Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/hpl9xTp89TKJEjfZYtWgqOrusOQ.roa
File: hpl9xTp89TKJEjfZYtWgqOrusOQ.roa (raw, json)
Hash identifier: SOBYJveQs8lX0pEzTIheg/U/39QDnr/Q9t/zpfgXjFk=
Subject key identifier: 86:99:7D:C5:3A:7C:F5:32:89:12:37:D9:62:D5:A0:A8:EA:EE:B0:E4
Certificate issuer: /CN=624ad4535ac88dd534199f2a726095af71afe44e
Certificate serial: 01978296EA4382A38D7BE3FC67ACE0EF7C78
Authority key identifier: 62:4A:D4:53:5A:C8:8D:D5:34:19:9F:2A:72:60:95:AF:71:AF:E4:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/hpl9xTp89TKJEjfZYtWgqOrusOQ.roa
Signing time: Wed 18 Jun 2025 10:30:17 +0000
ROA not before: Wed 18 Jun 2025 10:30:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203020
IP address blocks: 31.171.156.0/24 maxlen: 32
31.171.157.0/24 maxlen: 32
31.171.158.0/24 maxlen: 32
45.142.24.0/24 maxlen: 24
103.93.43.0/24 maxlen: 32
103.111.0.0/22 maxlen: 32
103.204.123.0/24 maxlen: 32
109.104.136.0/24 maxlen: 32
109.104.137.0/24 maxlen: 32
109.104.158.0/24 maxlen: 32
185.153.124.0/22 maxlen: 32
185.233.124.0/22 maxlen: 32
194.113.94.0/23 maxlen: 32
Validation: Failed, certificate revoked on Wed 18 Jun 2025 12:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:82:96:ea:43:82:a3:8d:7b:e3:fc:67:ac:e0:ef:7c:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=624ad4535ac88dd534199f2a726095af71afe44e
Validity
Not Before: Jun 18 10:30:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=86997dc53a7cf532891237d962d5a0a8eaeeb0e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:4d:9f:4a:fa:08:b5:ef:79:91:8f:0a:f7:ea:
1f:27:82:8c:8f:f8:b7:db:4c:20:d9:31:ef:1d:c9:
32:03:b3:eb:11:f8:9e:19:85:50:bc:59:ba:e0:46:
16:4b:f9:21:f9:89:06:ce:89:43:b5:5c:6d:72:4e:
19:8d:03:ef:bd:ad:3e:b7:ee:63:b2:64:cd:cd:e3:
af:27:e7:ed:30:58:9d:6d:c4:09:99:a2:87:50:86:
15:29:e8:28:da:da:cd:21:f5:20:a8:99:78:56:23:
33:30:a3:d2:c4:2b:fd:a4:82:01:d2:00:7d:98:80:
9b:3c:c9:fb:7e:0d:1d:b3:73:4a:62:7c:b7:2a:61:
1c:20:f6:73:64:24:72:59:08:6e:6d:87:33:60:2f:
59:7d:a2:7f:a5:89:a8:e6:81:c8:7c:c5:f8:16:21:
0c:3a:ee:e3:71:d4:bf:e6:49:4e:ea:c3:f2:e6:37:
65:2b:bd:48:0c:0c:1d:76:77:0c:5a:6c:e3:41:e3:
b1:67:67:8b:5d:da:91:58:bb:52:32:14:04:c6:a9:
5a:fa:c5:08:e0:6a:29:7a:17:e9:97:35:bd:fd:76:
71:d2:04:d8:af:2f:3a:cc:43:30:9f:c3:5e:09:1b:
92:b3:20:60:78:3d:b4:38:16:28:c2:5f:5a:03:53:
8d:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:99:7D:C5:3A:7C:F5:32:89:12:37:D9:62:D5:A0:A8:EA:EE:B0:E4
X509v3 Authority Key Identifier:
keyid:62:4A:D4:53:5A:C8:8D:D5:34:19:9F:2A:72:60:95:AF:71:AF:E4:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/hpl9xTp89TKJEjfZYtWgqOrusOQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.171.156.0-31.171.158.255
45.142.24.0/24
103.93.43.0/24
103.111.0.0/22
103.204.123.0/24
