Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/sla0sGn84nOqOIUfsEUBYr-L7FU.roa
File: sla0sGn84nOqOIUfsEUBYr-L7FU.roa (raw, json)
Hash identifier: NcpzagSO7uAVFPEJ2THpYDUZX8spmtdFL5KjOWsfvwo=
Subject key identifier: B2:56:B4:B0:69:FC:E2:73:AA:38:85:1F:B0:45:01:62:BF:8B:EC:55
Certificate issuer: /CN=ba6ed0fb7b320832ac1580534c7b263f304e981b
Certificate serial: 0196F1CF849F8A1530899B2400077A90651A
Authority key identifier: BA:6E:D0:FB:7B:32:08:32:AC:15:80:53:4C:7B:26:3F:30:4E:98:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/sla0sGn84nOqOIUfsEUBYr-L7FU.roa
Signing time: Wed 21 May 2025 07:47:11 +0000
ROA not before: Wed 21 May 2025 07:47:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20773
IP address blocks: 5.35.224.0/19 maxlen: 24
5.175.0.0/19 maxlen: 24
37.122.208.0/21 maxlen: 24
37.148.200.0/21 maxlen: 24
37.200.96.0/21 maxlen: 24
46.32.224.0/19 maxlen: 24
46.163.64.0/20 maxlen: 24
46.163.84.0/22 maxlen: 24
46.163.96.0/22 maxlen: 24
46.163.104.0/21 maxlen: 24
46.163.112.0/21 maxlen: 24
46.252.16.0/20 maxlen: 24
46.252.192.0/20 maxlen: 24
62.75.134.0/24 maxlen: 24
62.75.141.0/24 maxlen: 24
62.75.142.0/23 maxlen: 24
62.75.144.0/21 maxlen: 24
62.75.152.0/24 maxlen: 24
62.75.155.0/24 maxlen: 24
62.75.156.0/22 maxlen: 24
62.75.168.0/22 maxlen: 24
62.75.173.0/24 maxlen: 24
62.75.175.0/24 maxlen: 24
62.75.177.0/24 maxlen: 24
62.75.184.0/21 maxlen: 24
62.75.208.0/22 maxlen: 24
62.138.128.0/18 maxlen: 24
80.67.16.0/20 maxlen: 24
80.90.192.0/20 maxlen: 24
80.237.128.0/23 maxlen: 24
80.237.130.0/24 maxlen: 24
80.237.132.0/23 maxlen: 24
80.237.135.0/24 maxlen: 24
80.237.136.0/22 maxlen: 24
80.237.142.0/23 maxlen: 24
80.237.144.0/21 maxlen: 24
80.237.160.0/20 maxlen: 24
80.237.194.0/23 maxlen: 24
80.237.212.0/24 maxlen: 24
80.237.214.0/23 maxlen: 24
80.237.248.0/23 maxlen: 24
80.237.251.0/24 maxlen: 24
80.237.252.0/22 maxlen: 24
80.246.48.0/20 maxlen: 24
81.21.64.0/20 maxlen: 24
83.169.0.0/19 maxlen: 24
83.169.32.0/20 maxlen: 24
83.169.52.0/22 maxlen: 24
85.25.16.0/23 maxlen: 24
85.25.168.0/22 maxlen: 24
87.230.0.0/19 maxlen: 24
87.230.32.0/22 maxlen: 24
87.230.40.0/21 maxlen: 24
87.230.48.0/23 maxlen: 24
87.230.60.0/22 maxlen: 24
87.230.64.0/24 maxlen: 24
87.230.66.0/23 maxlen: 24
87.230.68.0/22 maxlen: 24
87.230.76.0/22 maxlen: 24
87.230.80.0/23 maxlen: 24
87.230.84.0/22 maxlen: 24
87.230.88.0/21 maxlen: 24
87.230.104.0/22 maxlen: 24
87.230.110.0/23 maxlen: 24
87.230.112.0/21 maxlen: 24
87.230.126.0/24 maxlen: 24
88.80.192.0/19 maxlen: 24
91.109.0.0/20 maxlen: 24
91.250.64.0/21 maxlen: 24
