Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/uMYSEiH5tqCiOzLX9-WYXxQtbOQ.roa
File: uMYSEiH5tqCiOzLX9-WYXxQtbOQ.roa (raw, json)
Hash identifier: 9e0luhnsXjSLS0WBEMV52VkRle+vnB+8KKzxulSXqjo=
Subject key identifier: B8:C6:12:12:21:F9:B6:A0:A2:3B:32:D7:F7:E5:98:5F:14:2D:6C:E4
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 01980E541887ED7FB26FDC01829321322C22
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/uMYSEiH5tqCiOzLX9-WYXxQtbOQ.roa
Signing time: Tue 15 Jul 2025 13:44:08 +0000
ROA not before: Tue 15 Jul 2025 13:44:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44477
IP address blocks: 2.56.117.0/24 maxlen: 24
2.56.118.0/23 maxlen: 24
2.56.120.0/22 maxlen: 24
2.56.124.0/22 maxlen: 24
2.56.172.0/22 maxlen: 24
5.180.24.0/24 maxlen: 24
5.180.30.0/24 maxlen: 24
5.180.45.0/24 maxlen: 24
5.180.55.0/24 maxlen: 24
5.253.40.0/23 maxlen: 24
5.253.43.0/24 maxlen: 24
45.9.12.0/22 maxlen: 24
45.9.16.0/22 maxlen: 24
45.12.108.0/22 maxlen: 24
45.12.128.0/22 maxlen: 24
45.12.132.0/22 maxlen: 24
45.12.136.0/22 maxlen: 24
45.12.140.0/22 maxlen: 24
45.12.144.0/22 maxlen: 24
45.12.149.0/24 maxlen: 24
45.12.150.0/23 maxlen: 24
45.15.125.0/24 maxlen: 24
45.15.126.0/23 maxlen: 24
45.15.128.0/22 maxlen: 24
45.15.140.0/23 maxlen: 24
45.15.142.0/24 maxlen: 24
45.15.144.0/22 maxlen: 24
45.15.152.0/22 maxlen: 24
45.15.160.0/22 maxlen: 24
45.15.164.0/22 maxlen: 24
45.15.168.0/22 maxlen: 24
45.15.176.0/24 maxlen: 24
45.15.184.0/22 maxlen: 24
45.82.245.0/24 maxlen: 24
45.82.246.0/23 maxlen: 24
45.82.248.0/22 maxlen: 24
45.82.252.0/22 maxlen: 24
45.83.20.0/22 maxlen: 24
45.83.24.0/22 maxlen: 24
45.83.84.0/22 maxlen: 24
45.83.128.0/22 maxlen: 24
45.83.140.0/22 maxlen: 24
45.83.143.0/32 maxlen: 32
45.83.148.0/22 maxlen: 24
45.86.60.0/22 maxlen: 24
45.86.64.0/21 maxlen: 24
45.86.64.0/23 maxlen: 24
45.86.67.0/24 maxlen: 24
45.86.68.0/22 maxlen: 24
45.86.72.0/24 maxlen: 24
45.86.74.0/23 maxlen: 24
45.86.76.0/22 maxlen: 24
45.88.160.0/22 maxlen: 24
45.88.168.0/22 maxlen: 24
45.88.176.0/22 maxlen: 24
45.88.181.0/24 maxlen: 24
45.88.182.0/23 maxlen: 24
45.89.96.0/24 maxlen: 24
45.89.98.0/24 maxlen: 24
45.89.105.0/24 maxlen: 24
45.89.106.0/23 maxlen: 24
45.89.108.0/22 maxlen: 24
45.89.196.0/22 maxlen: 24
45.92.140.0/22 maxlen: 24
45.92.160.0/21 maxlen: 24
45.92.160.0/22 maxlen: 24
45.92.164.0/22 maxlen: 24
45.92.164.0/24 maxlen: 24
45.92.165.0/24 maxlen: 24
