Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/D1NrzFU-Qpae21jPeB1hRRV4xuc.roa
File: D1NrzFU-Qpae21jPeB1hRRV4xuc.roa (raw, json)
Hash identifier: KbXyhtofgXfltNSuRon5xQ2h3ycR5DSRx1VNdkOgnJg=
Subject key identifier: 0F:53:6B:CC:55:3E:42:96:9E:DB:58:CF:78:1D:61:45:15:78:C6:E7
Certificate issuer: /CN=624ad4535ac88dd534199f2a726095af71afe44e
Certificate serial: 0197876D66FE67E4819F05ADE3E6EF195197
Authority key identifier: 62:4A:D4:53:5A:C8:8D:D5:34:19:9F:2A:72:60:95:AF:71:AF:E4:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/D1NrzFU-Qpae21jPeB1hRRV4xuc.roa
Signing time: Thu 19 Jun 2025 09:03:03 +0000
ROA not before: Thu 19 Jun 2025 09:03:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197706
IP address blocks: 31.171.152.0/24 maxlen: 24
31.171.153.0/24 maxlen: 24
31.171.154.0/24 maxlen: 24
31.171.155.0/24 maxlen: 24
31.171.159.0/24 maxlen: 24
45.142.25.0/24 maxlen: 24
45.142.26.0/24 maxlen: 24
45.142.27.0/24 maxlen: 24
103.69.32.0/24 maxlen: 24
103.69.33.0/24 maxlen: 24
103.69.34.0/24 maxlen: 24
103.69.35.0/24 maxlen: 24
103.93.40.0/24 maxlen: 24
103.93.41.0/24 maxlen: 24
103.93.42.0/24 maxlen: 24
103.124.164.0/24 maxlen: 24
103.124.165.0/24 maxlen: 24
103.124.166.0/24 maxlen: 24
103.124.167.0/24 maxlen: 24
103.204.120.0/24 maxlen: 24
103.204.121.0/24 maxlen: 24
103.204.122.0/24 maxlen: 24
103.254.240.0/24 maxlen: 24
103.254.241.0/24 maxlen: 24
103.254.242.0/24 maxlen: 24
103.254.243.0/24 maxlen: 24
109.104.132.0/24 maxlen: 24
109.104.138.0/24 maxlen: 24
109.104.139.0/24 maxlen: 24
109.104.140.0/22 maxlen: 22
109.104.140.0/24 maxlen: 24
109.104.141.0/24 maxlen: 24
109.104.142.0/24 maxlen: 24
109.104.143.0/24 maxlen: 24
109.104.156.0/24 maxlen: 24
109.104.157.0/24 maxlen: 24
109.104.159.0/24 maxlen: 24
144.48.52.0/24 maxlen: 24
144.48.53.0/24 maxlen: 24
144.48.54.0/24 maxlen: 24
144.48.55.0/24 maxlen: 24
185.53.100.0/22 maxlen: 24
185.53.100.0/24 maxlen: 24
185.53.101.0/24 maxlen: 24
185.53.102.0/24 maxlen: 24
185.53.103.0/24 maxlen: 24
185.153.125.0/24 maxlen: 24
185.153.126.0/24 maxlen: 24
185.153.127.0/24 maxlen: 24
199.168.120.0/24 maxlen: 24
199.168.121.0/24 maxlen: 24
199.168.122.0/24 maxlen: 24
199.168.123.0/24 maxlen: 24
2a04:27c0::/29 maxlen: 48
2a04:27c0:fffd::/48 maxlen: 48
2a04:27c0:fffe::/48 maxlen: 48
2a09:6e40::/29 maxlen: 48
2a09:6e47::/48 maxlen: 48
2a09:6ec0::/29 maxlen: 48
2a0d:27c0::/29 maxlen: 48
2a0d:27c4::/32 maxlen: 32
2a0d:42c0::/29 maxlen: 48
2a0d:4a40::/29 maxlen: 48
2a0d:4a46::/32 maxlen: 32
2a0e:3f00::/29 maxlen: 48
2a0e:3f01::/48 maxlen: 48
