Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/1faa3e-884c-445f-845d-79b3db659dfc/1/sIblbYpDHHbBsy6kLu9UqGULeV4.roa
File: sIblbYpDHHbBsy6kLu9UqGULeV4.roa (raw, json)
Hash identifier: 0Uu7sgryCpaQqPepWb//pfl30UbgW5ZZAeRcZr3xP70=
Subject key identifier: B0:86:E5:6D:8A:43:1C:76:C1:B3:2E:A4:2E:EF:54:A8:65:0B:79:5E
Certificate issuer: /CN=5188dedacdc240b4b2f786f12342e0a83d8ae80f
Certificate serial: 01941F8C2BD0AD17E82EF54F74CD7DC097C3
Authority key identifier: 51:88:DE:DA:CD:C2:40:B4:B2:F7:86:F1:23:42:E0:A8:3D:8A:E8:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UYje2s3CQLSy94bxI0LgqD2K6A8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/1faa3e-884c-445f-845d-79b3db659dfc/1/sIblbYpDHHbBsy6kLu9UqGULeV4.roa
Signing time: Wed 01 Jan 2025 01:47:47 +0000
ROA not before: Wed 01 Jan 2025 01:47:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208366
IP address blocks: 45.142.220.0/22 maxlen: 22
45.142.220.0/24 maxlen: 24
45.142.221.0/24 maxlen: 24
45.142.222.0/24 maxlen: 24
45.142.223.0/24 maxlen: 24
2a0e:dbc0::/29 maxlen: 29
2a0e:dbc0::/48 maxlen: 48
2a0e:dbc0:1::/48 maxlen: 48
2a0e:dbc0:2::/48 maxlen: 48
2a0e:dbc0:3::/48 maxlen: 48
2a0e:dbc0:4::/48 maxlen: 48
2a0e:dbc0:5::/48 maxlen: 48
2a0e:dbc0:6::/48 maxlen: 48
2a0e:dbc0:7::/48 maxlen: 48
2a0e:dbc0:8::/48 maxlen: 48
2a0e:dbc0:9::/48 maxlen: 48
2a0e:dbc0:a::/48 maxlen: 48
2a0e:dbc0:b::/48 maxlen: 48
2a0e:dbc0:c::/48 maxlen: 48
2a0e:dbc0:d::/48 maxlen: 48
2a0e:dbc0:e::/48 maxlen: 48
2a0e:dbc0:f::/48 maxlen: 48
2a0e:dbc0:1000::/48 maxlen: 48
2a0e:dbc0:1001::/48 maxlen: 48
2a0e:dbc0:1002::/48 maxlen: 48
2a0e:dbc0:1003::/48 maxlen: 48
2a0e:dbc0:1004::/48 maxlen: 48
2a0e:dbc0:1005::/48 maxlen: 48
2a0e:dbc0:1006::/48 maxlen: 48
2a0e:dbc0:1007::/48 maxlen: 48
2a0e:dbc0:1008::/48 maxlen: 48
2a0e:dbc0:1009::/48 maxlen: 48
2a0e:dbc0:100a::/48 maxlen: 48
2a0e:dbc0:100b::/48 maxlen: 48
2a0e:dbc0:100c::/48 maxlen: 48
2a0e:dbc0:100d::/48 maxlen: 48
2a0e:dbc0:100e::/48 maxlen: 48
2a0e:dbc0:100f::/48 maxlen: 48
2a0e:dbc0:2000::/48 maxlen: 48
2a0e:dbc0:2001::/48 maxlen: 48
2a0e:dbc0:2002::/48 maxlen: 48
2a0e:dbc0:2003::/48 maxlen: 48
2a0e:dbc0:2004::/48 maxlen: 48
2a0e:dbc0:2005::/48 maxlen: 48
2a0e:dbc0:2006::/48 maxlen: 48
2a0e:dbc0:2007::/48 maxlen: 48
2a0e:dbc0:2008::/48 maxlen: 48