45.92.192.0/23 maxlen: 24
45.92.194.0/24 maxlen: 24
45.128.48.0/22 maxlen: 24
45.128.56.0/23 maxlen: 24
45.128.56.0/24 maxlen: 24
45.128.58.0/24 maxlen: 24
45.128.72.0/22 maxlen: 24
45.128.74.0/24 maxlen: 24
85.208.109.0/24 maxlen: 24
85.208.110.0/24 maxlen: 24
85.209.153.0/24 maxlen: 24
85.209.154.0/24 maxlen: 24
85.209.195.0/24 maxlen: 24
88.218.93.0/24 maxlen: 24
92.118.229.0/24 maxlen: 24
92.118.230.0/23 maxlen: 24
92.118.232.0/23 maxlen: 24
92.118.234.0/24 maxlen: 24
92.118.236.0/22 maxlen: 24
95.214.248.0/22 maxlen: 24
139.28.233.0/24 maxlen: 24
139.28.234.0/23 maxlen: 24
141.98.160.0/22 maxlen: 24
141.98.164.0/22 maxlen: 24
171.22.109.0/24 maxlen: 24
171.22.110.0/23 maxlen: 24
171.22.112.0/22 maxlen: 24
171.22.120.0/22 maxlen: 24
171.22.124.0/22 maxlen: 24
171.22.128.0/22 maxlen: 24
171.22.132.0/22 maxlen: 24
171.22.136.0/23 maxlen: 24
171.22.138.0/24 maxlen: 24
185.106.97.0/24 maxlen: 24
185.106.98.0/23 maxlen: 24
185.153.180.0/22 maxlen: 24
185.156.108.0/22 maxlen: 24
185.161.69.0/24 maxlen: 24
185.161.70.0/23 maxlen: 24
185.166.152.0/22 maxlen: 24
185.203.4.0/22 maxlen: 24
194.76.136.0/22 maxlen: 24
213.59.112.0/20 maxlen: 24
213.59.116.0/32 maxlen: 32
213.59.117.0/32 maxlen: 32
213.59.118.0/32 maxlen: 32
213.59.119.0/32 maxlen: 32
213.59.120.0/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 16 Jul 2025 09:05:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:0e:54:18:87:ed:7f:b2:6f:dc:01:82:93:21:32:2c:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Jul 15 13:44:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b8c6121221f9b6a0a23b32d7f7e5985f142d6ce4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:bf:d6:ad:a0:de:5d:67:5f:04:db:f1:38:c7:
fc:1b:ac:ec:7d:1b:dd:05:e0:f2:09:60:2a:fd:3b:
b4:fe:ac:f5:9f:8d:3c:38:8c:14:c8:c6:02:09:4c:
05:97:e4:55:5b:e7:26:35:31:98:3c:72:46:e9:68:
0e:ac:ee:aa:3c:1f:19:2d:2b:64:1e:db:55:35:91:
ec:bf:d4:bf:43:fa:58:e6:c2:24:09:f6:68:8f:01:
0c:2b:39:23:65:35:d7:e1:a5:09:93:8e:b0:70:cc:
35:1a:39:c9:2e:4c:d8:97:3f:33:22:e7:4b:c8:89:
db:78:42:7c:9c:92:9a:35:c8:2d:b5:14:1b:dd:58:
79:41:36:70:6c:95:10:78:22:63:fe:4e:84:70:09:
16:6f:b6:ee:a6:8e:96:c9:73:b6:b5:e9:c2:0d:b7:
43:b7:7b:12:54:0d:86:f7:90:56:fd:2b:44:9a:17:
2b:73:cf:90:45:d9:b3:a5:de:ae:4a:8a:cd:ca:5f:
9f:5e:5e:ae:92:5c:e8:66:c9:6d:af:57:60:bf:7c:
77:37:fb:ae:43:4d:58:68:e4:8f:9e:8b:9d:90:d6:
c8:d4:0e:31:67:ee:bc:08:5a:c4:14:b7:e1:5b:8e:
2c:d9:ce:81:b0:99:02:9b:37:5a:de:5b:3c:66:41:
b9:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:C6:12:12:21:F9:B6:A0:A2:3B:32:D7:F7:E5:98:5F:14:2D:6C:E4
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/uMYSEiH5tqCiOzLX9-WYXxQtbOQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.117.0-2.56.127.255
2.56.172.0/22
5.180.24.0/24
5.180.30.0/24
5.180.45.0/24
5.180.55.0/24
5.253.40.0/23
5.253.43.0/24
45.9.12.0-45.9.19.255
45.12.108.0/22
45.12.128.0-45.12.147.255
45.12.149.0-45.12.151.255
45.15.125.0-45.15.131.255
45.15.140.0-45.15.142.255
45.15.144.0/22
45.15.152.0/22
45.15.160.0-45.15.171.255
45.15.176.0/24
45.15.184.0/22
45.82.245.0-45.82.255.255
45.83.20.0-45.83.27.255
45.83.84.0/22
45.83.128.0/22
45.83.140.0/22
45.83.148.0/22
45.86.60.0-45.86.72.255
45.86.74.0-45.86.79.255
45.88.160.0/22
45.88.168.0/22
45.88.176.0/22
45.88.181.0-45.88.183.255
45.89.96.0/24
45.89.98.0/24
45.89.105.0-45.89.111.255
45.89.196.0/22
45.92.140.0/22
45.92.160.0/21
45.92.192.0-45.92.194.255
45.128.48.0/22
45.128.56.0-45.128.58.255
45.128.72.0/22
85.208.109.0-85.208.110.255
85.209.153.0-85.209.154.255
85.209.195.0/24
88.218.93.0/24
92.118.229.0-92.118.234.255
92.118.236.0/22
95.214.248.0/22
139.28.233.0-139.28.235.255
141.98.160.0/21
171.22.109.0-171.22.115.255
171.22.120.0-171.22.138.255
185.106.97.0-185.106.99.255
185.153.180.0/22
185.156.108.0/22
185.161.69.0-185.161.71.255
185.166.152.0/22
185.203.4.0/22
194.76.136.0/22
213.59.112.0/20
Signature Algorithm: sha256WithRSAEncryption
46:15:45:ef:37:44:19:54:04:f1:25:32:78:8c:ff:a5:c6:e2:
10:1f:40:24:0d:6e:c4:48:42:e8:68:3b:9a:6f:db:b5:3a:d5:
d7:99:6d:60:b3:16:00:f4:50:38:a4:62:6d:a6:27:09:a8:4a:
ab:78:2e:74:9e:ac:4e:58:fa:5c:bb:f1:79:1c:7b:91:89:42:
25:49:33:cc:32:37:32:ac:b3:dd:dc:07:ff:8b:95:49:ad:1f:
e0:62:3f:5d:64:e5:ca:09:62:da:34:af:d8:52:21:25:73:17:
bd:3c:9a:a1:69:5c:d1:88:32:b4:3d:18:f4:3c:05:78:f8:4a:
ff:37:f8:3b:45:16:64:c6:56:80:1c:aa:8b:c2:25:6a:25:47:
ed:a6:9e:12:0e:04:24:3d:f4:d7:b7:8d:e0:67:0f:75:03:b6:
b5:e2:7a:cd:6f:aa:65:8d:ca:f2:eb:03:89:03:38:28:fb:2f:
2a:d3:ce:05:8e:c5:7a:23:f9:2b:6a:e8:27:f3:7e:39:2f:dc:
b4:95:ea:06:a1:a6:ce:70:43:cd:09:fd:28:df:be:5b:e7:f8:
1e:5f:3e:50:81:53:01:71:13:38:d7:25:f4:e0:16:6d:a1:5c:
bc:ad:d7:c9:71:76:81:96:a3:1e:a6:b3:41:39:94:45:74:ac:
b4:d0:78:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 13:18:19 2025 by rpki-client