91.250.80.0/21 maxlen: 24
91.250.88.0/22 maxlen: 24
91.250.96.0/21 maxlen: 24
91.250.108.0/22 maxlen: 24
91.250.112.0/20 maxlen: 24
92.43.16.0/21 maxlen: 24
92.51.128.0/20 maxlen: 24
92.51.144.0/21 maxlen: 24
92.51.160.0/21 maxlen: 24
92.51.170.0/24 maxlen: 24
92.51.180.0/22 maxlen: 24
92.60.112.0/20 maxlen: 24
92.205.0.0/19 maxlen: 24
92.205.160.0/19 maxlen: 24
93.92.144.0/21 maxlen: 24
93.180.152.0/21 maxlen: 24
93.187.232.0/21 maxlen: 24
94.136.32.0/19 maxlen: 24
94.199.240.0/21 maxlen: 24
109.68.32.0/21 maxlen: 24
109.104.64.0/19 maxlen: 24
109.239.48.0/20 maxlen: 24
141.0.16.0/21 maxlen: 24
146.255.32.0/20 maxlen: 24
176.28.0.0/20 maxlen: 24
176.28.16.0/21 maxlen: 24
176.28.32.0/20 maxlen: 24
176.28.48.0/21 maxlen: 24
176.28.56.0/22 maxlen: 24
176.28.62.0/24 maxlen: 24
176.32.224.0/21 maxlen: 24
176.221.40.0/21 maxlen: 24
178.77.64.0/20 maxlen: 24
178.77.80.0/21 maxlen: 24
178.77.96.0/20 maxlen: 24
178.77.112.0/21 maxlen: 24
178.77.124.0/24 maxlen: 24
185.2.128.0/22 maxlen: 24
185.7.248.0/22 maxlen: 24
185.21.100.0/22 maxlen: 24
185.34.212.0/22 maxlen: 24
185.85.48.0/22 maxlen: 24
185.139.72.0/22 maxlen: 24
188.93.8.0/21 maxlen: 24
188.121.32.0/19 maxlen: 24
193.17.17.0/24 maxlen: 24
193.138.96.0/24 maxlen: 24
194.145.192.0/23 maxlen: 24
195.137.212.0/23 maxlen: 24
195.225.104.0/22 maxlen: 24
212.40.161.0/24 maxlen: 24
212.40.162.0/23 maxlen: 24
212.40.164.0/23 maxlen: 24
212.40.167.0/24 maxlen: 24
212.40.169.0/24 maxlen: 24
212.40.170.0/23 maxlen: 24
212.40.172.0/23 maxlen: 24
212.40.177.0/24 maxlen: 24
212.40.178.0/23 maxlen: 24
212.40.180.0/24 maxlen: 24
212.40.184.0/23 maxlen: 24
212.40.187.0/24 maxlen: 24
212.40.188.0/22 maxlen: 24
212.48.64.0/19 maxlen: 24
212.67.192.0/19 maxlen: 24
217.8.240.0/20 maxlen: 24
217.115.128.0/21 maxlen: 24
217.115.141.0/24 maxlen: 24
217.115.142.0/23 maxlen: 24
217.115.145.0/24 maxlen: 24
217.115.146.0/23 maxlen: 24
217.115.152.0/21 maxlen: 24
217.119.49.0/24 maxlen: 24
217.119.50.0/24 maxlen: 24
217.119.54.0/24 maxlen: 24
217.119.56.0/24 maxlen: 24
217.172.160.0/23 maxlen: 24
217.172.162.0/24 maxlen: 24
217.172.164.0/24 maxlen: 24
217.199.160.0/19 maxlen: 24
2001:67c:308::/48 maxlen: 48
2001:1520::/32 maxlen: 48
2001:4d08::/32 maxlen: 48
2a00:1158::/32 maxlen: 48
2a00:1168::/29 maxlen: 48
2a00:1e78::/32 maxlen: 48
2a01:488::/32 maxlen: 48
2a02:4e8::/32 maxlen: 48
2a02:718::/32 maxlen: 48
2a02:46c0::/32 maxlen: 48
2a04:4fc0::/30 maxlen: 48
