Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/xmrEzlBWTwJ0dFZA9rrdp4L1mC0.roa
File: xmrEzlBWTwJ0dFZA9rrdp4L1mC0.roa (raw, json)
Hash identifier: ySwsPs/pvdSTmJObKRT0x5u7Eij9tNadwVeMxlTmTZ8=
Subject key identifier: C6:6A:C4:CE:50:56:4F:02:74:74:56:40:F6:BA:DD:A7:82:F5:98:2D
Certificate issuer: /CN=f0c104041691dc384f3b1a8cdf95c96628ea6daf
Certificate serial: 066A154E
Authority key identifier: F0:C1:04:04:16:91:DC:38:4F:3B:1A:8C:DF:95:C9:66:28:EA:6D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8MEEBBaR3DhPOxqM35XJZijqba8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/xmrEzlBWTwJ0dFZA9rrdp4L1mC0.roa
Signing time: Sun 10 Apr 2022 12:25:58 +0000
ROA not before: Sun 10 Apr 2022 12:25:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41881
IP address blocks: 95.38.240.0/21 maxlen: 21
95.38.253.0/24 maxlen: 24
95.38.252.0/24 maxlen: 24
95.38.255.0/24 maxlen: 24
95.38.254.0/24 maxlen: 24
95.38.192.0/21 maxlen: 21
95.38.200.0/22 maxlen: 22
95.38.201.0/24 maxlen: 24
95.38.202.0/24 maxlen: 24
95.38.200.0/24 maxlen: 24
95.38.203.0/24 maxlen: 24
95.38.204.0/23 maxlen: 23
95.38.206.0/24 maxlen: 24
95.38.208.0/21 maxlen: 21
95.38.216.0/23 maxlen: 23
95.38.218.0/24 maxlen: 24
95.38.219.0/24 maxlen: 24
95.38.218.0/23 maxlen: 23
95.38.220.0/22 maxlen: 22
95.38.225.0/24 maxlen: 24
95.38.226.0/23 maxlen: 23
95.38.224.0/24 maxlen: 24
95.38.228.0/22 maxlen: 22
95.38.232.0/21 maxlen: 21
95.38.27.0/24 maxlen: 24
95.38.28.0/24 maxlen: 24
95.38.25.0/24 maxlen: 24
95.38.26.0/24 maxlen: 24
95.38.31.0/24 maxlen: 24
95.38.29.0/24 maxlen: 24
95.38.30.0/24 maxlen: 24
95.38.34.0/24 maxlen: 24
95.38.35.0/24 maxlen: 24
95.38.32.0/24 maxlen: 24
95.38.33.0/24 maxlen: 24
95.38.36.0/23 maxlen: 23
95.38.38.0/24 maxlen: 24
95.38.41.0/24 maxlen: 24
95.38.42.0/24 maxlen: 24
95.38.39.0/24 maxlen: 24
95.38.40.0/24 maxlen: 24
95.38.44.0/24 maxlen: 24
95.38.43.0/24 maxlen: 24
95.38.44.0/22 maxlen: 22
95.38.48.0/24 maxlen: 24
95.38.49.0/24 maxlen: 24
95.38.46.0/24 maxlen: 24
95.38.47.0/24 maxlen: 24
95.38.51.0/24 maxlen: 24
95.38.50.0/24 maxlen: 24
95.38.45.0/24 maxlen: 24
95.38.54.0/23 maxlen: 23
95.38.56.0/23 maxlen: 23
95.38.53.0/24 maxlen: 24
95.38.58.0/24 maxlen: 24
95.38.52.0/24 maxlen: 24
95.38.60.0/24 maxlen: 24
95.38.62.0/23 maxlen: 23
95.38.61.0/24 maxlen: 24
95.38.64.0/24 maxlen: 24
95.38.59.0/24 maxlen: 24
95.38.69.0/24 maxlen: 24
95.38.70.0/24 maxlen: 24
95.38.68.0/24 maxlen: 24
95.38.71.0/24 maxlen: 24
