Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/hBkEs1Makz75kIiWhxr154wFQr0.roa
File: hBkEs1Makz75kIiWhxr154wFQr0.roa (raw, json)
Hash identifier: 2NmSJGnEOlisuByiFMlhFyFQojeYSwnGlb0wvm16Mso=
Subject key identifier: 84:19:04:B3:53:1A:93:3E:F9:90:88:96:87:1A:F5:E7:8C:05:42:BD
Certificate issuer: /CN=f0c104041691dc384f3b1a8cdf95c96628ea6daf
Certificate serial: 0197B5C2A83AAC337A62207F25D60A329BF9
Authority key identifier: F0:C1:04:04:16:91:DC:38:4F:3B:1A:8C:DF:95:C9:66:28:EA:6D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8MEEBBaR3DhPOxqM35XJZijqba8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/hBkEs1Makz75kIiWhxr154wFQr0.roa
Signing time: Sat 28 Jun 2025 08:58:42 +0000
ROA not before: Sat 28 Jun 2025 08:58:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41881
IP address blocks: 95.38.0.0/21 maxlen: 21
95.38.8.0/24 maxlen: 24
95.38.9.0/24 maxlen: 24
95.38.10.0/24 maxlen: 24
95.38.11.0/24 maxlen: 24
95.38.12.0/24 maxlen: 24
95.38.13.0/24 maxlen: 24
95.38.14.0/24 maxlen: 24
95.38.15.0/24 maxlen: 24
95.38.16.0/20 maxlen: 20
95.38.16.0/24 maxlen: 24
95.38.17.0/24 maxlen: 24
95.38.18.0/24 maxlen: 24
95.38.19.0/24 maxlen: 24
95.38.20.0/24 maxlen: 24
95.38.21.0/24 maxlen: 24
95.38.22.0/24 maxlen: 24
95.38.23.0/24 maxlen: 24
95.38.24.0/24 maxlen: 24
95.38.25.0/24 maxlen: 24
95.38.26.0/24 maxlen: 24
95.38.27.0/24 maxlen: 24
95.38.28.0/24 maxlen: 24
95.38.29.0/24 maxlen: 24
95.38.30.0/24 maxlen: 24
95.38.31.0/24 maxlen: 24
95.38.32.0/24 maxlen: 24
95.38.33.0/24 maxlen: 24
95.38.34.0/24 maxlen: 24
95.38.35.0/24 maxlen: 24
95.38.36.0/23 maxlen: 23
95.38.39.0/24 maxlen: 24
95.38.40.0/24 maxlen: 24
95.38.41.0/24 maxlen: 24
95.38.42.0/24 maxlen: 24
95.38.43.0/24 maxlen: 24
95.38.44.0/22 maxlen: 22
95.38.44.0/24 maxlen: 24
95.38.46.0/24 maxlen: 24
95.38.47.0/24 maxlen: 24
95.38.48.0/24 maxlen: 24
95.38.49.0/24 maxlen: 24
95.38.50.0/24 maxlen: 24
95.38.51.0/24 maxlen: 24
95.38.52.0/24 maxlen: 24
95.38.53.0/24 maxlen: 24
95.38.54.0/23 maxlen: 23
95.38.56.0/23 maxlen: 23
95.38.58.0/24 maxlen: 24
95.38.59.0/24 maxlen: 24
95.38.60.0/24 maxlen: 24
95.38.61.0/24 maxlen: 24
95.38.62.0/23 maxlen: 23
95.38.62.0/24 maxlen: 24
95.38.63.0/24 maxlen: 24
95.38.64.0/24 maxlen: 24
95.38.65.0/24 maxlen: 24
95.38.66.0/23 maxlen: 23
95.38.68.0/24 maxlen: 24
95.38.69.0/24 maxlen: 24
95.38.70.0/24 maxlen: 24
95.38.71.0/24 maxlen: 24
95.38.72.0/24 maxlen: 24
95.38.73.0/24 maxlen: 24
95.38.74.0/23 maxlen: 23
95.38.74.0/24 maxlen: 24
95.38.75.0/24 maxlen: 24
95.38.76.0/24 maxlen: 24
95.38.77.0/24 maxlen: 24
95.38.78.0/23 maxlen: 23
95.38.78.0/24 maxlen: 24