Validation: Failed, certificate revoked on Wed 21 May 2025 11:21:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:f1:cf:84:9f:8a:15:30:89:9b:24:00:07:7a:90:65:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba6ed0fb7b320832ac1580534c7b263f304e981b
Validity
Not Before: May 21 07:47:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b256b4b069fce273aa38851fb0450162bf8bec55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:bf:4d:da:6f:b6:ac:31:4c:c8:aa:24:ac:01:
f0:d0:91:34:dc:87:ad:25:23:19:ee:dd:41:37:c1:
b9:de:47:03:a4:57:20:6e:d3:6d:55:4a:ad:39:37:
78:df:cb:e3:4f:a9:c2:7a:41:5f:ba:34:89:d2:2f:
eb:98:44:63:99:ff:40:6a:76:d6:f1:85:c4:43:05:
ea:3a:14:6e:40:fd:30:15:a4:fc:64:99:c7:07:bd:
a4:cd:c6:ac:6d:fd:a2:ce:82:32:95:1e:c1:c9:93:
f4:24:6e:2d:e9:80:23:1e:0c:66:28:29:bd:ac:a5:
0e:89:2a:95:f6:0a:f1:55:62:9b:c5:41:d8:10:c0:
38:29:af:f4:20:59:c8:79:cf:06:89:6b:64:7e:47:
7e:bc:72:8a:59:0c:41:21:2f:87:72:07:a9:c1:55:
21:db:75:f9:dd:65:e2:44:06:55:d1:4d:4a:65:35:
c3:ed:50:93:55:81:49:f6:e1:d1:95:50:c7:93:cb:
ab:cd:8b:45:1f:31:7c:6f:ea:b2:06:50:e9:57:f9:
dc:5c:fe:80:69:7e:6f:eb:71:05:7c:c8:58:84:ae:
86:22:51:d3:78:83:86:73:a1:2e:cd:d5:25:81:82:
e1:9f:97:62:0c:2e:82:5b:c8:6a:55:03:fd:f6:af:
81:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:56:B4:B0:69:FC:E2:73:AA:38:85:1F:B0:45:01:62:BF:8B:EC:55
X509v3 Authority Key Identifier:
keyid:BA:6E:D0:FB:7B:32:08:32:AC:15:80:53:4C:7B:26:3F:30:4E:98:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/sla0sGn84nOqOIUfsEUBYr-L7FU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.35.224.0/19
5.175.0.0/19
37.122.208.0/21
37.148.200.0/21
37.200.96.0/21
46.32.224.0/19
46.163.64.0/20
46.163.84.0/22
46.163.96.0/22
46.163.104.0-46.163.119.255
46.252.16.0/20
46.252.192.0/20
62.75.134.0/24
62.75.141.0-62.75.152.255
62.75.155.0-62.75.159.255
62.75.168.0/22
62.75.173.0/24
62.75.175.0/24
62.75.177.0/24
62.75.184.0/21
62.75.208.0/22
62.138.128.0/18
80.67.16.0/20
80.90.192.0/20
80.237.128.0-80.237.130.255
80.237.132.0/23
80.237.135.0-80.237.139.255
80.237.142.0-80.237.151.255
80.237.160.0/20
80.237.194.0/23
80.237.212.0/24
80.237.214.0/23
80.237.248.0/23
80.237.251.0-80.237.255.255
80.246.48.0/20
81.21.64.0/20
83.169.0.0-83.169.47.255
83.169.52.0/22
85.25.16.0/23
85.25.168.0/22
87.230.0.0-87.230.35.255
87.230.40.0-87.230.49.255
87.230.60.0-87.230.64.255
87.230.66.0-87.230.71.255
87.230.76.0-87.230.81.255
87.230.84.0-87.230.95.255
87.230.104.0/22
87.230.110.0-87.230.119.255
87.230.126.0/24
88.80.192.0/19
91.109.0.0/20
91.250.64.0/21
91.250.80.0-91.250.91.255
91.250.96.0/21
91.250.108.0-91.250.127.255
92.43.16.0/21
92.51.128.0-92.51.151.255
92.51.160.0/21
92.51.170.0/24