95.38.65.0/24 maxlen: 24
95.38.66.0/23 maxlen: 23
95.38.76.0/24 maxlen: 24
95.38.74.0/23 maxlen: 23
95.38.74.0/24 maxlen: 24
95.38.75.0/24 maxlen: 24
95.38.78.0/23 maxlen: 23
95.38.77.0/24 maxlen: 24
95.38.72.0/24 maxlen: 24
95.38.73.0/24 maxlen: 24
95.38.0.0/21 maxlen: 21
95.38.11.0/24 maxlen: 24
95.38.10.0/24 maxlen: 24
95.38.8.0/24 maxlen: 24
95.38.9.0/24 maxlen: 24
95.38.13.0/24 maxlen: 24
95.38.14.0/24 maxlen: 24
95.38.12.0/24 maxlen: 24
95.38.17.0/24 maxlen: 24
95.38.15.0/24 maxlen: 24
95.38.16.0/20 maxlen: 20
95.38.16.0/24 maxlen: 24
95.38.20.0/24 maxlen: 24
95.38.21.0/24 maxlen: 24
95.38.18.0/24 maxlen: 24
95.38.19.0/24 maxlen: 24
95.38.24.0/24 maxlen: 24
95.38.22.0/24 maxlen: 24
95.38.23.0/24 maxlen: 24
95.38.160.0/21 maxlen: 21
95.38.172.0/23 maxlen: 23
95.38.171.0/24 maxlen: 24
95.38.170.0/24 maxlen: 24
95.38.168.0/23 maxlen: 23
95.38.168.0/22 maxlen: 22
95.38.174.0/24 maxlen: 24
95.38.175.0/24 maxlen: 24
95.38.176.0/20 maxlen: 20
95.38.82.0/23 maxlen: 23
95.38.81.0/24 maxlen: 24
95.38.84.0/23 maxlen: 23
95.38.84.0/24 maxlen: 24
95.38.85.0/24 maxlen: 24
95.38.80.0/24 maxlen: 24
95.38.90.0/24 maxlen: 24
95.38.88.0/22 maxlen: 22
95.38.88.0/24 maxlen: 24
95.38.89.0/24 maxlen: 24
95.38.91.0/24 maxlen: 24
95.38.86.0/24 maxlen: 24
95.38.87.0/24 maxlen: 24
95.38.93.0/24 maxlen: 24
95.38.94.0/23 maxlen: 23
95.38.92.0/24 maxlen: 24
95.38.96.0/23 maxlen: 23
95.38.96.0/21 maxlen: 21
95.38.98.0/23 maxlen: 23
95.38.98.0/24 maxlen: 24
95.38.102.0/23 maxlen: 23
95.38.104.0/22 maxlen: 22
95.38.99.0/24 maxlen: 24
95.38.100.0/23 maxlen: 23
95.38.109.0/24 maxlen: 24
95.38.110.0/23 maxlen: 23
95.38.108.0/24 maxlen: 24
95.38.117.0/24 maxlen: 24
95.38.116.0/23 maxlen: 23
95.38.118.0/24 maxlen: 24
95.38.116.0/24 maxlen: 24
95.38.112.0/21 maxlen: 21
95.38.124.0/24 maxlen: 24
95.38.125.0/24 maxlen: 24
95.38.123.0/24 maxlen: 24
95.38.121.0/24 maxlen: 24
95.38.122.0/24 maxlen: 24
95.38.119.0/24 maxlen: 24
95.38.120.0/24 maxlen: 24
95.38.128.0/24 maxlen: 24
95.38.126.0/23 maxlen: 23
95.38.129.0/24 maxlen: 24
95.38.128.0/20 maxlen: 20
95.38.128.0/22 maxlen: 22
95.38.128.0/23 maxlen: 23
185.20.162.0/24 maxlen: 24
185.20.163.0/24 maxlen: 24
185.20.160.0/24 maxlen: 24
185.20.161.0/24 maxlen: 24
2a01:bd80::/29 maxlen: 29
2a00:52e0::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107615566 (0x66a154e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0c104041691dc384f3b1a8cdf95c96628ea6daf
Validity