95.38.79.0/24 maxlen: 24
95.38.80.0/24 maxlen: 24
95.38.81.0/24 maxlen: 24
95.38.82.0/23 maxlen: 23
95.38.84.0/23 maxlen: 23
95.38.84.0/24 maxlen: 24
95.38.85.0/24 maxlen: 24
95.38.86.0/24 maxlen: 24
95.38.87.0/24 maxlen: 24
95.38.88.0/22 maxlen: 22
95.38.88.0/24 maxlen: 24
95.38.89.0/24 maxlen: 24
95.38.90.0/24 maxlen: 24
95.38.91.0/24 maxlen: 24
95.38.92.0/24 maxlen: 24
95.38.93.0/24 maxlen: 24
95.38.94.0/23 maxlen: 23
95.38.96.0/21 maxlen: 21
95.38.96.0/23 maxlen: 23
95.38.98.0/23 maxlen: 23
95.38.98.0/24 maxlen: 24
95.38.99.0/24 maxlen: 24
95.38.100.0/23 maxlen: 23
95.38.102.0/23 maxlen: 23
95.38.104.0/22 maxlen: 22
95.38.108.0/24 maxlen: 24
95.38.109.0/24 maxlen: 24
95.38.110.0/23 maxlen: 23
95.38.112.0/21 maxlen: 21
95.38.116.0/23 maxlen: 23
95.38.116.0/24 maxlen: 24
95.38.117.0/24 maxlen: 24
95.38.118.0/24 maxlen: 24
95.38.119.0/24 maxlen: 24
95.38.120.0/24 maxlen: 24
95.38.121.0/24 maxlen: 24
95.38.122.0/23 maxlen: 23
95.38.122.0/24 maxlen: 24
95.38.123.0/24 maxlen: 24
95.38.124.0/24 maxlen: 24
95.38.125.0/24 maxlen: 24
95.38.126.0/23 maxlen: 23
95.38.128.0/20 maxlen: 20
95.38.128.0/22 maxlen: 22
95.38.128.0/23 maxlen: 23
95.38.128.0/24 maxlen: 24
95.38.129.0/24 maxlen: 24
95.38.130.0/23 maxlen: 23
95.38.160.0/21 maxlen: 21
95.38.168.0/22 maxlen: 22
95.38.168.0/23 maxlen: 23
95.38.169.0/24 maxlen: 24
95.38.170.0/24 maxlen: 24
95.38.172.0/23 maxlen: 23
95.38.174.0/24 maxlen: 24
95.38.175.0/24 maxlen: 24
95.38.176.0/20 maxlen: 20
95.38.192.0/21 maxlen: 21
95.38.192.0/24 maxlen: 24
95.38.193.0/24 maxlen: 24
95.38.194.0/24 maxlen: 24
95.38.195.0/24 maxlen: 24
95.38.196.0/24 maxlen: 24
95.38.199.0/24 maxlen: 24
95.38.200.0/22 maxlen: 22
95.38.200.0/24 maxlen: 24
95.38.201.0/24 maxlen: 24
95.38.202.0/24 maxlen: 24
95.38.203.0/24 maxlen: 24
95.38.204.0/23 maxlen: 23
95.38.206.0/24 maxlen: 24
95.38.208.0/21 maxlen: 21
95.38.208.0/22 maxlen: 22
95.38.210.0/24 maxlen: 24
95.38.211.0/24 maxlen: 24
95.38.212.0/23 maxlen: 23
95.38.215.0/24 maxlen: 24
95.38.216.0/23 maxlen: 23
95.38.218.0/24 maxlen: 24
95.38.220.0/22 maxlen: 22
95.38.224.0/24 maxlen: 24
95.38.225.0/24 maxlen: 24
95.38.226.0/23 maxlen: 23
95.38.228.0/22 maxlen: 22
95.38.232.0/21 maxlen: 21
95.38.240.0/21 maxlen: 21
95.38.252.0/24 maxlen: 24
95.38.253.0/24 maxlen: 24
95.38.254.0/24 maxlen: 24
95.38.255.0/24 maxlen: 24
185.20.160.0/24 maxlen: 24
185.20.161.0/24 maxlen: 24
185.20.162.0/24 maxlen: 24
185.20.163.0/24 maxlen: 24
2a00:52e0::/32 maxlen: 32
2a01:bd80::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 30 Jun 2025 11:38:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:c2:a8:3a:ac:33:7a:62:20:7f:25:d6:0a:32:9b:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0c104041691dc384f3b1a8cdf95c96628ea6daf