92.51.180.0/22
92.60.112.0/20
92.205.0.0/19
92.205.160.0/19
93.92.144.0/21
93.180.152.0/21
93.187.232.0/21
94.136.32.0/19
94.199.240.0/21
109.68.32.0/21
109.104.64.0/19
109.239.48.0/20
141.0.16.0/21
146.255.32.0/20
176.28.0.0-176.28.23.255
176.28.32.0-176.28.59.255
176.28.62.0/24
176.32.224.0/21
176.221.40.0/21
178.77.64.0-178.77.87.255
178.77.96.0-178.77.119.255
178.77.124.0/24
185.2.128.0/22
185.7.248.0/22
185.21.100.0/22
185.34.212.0/22
185.85.48.0/22
185.139.72.0/22
188.93.8.0/21
188.121.32.0/19
193.17.17.0/24
193.138.96.0/24
194.145.192.0/23
195.137.212.0/23
195.225.104.0/22
212.40.161.0-212.40.165.255
212.40.167.0/24
212.40.169.0-212.40.173.255
212.40.177.0-212.40.180.255
212.40.184.0/23
212.40.187.0-212.40.191.255
212.48.64.0/19
212.67.192.0/19
217.8.240.0/20
217.115.128.0/21
217.115.141.0-217.115.143.255
217.115.145.0-217.115.147.255
217.115.152.0/21
217.119.49.0-217.119.50.255
217.119.54.0/24
217.119.56.0/24
217.172.160.0-217.172.162.255
217.172.164.0/24
217.199.160.0/19
IPv6:
2001:67c:308::/48
2001:1520::/32
2001:4d08::/32
2a00:1158::/32
2a00:1168::/29
2a00:1e78::/32
2a01:488::/32
2a02:4e8::/32
2a02:718::/32
2a02:46c0::/32
2a04:4fc0::/30
Signature Algorithm: sha256WithRSAEncryption
8a:05:c4:0a:7f:fd:53:70:79:3c:35:68:48:e0:d7:e0:45:56:
0d:cc:33:0e:78:0d:f1:8c:b3:12:3b:48:74:17:d0:73:cd:02:
f5:1d:13:ff:af:28:4a:52:36:17:01:ec:dd:19:1f:b3:97:19:
df:a5:dc:25:7d:f1:e5:eb:7b:10:83:a8:10:f0:60:1a:d8:bb:
72:e3:6c:d1:41:0f:9f:94:a5:bf:9c:5b:1f:5f:21:6b:fd:9b:
42:44:c8:61:b3:9b:9c:0b:94:8e:eb:de:bf:68:20:d0:90:c8:
ef:26:8f:80:4d:6e:0a:77:d9:e5:20:a1:15:e3:84:09:dd:70:
e9:56:9a:14:47:32:a1:d9:eb:12:d4:28:d5:ec:d4:91:6f:d8:
28:80:c2:19:1b:25:8c:f7:c7:13:6f:ab:93:8c:fb:89:90:8b:
f2:fd:a5:9c:11:d0:67:ca:08:8f:a8:b4:df:06:cd:e6:03:01:
34:a2:9d:bb:8d:7c:ff:26:7e:ff:2d:83:38:77:b9:20:34:3d:
ca:4f:fc:ba:9d:da:98:c4:48:60:bc:d7:43:ce:4f:2d:ac:80:
18:e0:f9:52:64:47:91:a4:aa:7d:be:61:ff:2f:58:c4:9a:dd:
ff:3e:87:f8:ac:d7:24:d1:de:42:b2:b8:b1:e8:16:51:43:b1:
db:2a:3c:0a
-----BEGIN CERTIFICATE-----
MIII6jCCB9KgAwIBAgISAZbxz4SfihUwiZskAAd6kGUaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhNmVkMGZiN2IzMjA4MzJhYzE1ODA1MzRjN2IyNjNmMzA0
ZTk4MWIwHhcNMjUwNTIxMDc0NzExWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMjU2YjRiMDY5ZmNlMjczYWEzODg1MWZiMDQ1MDE2MmJmOGJlYzU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArr9N2m+2rDFMyKokrAHw0JE03Iet
JSMZ7t1BN8G53kcDpFcgbtNtVUqtOTd438vjT6nCekFfujSJ0i/rmERjmf9AanbW
8YXEQwXqOhRuQP0wFaT8ZJnHB72kzcasbf2izoIylR7ByZP0JG4t6YAjHgxmKCm9