109.104.136.0/23
109.104.158.0/24
185.153.124.0/22
185.233.124.0/22
194.113.94.0/23
Signature Algorithm: sha256WithRSAEncryption
7c:8e:75:23:6e:17:7e:c3:49:c5:af:13:c3:47:d3:d4:1a:4a:
3c:d4:f7:95:87:79:5f:80:83:3c:b4:7c:23:c2:a8:b5:c0:1e:
2c:41:ac:36:da:03:59:59:94:bd:4e:be:10:23:89:bf:13:c3:
d2:d6:1c:56:74:0e:aa:17:d0:1f:69:b4:07:bf:16:94:71:4b:
69:22:3f:e6:5e:d7:cf:41:64:a8:bf:dd:02:f0:a6:94:52:96:
8a:18:d6:f1:b4:be:10:50:6d:43:e6:79:b6:9e:aa:13:76:7c:
21:33:09:8e:2d:f6:35:29:02:f9:59:df:3f:09:50:dc:2d:2b:
83:36:18:b0:22:7c:df:37:25:f7:c4:78:aa:7d:23:fe:41:54:
06:6a:ae:ad:e7:64:7e:85:bc:de:79:b8:6a:ee:6b:58:c3:ae:
41:28:13:55:83:34:45:87:87:93:5d:71:05:7d:25:37:c7:52:
2b:1a:a5:0b:be:97:68:d7:46:c3:dd:39:da:91:16:e4:9f:ec:
55:f9:f0:20:8c:73:36:c0:2d:71:07:23:eb:49:e7:6d:b4:c5:
9e:b8:e6:0f:44:32:a4:f2:80:c1:d5:5e:03:16:91:e3:e8:7a:
df:88:6d:10:41:fe:63:67:ed:eb:37:50:1d:e5:d2:de:5d:06:
5b:a4:02:75
-----BEGIN CERTIFICATE-----
MIIFOzCCBCOgAwIBAgISAZeClupDgqONe+P8Z6zg73x4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyNGFkNDUzNWFjODhkZDUzNDE5OWYyYTcyNjA5NWFmNzFh
ZmU0NGUwHhcNMjUwNjE4MTAzMDE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4Njk5N2RjNTNhN2NmNTMyODkxMjM3ZDk2MmQ1YTBhOGVhZWViMGU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyU2fSvoIte95kY8K9+ofJ4KMj/i3
20wg2THvHckyA7PrEfieGYVQvFm64EYWS/kh+YkGzolDtVxtck4ZjQPvva0+t+5j
smTNzeOvJ+ftMFidbcQJmaKHUIYVKego2trNIfUgqJl4ViMzMKPSxCv9pIIB0gB9
mICbPMn7fg0ds3NKYny3KmEcIPZzZCRyWQhubYczYC9ZfaJ/pYmo5oHIfMX4FiEM
Ou7jcdS/5klO6sPy5jdlK71IDAwddncMWmzjQeOxZ2eLXdqRWLtSMhQExqla+sUI
4GopehfplzW9/XZx0gTYry86zEMwn8NeCRuSsyBgeD20OBYowl9aA1ON1QIDAQAB
o4ICRzCCAkMwHQYDVR0OBBYEFIaZfcU6fPUyiRI32WLVoKjq7rDkMB8GA1UdIwQY
MBaAFGJK1FNayI3VNBmfKnJgla9xr+ROMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWtyVVUxcklqZFUwR1o4cWNtQ1ZyM0d2NUU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9hYTEwMTktNTY0Zi00YzQ2LWEyMTct
ZmI1OTQ5ODA4ZGRjLzEvaHBsOXhUcDg5VEtKRWpmWll0V2dxT3J1c09RLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9hYTEwMTktNTY0Zi00YzQ2LWEyMTctZmI1OTQ5ODA4ZGRj
LzEvWWtyVVUxcklqZFUwR1o4cWNtQ1ZyM0d2NUU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMF0GCCsGAQUFBwEHAQH/BE4wTDBKBAIAATBEMAwDBAIfq5wD
BAAfq54DBAAtjhgDBABnXSsDBAJnbwADBABnzHsDBAFtaIgDBABtaJ4DBAK5mXwD
BAK56XwDBAHCcV4wDQYJKoZIhvcNAQELBQADggEBAHyOdSNuF37DScWvE8NH09Qa
SjzU95WHeV+Agzy0fCPCqLXAHixBrDbaA1lZlL1OvhAjib8Tw9LWHFZ0DqoX0B9p
tAe/FpRxS2kiP+Ze189BZKi/3QLwppRSlooY1vG0vhBQbUPmebaeqhN2fCEzCY4t
9jUpAvlZ3z8JUNwtK4M2GLAifN83JffEeKp9I/5BVAZqrq3nZH6FvN55uGrua1jD
rkEoE1WDNEWHh5NdcQV9JTfHUisapQu+l2jXRsPdOdqRFuSf7FX58CCMczbALXEH
I+tJ5220xZ645g9EMqTygMHVXgMWkePoet+IbRBB/mNn7es3UB3l0t5dBlukAnU=
-----END CERTIFICATE-----
Generated at Wed Jul 23 23:29:17 2025 by rpki-client