Not Before: Apr 10 12:25:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c66ac4ce50564f0274745640f6badda782f5982d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:ea:ee:4c:c2:8b:0f:83:d5:84:c0:13:35:3c:
95:d5:1b:71:a2:4c:81:41:55:13:a9:e1:19:eb:5d:
72:31:31:c4:5d:58:80:c0:23:06:5d:5f:44:a5:bb:
3e:06:b7:ee:05:3c:b6:c3:a5:81:b7:7c:7d:dd:2b:
8a:b1:68:a3:f3:eb:7d:2e:fa:c9:84:9d:5c:50:a2:
e0:be:2d:de:b6:3b:74:1c:29:26:1b:3b:42:bd:86:
fd:ac:09:c4:89:47:02:db:a9:7c:30:5f:dc:83:5d:
1f:9b:cb:70:7b:97:d5:28:b3:42:a5:45:25:c8:ed:
4e:55:67:44:03:70:bc:bc:02:c6:6a:52:23:0a:15:
d4:0e:d3:4c:a9:32:f7:30:5b:c0:01:b9:1d:8e:63:
80:fa:35:c2:ff:ca:0b:c6:77:f8:27:f3:50:73:80:
d9:af:41:62:70:a6:79:ae:ef:be:d8:73:63:f6:de:
81:82:28:6a:36:ec:c5:38:be:2b:d2:bc:a8:cc:70:
50:a6:03:86:41:51:bb:bb:f2:83:fc:bf:6c:96:dd:
6f:d5:3a:8d:07:41:17:2b:5a:08:5d:17:dc:d5:a1:
59:06:03:58:29:de:88:3e:1e:d6:a3:8b:83:8e:b3:
6d:13:dd:53:c5:22:6e:4b:fc:04:59:08:2f:a2:d9:
b5:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:6A:C4:CE:50:56:4F:02:74:74:56:40:F6:BA:DD:A7:82:F5:98:2D
X509v3 Authority Key Identifier:
keyid:F0:C1:04:04:16:91:DC:38:4F:3B:1A:8C:DF:95:C9:66:28:EA:6D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8MEEBBaR3DhPOxqM35XJZijqba8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/xmrEzlBWTwJ0dFZA9rrdp4L1mC0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.38.0.0-95.38.143.255
95.38.160.0-95.38.206.255
95.38.208.0-95.38.247.255
95.38.252.0/22
185.20.160.0/22
IPv6:
2a00:52e0::/32
2a01:bd80::/29
Signature Algorithm: sha256WithRSAEncryption
0a:ec:5b:70:d7:0d:c7:1e:93:bc:1c:82:77:f2:b9:1d:c8:d7:
43:45:a8:cc:fa:9e:d5:13:a7:13:14:b9:24:f5:6a:82:9a:c6:
fa:6b:58:a3:e2:16:40:73:cb:fd:00:54:d9:ce:58:b5:22:81:
d5:f2:9b:07:53:c9:da:5a:ae:cf:d6:e9:e0:6e:57:6d:be:dc:
a7:0d:70:8b:75:05:c5:82:2b:c7:0d:51:5d:09:43:be:f9:99:
d7:42:3e:80:5b:dc:82:66:7a:58:e8:86:28:04:b9:d7:a8:d2:
6b:a4:f4:c5:72:2a:1a:6f:92:2e:dc:3c:70:db:d0:8a:98:6a:
d6:cd:88:39:0f:c2:9c:14:99:ba:60:75:d9:4d:40:c4:0a:e5:
97:44:46:e4:e7:e1:f8:39:6f:28:16:e7:32:c0:c9:0c:5d:41:
47:43:f0:28:6b:3a:d1:b1:0c:15:6c:90:55:10:0f:c9:56:6f:
43:75:46:f4:ee:53:36:80:dd:e9:b7:6a:16:51:c7:d9:6d:b5:
11:d4:0c:f6:c2:a7:9f:c7:03:91:66:f5:7a:86:48:0a:bb:1f:
a0:4b:c0:90:f9:f9:9e:2f:b0:94:fe:8d:3a:66:ad:58:a5:44:
e2:28:84:8b:ea:7b:51:04:73:5a:5b:b3:ad:41:e7:9b:e4:a4:
32:fa:0f:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:54 2024 by rpki-client on console-fra.rpki-client.org