2a0e:4f00::/29 maxlen: 48
2a0e:4f05::/32 maxlen: 32
2a0e:d4c0::/29 maxlen: 48
2a0f:42c0::/29 maxlen: 48
2a0f:a880::/29 maxlen: 48
Validation: Failed, certificate revoked on Thu 19 Jun 2025 10:13:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:87:6d:66:fe:67:e4:81:9f:05:ad:e3:e6:ef:19:51:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=624ad4535ac88dd534199f2a726095af71afe44e
Validity
Not Before: Jun 19 09:03:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0f536bcc553e42969edb58cf781d61451578c6e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:6c:ab:9c:f2:9c:92:35:28:75:da:19:3c:50:
fa:23:f7:0e:80:8c:0c:95:bf:2b:ff:14:a5:a2:35:
c0:bf:e8:64:c8:2f:5e:e6:84:67:ac:5d:5a:03:58:
bb:55:c1:43:f4:3b:c1:d2:62:87:65:4f:a6:22:09:
fe:2f:a0:a3:96:02:20:a4:99:e3:e9:bf:d2:18:82:
96:da:9f:2f:51:26:86:4d:0a:49:21:62:e9:54:45:
d7:c4:15:58:4c:4a:40:04:32:e1:b8:1e:54:b1:6b:
fd:06:cc:04:f4:3a:63:6b:ad:f6:ed:21:ae:e0:c6:
27:c2:5f:9e:83:a4:a3:55:f8:8b:ca:7c:48:f7:d3:
92:61:4a:81:b2:30:05:73:62:9d:67:34:b1:07:7a:
94:b9:0e:91:e3:6e:4b:00:d4:da:dd:12:13:a5:4a:
b5:52:5f:83:7d:80:16:9a:81:0d:d9:08:66:ad:a7:
03:4f:a7:d9:ac:4f:16:93:db:d3:34:cf:d6:48:42:
6d:33:fd:84:3f:4f:8e:b3:c9:fd:94:c4:44:6a:e1:
f3:d5:45:d3:70:c3:fd:36:bc:f9:89:04:ef:04:88:
28:5a:40:34:77:af:cd:b3:0e:6c:ed:06:8d:32:ee:
4d:8d:61:de:a0:ea:4c:83:3a:96:89:ee:20:5a:c2:
2f:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:53:6B:CC:55:3E:42:96:9E:DB:58:CF:78:1D:61:45:15:78:C6:E7
X509v3 Authority Key Identifier:
keyid:62:4A:D4:53:5A:C8:8D:D5:34:19:9F:2A:72:60:95:AF:71:AF:E4:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/D1NrzFU-Qpae21jPeB1hRRV4xuc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.171.152.0/22
31.171.159.0/24
45.142.25.0-45.142.27.255
103.69.32.0/22
103.93.40.0-103.93.42.255
103.124.164.0/22
103.204.120.0-103.204.122.255
103.254.240.0/22
109.104.132.0/24
109.104.138.0-109.104.143.255
109.104.156.0/23
109.104.159.0/24
144.48.52.0/22
185.53.100.0/22
185.153.125.0-185.153.127.255
199.168.120.0/22
IPv6:
2a04:27c0::/29
2a09:6e40::/29
2a09:6ec0::/29
2a0d:27c0::/29
2a0d:42c0::/29
2a0d:4a40::/29
2a0e:3f00::/29
2a0e:4f00::/29
2a0e:d4c0::/29
2a0f:42c0::/29
2a0f:a880::/29
Signature Algorithm: sha256WithRSAEncryption
6c:0d:57:52:dd:17:aa:33:0e:b3:b5:c8:1b:60:ff:e6:23:c9:
00:f5:22:ff:7f:69:85:2b:90:2a:5a:e9:e8:ef:08:15:44:d2:
83:09:2f:b3:bc:16:85:d3:94:49:f8:c4:75:7e:ce:3f:59:b6:
f3:86:bd:49:18:3d:be:e6:a4:55:eb:fc:48:d2:a1:ff:6d:ad:
77:91:26:db:d9:6e:ee:83:4b:06:b3:49:ae:59:4e:06:9b:cf:
a5:ce:21:60:c1:01:72:5c:0e:60:b9:d1:83:3e:7d:59:2b:60:
36:fd:70:6a:82:e6:40:5b:b8:cb:31:45:e5:56:35:e3:2b:59:
cd:49:5e:a6:54:c1:61:4d:88:6c:ee:0b:b3:e3:4b:15:f0:ee:
8e:1d:f7:da:1d:47:75:b3:34:c8:bb:fa:65:e8:29:b7:42:c3:
6c:e3:b1:6a:80:64:79:b8:73:98:a5:77:2d:ca:91:1d:97:4e:
43:fa:1d:61:02:af:e0:5f:b3:84:a4:bc:7b:cf:ac:c9:d3:74:
7c:c7:f5:28:27:41:9f:6d:01:20:3e:4e:e5:c7:b4:47:3b:63:
ee:4a:4a:bc:15:53:05:34:aa:e6:f7:41:68:6f:4b:ff:55:bb:
00:8b:dd:50:bb:b7:66:03:cb:4f:85:a0:16:00:3c:9e:ee:15:
5e:91:a3:a6
-----BEGIN CERTIFICATE-----
MIIF2TCCBMGgAwIBAgISAZeHbWb+Z+SBnwWt4+bvGVGXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyNGFkNDUzNWFjODhkZDUzNDE5OWYyYTcyNjA5NWFmNzFh
ZmU0NGUwHhcNMjUwNjE5MDkwMzAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZjUzNmJjYzU1M2U0Mjk2OWVkYjU4Y2Y3ODFkNjE0NTE1NzhjNmU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzWyrnPKckjUoddoZPFD6I/cOgIwM
lb8r/xSlojXAv+hkyC9e5oRnrF1aA1i7VcFD9DvB0mKHZU+mIgn+L6CjlgIgpJnj
6b/SGIKW2p8vUSaGTQpJIWLpVEXXxBVYTEpABDLhuB5UsWv9BswE9Dpja6327SGu
4MYnwl+eg6SjVfiLynxI99OSYUqBsjAFc2KdZzSxB3qUuQ6R425LANTa3RITpUq1
Ul+DfYAWmoEN2QhmracDT6fZrE8Wk9vTNM/WSEJtM/2EP0+Os8n9lMREauHz1UXT
cMP9Nrz5iQTvBIgoWkA0d6/Nsw5s7QaNMu5NjWHeoOpMgzqWie4gWsIvpQIDAQAB
o4IC5TCCAuEwHQYDVR0OBBYEFA9Ta8xVPkKWnttYz3gdYUUVeMbnMB8GA1UdIwQY
MBaAFGJK1FNayI3VNBmfKnJgla9xr+ROMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWtyVVUxcklqZFUwR1o4cWNtQ1ZyM0d2NUU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9hYTEwMTktNTY0Zi00YzQ2LWEyMTct
ZmI1OTQ5ODA4ZGRjLzEvRDFOcnpGVS1RcGFlMjFqUGVCMWhSUlY0eHVjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9hYTEwMTktNTY0Zi00YzQ2LWEyMTctZmI1OTQ5ODA4ZGRj
LzEvWWtyVVUxcklqZFUwR1o4cWNtQ1ZyM0d2NUU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIH6BggrBgEFBQcBBwEB/wSB6jCB5zCBjwQCAAEwgYgDBAIf
q5gDBAAfq58wDAMEAC2OGQMEAi2OGAMEAmdFIDAMAwQDZ10oAwQAZ10qAwQCZ3yk
MAwDBANnzHgDBABnzHoDBAJn/vADBABtaIQwDAMEAW1oigMEBG1ogAMEAW1onAME
AG1onwMEApAwNAMEArk1ZDAMAwQAuZl9AwQHuZkAAwQCx6h4MFMEAgACME0DBQMq
BCfAAwUDKgluQAMFAyoJbsADBQMqDSfAAwUDKg1CwAMFAyoNSkADBQMqDj8AAwUD
Kg5PAAMFAyoO1MADBQMqD0LAAwUDKg+ogDANBgkqhkiG9w0BAQsFAAOCAQEAbA1X
Ut0XqjMOs7XIG2D/5iPJAPUi/39phSuQKlrp6O8IFUTSgwkvs7wWhdOUSfjEdX7O
P1m284a9SRg9vuakVev8SNKh/22td5Em29lu7oNLBrNJrllOBpvPpc4hYMEBclwO
YLnRgz59WStgNv1waoLmQFu4yzFF5VY14ytZzUleplTBYU2IbO4Ls+NLFfDujh33
2h1HdbM0yLv6Zegpt0LDbOOxaoBkebhzmKV3LcqRHZdOQ/odYQKv4F+zhKS8e8+s
ydN0fMf1KCdBn20BID5O5ce0Rztj7kpKvBVTBTSq5vdBaG9L/1W7AIvdULu3ZgPL
T4WgFgA8nu4VXpGjpg==
-----END CERTIFICATE-----
Generated at Fri Jul 25 00:34:00 2025 by rpki-client