Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/ZzMnsl6oKs1htmZ33g0rGPrQvos.roa
File: ZzMnsl6oKs1htmZ33g0rGPrQvos.roa (raw, json)
Hash identifier: qYQx09mzFNCoZUqwzg636lKOGzpcx9k45trFQXm72KM=
Subject key identifier: 67:33:27:B2:5E:A8:2A:CD:61:B6:66:77:DE:0D:2B:18:FA:D0:BE:8B
Certificate issuer: /CN=f0c104041691dc384f3b1a8cdf95c96628ea6daf
Certificate serial: 05FFB5C9
Authority key identifier: F0:C1:04:04:16:91:DC:38:4F:3B:1A:8C:DF:95:C9:66:28:EA:6D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8MEEBBaR3DhPOxqM35XJZijqba8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/ZzMnsl6oKs1htmZ33g0rGPrQvos.roa
Signing time: Wed 23 Feb 2022 07:39:04 +0000
ROA not before: Wed 23 Feb 2022 07:39:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41881
IP address blocks: 95.38.240.0/21 maxlen: 21
95.38.253.0/24 maxlen: 24
95.38.252.0/24 maxlen: 24
95.38.255.0/24 maxlen: 24
95.38.254.0/24 maxlen: 24
95.38.192.0/21 maxlen: 21
95.38.200.0/22 maxlen: 22
95.38.204.0/23 maxlen: 23
95.38.206.0/24 maxlen: 24
95.38.208.0/21 maxlen: 21
95.38.216.0/23 maxlen: 23
95.38.218.0/24 maxlen: 24
95.38.219.0/24 maxlen: 24
95.38.218.0/23 maxlen: 23
95.38.220.0/22 maxlen: 22
95.38.225.0/24 maxlen: 24
95.38.226.0/23 maxlen: 23
95.38.224.0/24 maxlen: 24
95.38.228.0/22 maxlen: 22
95.38.232.0/21 maxlen: 21
95.38.27.0/24 maxlen: 24
95.38.28.0/24 maxlen: 24
95.38.25.0/24 maxlen: 24
95.38.26.0/24 maxlen: 24
95.38.31.0/24 maxlen: 24
95.38.29.0/24 maxlen: 24
95.38.30.0/24 maxlen: 24
95.38.34.0/24 maxlen: 24
95.38.35.0/24 maxlen: 24
95.38.32.0/24 maxlen: 24
95.38.33.0/24 maxlen: 24
95.38.38.0/24 maxlen: 24
95.38.36.0/23 maxlen: 23
95.38.41.0/24 maxlen: 24
95.38.42.0/24 maxlen: 24
95.38.39.0/24 maxlen: 24
95.38.40.0/24 maxlen: 24
95.38.44.0/24 maxlen: 24
95.38.43.0/24 maxlen: 24
95.38.44.0/22 maxlen: 22
95.38.48.0/24 maxlen: 24
95.38.49.0/24 maxlen: 24
95.38.46.0/24 maxlen: 24
95.38.47.0/24 maxlen: 24
95.38.51.0/24 maxlen: 24
95.38.50.0/24 maxlen: 24
95.38.45.0/24 maxlen: 24
95.38.54.0/23 maxlen: 23
95.38.56.0/23 maxlen: 23
95.38.53.0/24 maxlen: 24
95.38.58.0/24 maxlen: 24
95.38.52.0/24 maxlen: 24
95.38.60.0/24 maxlen: 24
95.38.62.0/23 maxlen: 23
95.38.61.0/24 maxlen: 24
95.38.64.0/24 maxlen: 24
95.38.59.0/24 maxlen: 24
95.38.69.0/24 maxlen: 24
95.38.70.0/24 maxlen: 24
95.38.68.0/24 maxlen: 24
95.38.71.0/24 maxlen: 24
95.38.65.0/24 maxlen: 24
95.38.66.0/23 maxlen: 23