2a0e:dbc0:2009::/48 maxlen: 48
2a0e:dbc0:200a::/48 maxlen: 48
2a0e:dbc0:200b::/48 maxlen: 48
2a0e:dbc0:200c::/48 maxlen: 48
2a0e:dbc0:200d::/48 maxlen: 48
2a0e:dbc0:200e::/48 maxlen: 48
2a0e:dbc0:200f::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 02 Jan 2025 13:45:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:2b:d0:ad:17:e8:2e:f5:4f:74:cd:7d:c0:97:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5188dedacdc240b4b2f786f12342e0a83d8ae80f
Validity
Not Before: Jan 1 01:47:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b086e56d8a431c76c1b32ea42eef54a8650b795e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:1e:55:33:3e:cc:ce:39:95:40:47:32:34:48:
5f:9f:b2:16:74:8d:65:6f:b1:a0:2f:44:ed:17:54:
3a:2f:50:63:0c:36:44:17:60:75:f9:e4:a4:b2:e6:
1d:be:a4:3e:d2:2b:d0:7d:3c:e9:80:e8:b6:e8:23:
52:99:ea:96:ff:b2:08:be:c9:e3:ff:8c:81:ba:55:
18:b9:01:2c:88:83:a0:41:91:3d:37:70:8e:ca:c1:
10:4f:3f:5e:47:87:8e:e8:fd:5d:63:ee:3d:54:27:
2c:bc:03:f6:54:8d:84:20:ff:07:3e:2f:4e:98:54:
47:92:c5:6c:bd:3b:9d:f3:a6:60:a4:78:72:01:73:
bc:56:1f:bf:23:0d:d5:ab:92:73:b0:05:64:a6:7b:
e5:f7:82:21:5e:8f:60:e2:ff:bd:9e:7c:34:6e:ed:
a1:32:d6:89:06:fa:83:e4:a7:88:3f:cf:46:47:03:
55:c7:91:ce:a0:ca:8e:55:79:6b:27:3d:96:e8:8c:
79:fe:44:93:4f:4d:34:dc:1d:1c:8a:1e:25:35:08:
e6:ea:61:71:67:4d:44:f4:b2:d3:b4:ba:9d:00:f8:
50:5b:28:3a:7b:d6:89:92:87:48:a8:07:af:46:91:
9e:13:ff:5f:a2:57:f2:49:37:a9:58:e6:9d:8b:67:
14:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:86:E5:6D:8A:43:1C:76:C1:B3:2E:A4:2E:EF:54:A8:65:0B:79:5E
X509v3 Authority Key Identifier:
keyid:51:88:DE:DA:CD:C2:40:B4:B2:F7:86:F1:23:42:E0:A8:3D:8A:E8:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UYje2s3CQLSy94bxI0LgqD2K6A8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/1faa3e-884c-445f-845d-79b3db659dfc/1/sIblbYpDHHbBsy6kLu9UqGULeV4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/1faa3e-884c-445f-845d-79b3db659dfc/1/UYje2s3CQLSy94bxI0LgqD2K6A8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.220.0/22
IPv6:
2a0e:dbc0::/29
Signature Algorithm: sha256WithRSAEncryption
4b:9f:c6:a1:34:28:94:41:62:5a:63:a9:7b:b4:81:eb:b7:52:
2e:42:bc:fd:99:d2:88:28:b9:9e:b9:f9:af:24:55:ed:7d:02:
d4:6e:f3:40:35:25:3f:70:ce:8c:fc:85:e8:46:95:cb:d9:46:
81:7a:fa:97:51:bf:ca:e6:dc:e8:62:65:00:1b:57:07:d2:42:
db:da:6c:ac:40:86:7f:72:64:15:5f:77:32:ef:c0:b3:87:d7:
a2:24:51:82:56:12:10:7e:f8:6d:ca:f9:af:00:7b:83:61:a9:
7f:27:d8:9e:b7:01:99:f1:db:48:a6:88:57:71:de:ee:5b:6d:
c7:6f:c5:47:ce:0f:95:b5:12:60:0c:4d:06:90:0a:ff:6e:dc:
a7:32:6d:c9:6a:e8:01:90:3f:51:fa:5c:43:c7:72:34:a7:f1:
d0:24:2d:f0:ec:a2:67:16:46:ff:6d:4a:6e:d5:68:df:ba:59:
49:cc:b7:fd:62:4f:67:9d:17:0e:5e:c0:e1:bf:96:b0:11:f9:
2f:07:09:53:33:07:99:5a:b5:e8:0f:d2:79:2a:44:b4:f0:66:
3d:bd:32:67:78:8a:b5:a2:20:ea:39:70:c9:85:9f:2a:81:38:
68:e1:3e:7a:ac:12:1d:36:58:33:62:df:c9:80:f3:92:1c:c3:
2d:5e:36:f2
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZQfjCvQrRfoLvVPdM19wJfDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxODhkZWRhY2RjMjQwYjRiMmY3ODZmMTIzNDJlMGE4M2Q4
YWU4MGYwHhcNMjUwMTAxMDE0NzQ3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMDg2ZTU2ZDhhNDMxYzc2YzFiMzJlYTQyZWVmNTRhODY1MGI3OTVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwR5VMz7MzjmVQEcyNEhfn7IWdI1l
b7GgL0TtF1Q6L1BjDDZEF2B1+eSksuYdvqQ+0ivQfTzpgOi26CNSmeqW/7IIvsnj
/4yBulUYuQEsiIOgQZE9N3COysEQTz9eR4eO6P1dY+49VCcsvAP2VI2EIP8HPi9O
mFRHksVsvTud86ZgpHhyAXO8Vh+/Iw3Vq5JzsAVkpnvl94IhXo9g4v+9nnw0bu2h
MtaJBvqD5KeIP89GRwNVx5HOoMqOVXlrJz2W6Ix5/kSTT0003B0cih4lNQjm6mFx
Z01E9LLTtLqdAPhQWyg6e9aJkodIqAevRpGeE/9folfySTepWOadi2cUFQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFLCG5W2KQxx2wbMupC7vVKhlC3leMB8GA1UdIwQY
MBaAFFGI3trNwkC0sveG8SNC4Kg9iugPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVVlqZTJzM0NRTFN5OTRieEkwTGdxRDJLNkE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi8xZmFhM2UtODg0Yy00NDVmLTg0NWQt
NzliM2RiNjU5ZGZjLzEvc0libGJZcERISGJCc3k2a0x1OVVxR1VMZVY0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi8xZmFhM2UtODg0Yy00NDVmLTg0NWQtNzliM2RiNjU5ZGZj
LzEvVVlqZTJzM0NRTFN5OTRieEkwTGdxRDJLNkE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLY7cMA0E
AgACMAcDBQMqDtvAMA0GCSqGSIb3DQEBCwUAA4IBAQBLn8ahNCiUQWJaY6l7tIHr
t1IuQrz9mdKIKLmeufmvJFXtfQLUbvNANSU/cM6M/IXoRpXL2UaBevqXUb/K5tzo
YmUAG1cH0kLb2mysQIZ/cmQVX3cy78Czh9eiJFGCVhIQfvhtyvmvAHuDYal/J9ie
twGZ8dtIpohXcd7uW23Hb8VHzg+VtRJgDE0GkAr/btynMm3JaugBkD9R+lxDx3I0
p/HQJC3w7KJnFkb/bUpu1WjfullJzLf9Yk9nnRcOXsDhv5awEfkvBwlTMweZWrXo
D9J5KkS08GY9vTJneIq1oiDqOXDJhZ8qgTho4T56rBIdNlgzYt/JgPOSHMMtXjby
-----END CERTIFICATE-----
Generated at Mon Apr 21 20:06:46 2025 by rpki-client