/24 maxlen: 24
185.20.163.0/24 maxlen: 24
185.20.160.0/24 maxlen: 24
185.20.161.0/24 maxlen: 24
2a01:bd80::/29 maxlen: 29
2a00:52e0::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 02 Aug 2023 04:24:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:6f:86:f1:7a:11:d0:6e:6e:d3:a6:7c:79:6d:16:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0c104041691dc384f3b1a8cdf95c96628ea6daf
Validity
Not Before: Jan 1 13:05:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9e5f6d309ce00190d48780d2418073b211d6a86a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:c2:68:c6:31:05:ea:d0:25:b5:5c:87:e0:33:
d8:96:57:3d:0e:f2:77:3e:22:99:bd:cd:99:5e:56:
8a:1a:dd:e0:8f:a2:a9:81:09:96:9c:67:bd:c5:9c:
a5:57:b1:43:23:d5:3f:73:da:c7:93:de:e1:48:46:
65:9a:34:76:d8:da:2e:ba:89:13:33:d3:10:64:74:
51:62:c5:97:ab:02:6e:3f:86:a1:cc:03:5d:56:91:
0b:a4:91:a5:fb:89:e3:cf:80:21:88:6f:a1:1d:26:
8c:2c:14:cb:24:df:ef:68:75:77:a0:3f:7b:20:ec:
3f:1d:ef:2e:43:3b:02:aa:8b:86:c1:72:4a:f7:6b:
cb:f0:4f:82:9a:3e:e7:60:bc:8d:80:49:22:eb:1c:
cd:14:37:21:a1:07:e8:00:a8:1b:83:cc:11:e8:cd:
1b:21:34:4c:3b:68:9b:d8:05:24:c2:ed:c9:43:80:
1c:d2:92:b3:ac:2f:ef:19:ed:ce:73:44:5c:01:41:
54:1d:54:6e:7a:6e:89:4d:fa:ea:d0:b4:06:bf:6e:
69:c9:71:50:e7:39:81:c7:a4:6a:ee:32:24:04:21:
d6:f7:76:b7:6a:43:51:b0:0e:cc:79:68:9c:66:b9:
5d:bc:12:86:08:d6:c1:37:95:36:9c:b0:38:b8:3b:
a5:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:5F:6D:30:9C:E0:01:90:D4:87:80:D2:41:80:73:B2:11:D6:A8:6A
X509v3 Authority Key Identifier:
keyid:F0:C1:04:04:16:91:DC:38:4F:3B:1A:8C:DF:95:C9:66:28:EA:6D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8MEEBBaR3DhPOxqM35XJZijqba8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/nl9tMJzgAZDUh4DSQYBzshHWqGo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.38.0.0-95.38.143.255
95.38.160.0-95.38.206.255
95.38.208.0-95.38.247.255
95.38.252.0/22
185.20.160.0/22
IPv6:
2a00:52e0::/32
2a01:bd80::/29
Signature Algorithm: sha256WithRSAEncryption
3c:92:11:bb:08:60:2b:ab:4c:10:9f:7d:ff:60:6a:42:68:06:
c2:80:17:d0:7d:92:2d:77:cd:4e:58:88:99:1e:ec:4b:92:42:
c2:48:98:e9:48:65:54:9a:38:b7:12:4e:27:78:b8:13:e8:a7:
76:07:0d:63:3a:d6:52:d7:b6:ae:82:50:dd:2e:ff:32:e7:c9:
e2:b4:cf:83:92:a1:6d:f0:81:6f:84:11:bd:60:21:10:cf:b2:
40:8c:86:a5:1c:98:73:86:ff:ef:f9:d4:4d:f2:44:e1:27:d8:
75:c8:4e:b8:b0:3d:59:c3:c5:52:dd:10:e4:fa:9b:f9:ee:c6:
b5:8a:70:6d:05:22:55:26:72:6e:64:fa:5e:b2:9f:c8:83:8e:
e4:69:b9:d7:5a:f0:01:ee:be:ec:3d:89:47:b1:1a:c6:ae:77:
9c:e6:a5:dc:9d:a6:09:93:db:4d:77:39:3c:f0:00:22:36:c5:
38:25:0d:b1:fc:1a:de:70:f3:18:c3:38:8c:7f:18:38:44:f0:
ea:3e:ad:9c:34:6d:37:ed:c1:e3:69:d5:cd:c3:87:f8:75:46:
5c:4b:e8:f0:40:0d:bb:b3:0c:03:41:88:c8:19:4e:d5:db:79:
a9:39:d0:78:0b:e4:6b:7a:b1:09:b6:1f:b8:a5:58:71:04:65:
1f:79:70:66
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgISAYVtb4bxehHQbm7Tpnx5bRa8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwYzEwNDA0MTY5MWRjMzg0ZjNiMWE4Y2RmOTVjOTY2Mjhl
YTZkYWYwHhcNMjMwMTAxMTMwNTAzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZTVmNmQzMDljZTAwMTkwZDQ4NzgwZDI0MTgwNzNiMjExZDZhODZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkMJoxjEF6tAltVyH4DPYllc9DvJ3
PiKZvc2ZXlaKGt3gj6KpgQmWnGe9xZylV7FDI9U/c9rHk97hSEZlmjR22NouuokT
M9MQZHRRYsWXqwJuP4ahzANdVpELpJGl+4njz4AhiG+hHSaMLBTLJN/vaHV3oD97
IOw/He8uQzsCqouGwXJK92vL8E+Cmj7nYLyNgEki6xzNFDchoQfoAKgbg8wR6M0b
ITRMO2ib2AUkwu3JQ4Ac0pKzrC/vGe3Oc0RcAUFUHVRuem6JTfrq0LQGv25pyXFQ
5zmBx6Rq7jIkBCHW93a3akNRsA7MeWicZrldvBKGCNbBN5U2nLA4uDulvQIDAQAB
o4ICTjCCAkowHQYDVR0OBBYEFJ5fbTCc4AGQ1IeA0kGAc7IR1qhqMB8GA1UdIwQY
MBaAFPDBBAQWkdw4TzsajN+VyWYo6m2vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOE1FRUJCYVIzRGhQT3hxTTM1WEpaaWpxYmE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS83ODljYWYtYzhkMi00MTllLWFlMDQt
NjkxNDIyMzExNzI5LzEvbmw5dE1KemdBWkRVaDREU1FZQnpzaEhXcUdvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS83ODljYWYtYzhkMi00MTllLWFlMDQtNjkxNDIyMzExNzI5
LzEvOE1FRUJCYVIzRGhQT3hxTTM1WEpaaWpxYmE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGQGCCsGAQUFBwEHAQH/BFUwUzA7BAIAATA1MAsDAwFfJgME
BF8mgDAMAwQFXyagAwQAXybOMAwDBARfJtADBANfJvADBAJfJvwDBAK5FKAwFAQC
AAIwDgMFACoAUuADBQMqAb2AMA0GCSqGSIb3DQEBCwUAA4IBAQA8khG7CGArq0wQ
n33/YGpCaAbCgBfQfZItd81OWIiZHuxLkkLCSJjpSGVUmji3Ek4neLgT6Kd2Bw1j
OtZS17auglDdLv8y58nitM+DkqFt8IFvhBG9YCEQz7JAjIalHJhzhv/v+dRN8kTh
J9h1yE64sD1Zw8VS3RDk+pv57sa1inBtBSJVJnJuZPpesp/Ig47kabnXWvAB7r7s
PYlHsRrGrnec5qXcnaYJk9tNdzk88AAiNsU4JQ2x/BrecPMYwziMfxg4RPDqPq2c
NG037cHjadXNw4f4dUZcS+jwQA27swwDQYjIGU7V23mpOdB4C+RrerEJth+4pVhx
BGUfeXBm
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:45 2024 by rpki-client on console-ams.rpki-client.org