95.38.76.0/24 maxlen: 24
95.38.74.0/23 maxlen: 23
95.38.74.0/24 maxlen: 24
95.38.75.0/24 maxlen: 24
95.38.78.0/23 maxlen: 23
95.38.77.0/24 maxlen: 24
95.38.72.0/24 maxlen: 24
95.38.73.0/24 maxlen: 24
95.38.0.0/21 maxlen: 21
95.38.11.0/24 maxlen: 24
95.38.10.0/24 maxlen: 24
95.38.8.0/24 maxlen: 24
95.38.9.0/24 maxlen: 24
95.38.13.0/24 maxlen: 24
95.38.14.0/24 maxlen: 24
95.38.12.0/24 maxlen: 24
95.38.17.0/24 maxlen: 24
95.38.15.0/24 maxlen: 24
95.38.16.0/20 maxlen: 20
95.38.16.0/24 maxlen: 24
95.38.20.0/24 maxlen: 24
95.38.21.0/24 maxlen: 24
95.38.18.0/24 maxlen: 24
95.38.19.0/24 maxlen: 24
95.38.24.0/24 maxlen: 24
95.38.22.0/24 maxlen: 24
95.38.23.0/24 maxlen: 24
95.38.160.0/21 maxlen: 21
95.38.172.0/23 maxlen: 23
95.38.171.0/24 maxlen: 24
95.38.170.0/24 maxlen: 24
95.38.168.0/22 maxlen: 22
95.38.168.0/23 maxlen: 23
95.38.174.0/24 maxlen: 24
95.38.175.0/24 maxlen: 24
95.38.176.0/20 maxlen: 20
95.38.82.0/23 maxlen: 23
95.38.81.0/24 maxlen: 24
95.38.84.0/23 maxlen: 23
95.38.84.0/24 maxlen: 24
95.38.85.0/24 maxlen: 24
95.38.80.0/24 maxlen: 24
95.38.90.0/24 maxlen: 24
95.38.88.0/22 maxlen: 22
95.38.88.0/24 maxlen: 24
95.38.89.0/24 maxlen: 24
95.38.91.0/24 maxlen: 24
95.38.86.0/24 maxlen: 24
95.38.87.0/24 maxlen: 24
95.38.93.0/24 maxlen: 24
95.38.94.0/23 maxlen: 23
95.38.92.0/24 maxlen: 24
95.38.96.0/23 maxlen: 23
95.38.96.0/21 maxlen: 21
95.38.98.0/23 maxlen: 23
95.38.102.0/23 maxlen: 23
95.38.104.0/22 maxlen: 22
95.38.100.0/23 maxlen: 23
95.38.109.0/24 maxlen: 24
95.38.110.0/23 maxlen: 23
95.38.108.0/24 maxlen: 24
95.38.117.0/24 maxlen: 24
95.38.118.0/24 maxlen: 24
95.38.116.0/23 maxlen: 23
95.38.116.0/24 maxlen: 24
95.38.112.0/21 maxlen: 21
95.38.124.0/24 maxlen: 24
95.38.125.0/24 maxlen: 24
95.38.123.0/24 maxlen: 24
95.38.121.0/24 maxlen: 24
95.38.122.0/24 maxlen: 24
95.38.119.0/24 maxlen: 24
95.38.120.0/24 maxlen: 24
95.38.128.0/24 maxlen: 24
95.38.126.0/23 maxlen: 23
95.38.129.0/24 maxlen: 24
95.38.128.0/20 maxlen: 20
95.38.128.0/23 maxlen: 23
95.38.128.0/22 maxlen: 22
185.20.162.0/24 maxlen: 24
185.20.163.0/24 maxlen: 24
185.20.160.0/24 maxlen: 24
185.20.161.0/24 maxlen: 24
2a01:bd80::/29 maxlen: 29
2a00:52e0::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100644297 (0x5ffb5c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0c104041691dc384f3b1a8cdf95c96628ea6daf
Validity