rKUOiSqV9grxVWKbxUHYEMA4Ka/0IFnIec8GiWtkfkd+vHKKWQxBIS+HcgepwVUh
23X53WXiRAZV0U1KZTXD7VCTVYFJ9uHRlVDHk8urzYtFHzF8b+qyBlDpV/ncXP6A
aX5v63EFfMhYhK6GIlHTeIOGc6EuzdUlgYLhn5diDC6CW8hqVQP99q+BywIDAQAB
o4IF9jCCBfIwHQYDVR0OBBYEFLJWtLBp/OJzqjiFH7BFAWK/i+xVMB8GA1UdIwQY
MBaAFLpu0Pt7MggyrBWAU0x7Jj8wTpgbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdW03US0zc3lDREtzRllCVFRIc21QekJPbUJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC80MjA0MWQtNTkzMS00ODI0LTkyNTQt
MTYxZjM0MjM4N2QxLzEvc2xhMHNHbjg0bk9xT0lVZnNFVUJZci1MN0ZVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC80MjA0MWQtNTkzMS00ODI0LTkyNTQtMTYxZjM0MjM4N2Qx
LzEvdW03US0zc3lDREtzRllCVFRIc21QekJPbUJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIECgYIKwYBBQUHAQcBAf8EggP5MIID9TCCA5oEAgABMIID
kgMEBQUj4AMEBQWvAAMEAyV60AMEAyWUyAMEAyXIYAMEBS4g4AMEBC6jQAMEAi6j
VAMEAi6jYDAMAwQDLqNoAwQDLqNwAwQELvwQAwQELvzAAwQAPkuGMAwDBAA+S40D
BAA+S5gwDAMEAD5LmwMEBT5LgAMEAj5LqAMEAD5LrQMEAD5LrwMEAD5LsQMEAz5L
uAMEAj5L0AMEBj6KgAMEBFBDEAMEBFBawDAMAwQHUO2AAwQAUO2CAwQBUO2EMAwD
BABQ7YcDBAJQ7YgwDAMEAVDtjgMEA1DtkAMEBFDtoAMEAVDtwgMEAFDt1AMEAVDt
1gMEAVDt+DALAwQAUO37AwMBUOwDBARQ9jADBARRFUAwCwMDAFOpAwQEU6kgAwQC
U6k0AwQBVRkQAwQCVRmoMAsDAwFX5gMEAlfmIDAMAwQDV+YoAwQBV+YwMAwDBAJX
5jwDBABX5kAwDAMEAVfmQgMEA1fmQDAMAwQCV+ZMAwQBV+ZQMAwDBAJX5lQDBAVX
5kADBAJX5mgwDAMEAVfmbgMEA1fmcAMEAFfmfgMEBVhQwAMEBFttAAMEA1v6QDAM
AwQEW/pQAwQCW/pYAwQDW/pgMAwDBAJb+mwDBAdb+gADBANcKxAwDAMEB1wzgAME
A1wzkAMEA1wzoAMEAFwzqgMEAlwztAMEBFw8cAMEBVzNAAMEBVzNoAMEA11ckAME
A120mAMEA1276AMEBV6IIAMEA17H8AMEA21EIAMEBW1oQAMEBG3vMAMEA40AEAME
BJL/IDALAwMCsBwDBAOwHBAwDAMEBbAcIAMEArAcOAMEALAcPgMEA7Ag4AMEA7Dd
KDAMAwQGsk1AAwQDsk1QMAwDBAWyTWADBAOyTXADBACyTXwDBAK5AoADBAK5B/gD
BAK5FWQDBAK5ItQDBAK5VTADBAK5i0gDBAO8XQgDBAW8eSADBADBEREDBADBimAD
BAHCkcADBAHDidQDBALD4WgwDAMEANQooQMEAdQopAMEANQopzAMAwQA1CipAwQB
1CisMAwDBADUKLEDBADUKLQDBAHUKLgwDAMEANQouwMEBtQogAMEBdQwQAMEBdRD
wAMEBNkI8AMEA9lzgDAMAwQA2XONAwQE2XOAMAwDBADZc5EDBALZc5ADBAPZc5gw
DAMEANl3MQMEANl3MgMEANl3NgMEANl3ODAMAwQF2aygAwQA2ayiAwQA2aykAwQF
2cegMFUEAgACME8DBwAgAQZ8AwgDBQAgARUgAwUAIAFNCAMFACoAEVgDBQMqABFo
AwUAKgAeeAMFACoBBIgDBQAqAgToAwUAKgIHGAMFACoCRsADBQIqBE/AMA0GCSqG
SIb3DQEBCwUAA4IBAQCKBcQKf/1TcHk8NWhI4NfgRVYNzDMOeA3xjLMSO0h0F9Bz
zQL1HRP/ryhKUjYXAezdGR+zlxnfpdwlffHl63sQg6gQ8GAa2Lty42zRQQ+flKW/
nFsfXyFr/ZtCRMhhs5ucC5SO696/aCDQkMjvJo+ATW4Kd9nlIKEV44QJ3XDpVpoU
RzKh2esS1CjV7NSRb9gogMIZGyWM98cTb6uTjPuJkIvy/aWcEdBnygiPqLTfBs3m
AwE0op27jXz/Jn7/LYM4d7kgND3KT/y6ndqYxEhgvNdDzk8trIAY4PlSZEeRpKp9
vmH/L1jEmt3/Pof4rNck0d5Csrix6BZRQ7HbKjwK
-----END CERTIFICATE-----
Generated at Thu Jun 12 18:44:58 2025 by rpki-client