Validity
Not Before: Jun 28 08:58:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=841904b3531a933ef9908896871af5e78c0542bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ad:dd:1b:68:26:97:9b:7f:3b:4a:23:c7:0a:
e7:0e:2d:97:e0:01:6a:5e:36:20:4b:3a:2f:87:67:
db:e3:5d:8e:6d:f8:3c:e6:03:44:51:ce:51:5d:f9:
9f:13:1c:82:88:17:47:39:07:11:ed:ba:1c:3d:43:
c7:a3:ba:f5:52:0b:85:ae:50:ee:d7:f6:5d:45:5b:
b0:43:5f:b8:5d:b2:fc:5e:2e:07:f9:33:41:0f:63:
48:19:a9:a2:9e:16:d1:31:eb:48:e7:a0:15:c1:3e:
b5:d6:0d:bc:f4:a6:6d:06:03:25:70:59:76:c6:41:
46:fa:ba:d3:42:83:3b:42:a2:95:58:bf:63:ff:43:
02:12:6b:f3:cb:4d:fd:b8:4a:0d:8a:ca:bd:b8:79:
5e:a8:d9:b7:4d:79:54:93:e5:9c:66:58:ef:f3:2e:
91:d0:ba:65:f8:21:37:a9:83:2e:db:8b:37:84:6f:
6d:b9:3f:07:e5:7d:ad:ec:ac:5a:ee:b7:85:f5:49:
c2:19:27:62:25:28:b7:68:6f:08:f1:06:39:f1:6b:
ec:ba:42:59:87:c6:d0:96:dc:d1:1f:50:b4:34:45:
6c:e7:8c:cc:08:d1:4a:f9:6f:95:d0:fb:76:ee:38:
a6:88:ff:2e:df:7d:6f:ef:39:a6:d4:c5:db:3c:34:
1d:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:19:04:B3:53:1A:93:3E:F9:90:88:96:87:1A:F5:E7:8C:05:42:BD
X509v3 Authority Key Identifier:
keyid:F0:C1:04:04:16:91:DC:38:4F:3B:1A:8C:DF:95:C9:66:28:EA:6D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8MEEBBaR3DhPOxqM35XJZijqba8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/hBkEs1Makz75kIiWhxr154wFQr0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.38.0.0-95.38.37.255
95.38.39.0-95.38.143.255
95.38.160.0-95.38.206.255
95.38.208.0-95.38.218.255
95.38.220.0-95.38.247.255
95.38.252.0/22
185.20.160.0/22
IPv6:
2a00:52e0::/32
2a01:bd80::/29
Signature Algorithm: sha256WithRSAEncryption
8e:98:80:4e:93:36:ce:23:0b:f5:c3:c1:9f:ed:a4:94:d0:82:
63:ad:78:a5:7f:ae:40:67:aa:27:d6:c8:29:73:05:15:44:2c:
49:7f:a7:ee:69:43:f3:ad:f5:4d:53:b1:69:dc:a9:64:11:b4:
55:a2:3c:d8:38:aa:ad:3e:ef:48:d4:ac:e4:77:88:86:df:e5:
1e:02:c7:ce:fe:63:a6:7f:23:49:26:fe:c5:22:37:7e:94:09:
48:35:87:c3:b8:b6:2c:5c:0c:b0:b8:0b:c5:be:68:c3:5e:b0:
66:79:01:ab:d7:8b:94:a9:1b:d7:76:ed:94:e5:90:08:61:ad:
dd:28:61:b6:a6:0b:f2:d5:cf:db:53:48:ca:2e:4a:ec:34:7d:
dd:d5:f8:7b:aa:24:87:d7:67:68:61:f6:39:78:cc:c8:6a:a7:
b8:de:48:5b:1d:89:33:d6:98:e8:9c:13:c9:bd:a9:71:3a:1e:
25:d9:4e:63:e7:4a:84:51:93:3b:c1:6e:61:ac:0f:27:e8:f7:
1b:46:d2:b9:65:a7:91:24:8c:52:95:4f:98:65:29:63:1c:44:
72:8b:bd:64:74:6a:38:78:cb:9d:1e:1c:44:7f:9a:aa:c0:ea:
19:e1:b0:9a:81:6e:81:69:2c:3c:a5:40:ab:e0:9a:71:47:a3:
e3:5b:b4:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 14:10:06 2025 by rpki-client