Not Before: Feb 23 07:39:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=673327b25ea82acd61b66677de0d2b18fad0be8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:e0:96:e0:36:71:4e:c2:f9:7b:82:ad:89:b0:
42:74:fd:29:52:9a:1a:35:d5:ff:6f:01:12:df:f4:
b9:e9:e0:8c:d7:bb:b7:35:19:28:cf:f5:a1:67:7c:
b7:64:d7:14:f0:e1:25:7d:c6:aa:82:19:9d:22:29:
42:1f:2c:41:77:91:38:8f:5e:44:30:22:b8:d9:f3:
7c:af:02:78:5e:94:5a:ba:84:95:8a:05:cb:a6:0b:
0e:58:77:f1:b5:43:03:7f:5d:cb:02:ba:1c:03:db:
fb:da:76:df:7c:02:63:fe:f1:31:2e:f2:ae:35:8d:
06:6c:dc:98:bb:13:d0:6f:66:0f:18:03:2a:f8:e8:
cc:d4:90:aa:76:6c:04:1a:e2:f5:7e:56:37:84:fb:
0c:1c:6d:12:f4:0c:64:8d:36:d7:08:dc:98:1b:85:
0b:9a:db:b0:d1:77:cd:56:ed:37:f6:e4:06:fe:2d:
37:1f:ce:f5:e6:8d:20:fa:07:6a:e2:8c:fc:09:45:
78:f4:90:fc:ac:94:08:2f:e8:c5:be:7b:df:1d:2e:
ce:65:39:7a:b4:b8:e4:ee:03:ec:8c:80:eb:aa:1b:
c2:92:ce:00:7f:9e:29:89:31:32:12:4c:95:66:f1:
f8:f0:ed:80:f6:bd:45:c7:1c:65:0f:b0:b3:c1:ab:
0e:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:33:27:B2:5E:A8:2A:CD:61:B6:66:77:DE:0D:2B:18:FA:D0:BE:8B
X509v3 Authority Key Identifier:
keyid:F0:C1:04:04:16:91:DC:38:4F:3B:1A:8C:DF:95:C9:66:28:EA:6D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8MEEBBaR3DhPOxqM35XJZijqba8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/ZzMnsl6oKs1htmZ33g0rGPrQvos.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.38.0.0-95.38.143.255
95.38.160.0-95.38.206.255
95.38.208.0-95.38.247.255
95.38.252.0/22
185.20.160.0/22
IPv6:
2a00:52e0::/32
2a01:bd80::/29
Signature Algorithm: sha256WithRSAEncryption
3d:2d:18:6e:da:d1:cd:a4:79:2e:62:50:0d:99:3a:b4:2e:3f:
4e:ec:ff:51:e3:eb:ff:6f:48:32:c9:ab:df:63:3a:54:36:16:
6f:d4:34:cf:26:20:20:55:1b:fa:f5:0c:45:78:88:41:36:62:
bf:35:7b:b6:0a:2c:ec:2e:11:2e:67:45:ef:49:8f:a6:84:2b:
e3:b1:d4:c2:e0:58:89:6c:b5:c8:49:3e:d5:61:d0:8a:9f:6a:
b3:94:26:50:63:ca:84:3b:f5:4f:06:b6:ff:80:ff:90:4b:3d:
b8:7d:8b:54:f5:66:03:ea:8d:ae:9e:44:b6:d9:e4:2e:25:5d:
5b:d1:7a:97:b7:d4:4b:a6:27:32:52:0c:17:41:6a:20:ff:ec:
2e:1e:1d:ab:32:6e:8e:8b:e4:a0:4d:0a:95:47:2c:77:bd:d6:
3d:8e:8e:d9:c1:57:4e:b6:42:91:0d:a0:f4:b8:db:35:9b:8d:
4d:98:aa:a7:3f:3e:59:d4:df:38:00:3c:7c:8b:74:3d:24:d8:
06:d8:87:89:70:83:43:7f:bc:90:b2:d5:fb:98:37:5b:df:76:
13:0f:d6:ff:42:84:65:4f:34:c4:8d:f0:09:18:f2:a2:73:a8:
b9:dc:7e:dc:be:4d:5c:54:3d:f9:20:14:21:34:d0:2c:c3:b3:
95:4b:61:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:39 2023 by rpki-client on console.sobornost.net