Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/yTVGAbdiEvsVhxExasnYrEQpBLA.roa
File: yTVGAbdiEvsVhxExasnYrEQpBLA.roa (raw, json)
Hash identifier: D/fz/i2llMsADb077Da+ogvKUIrnTAjusta/aZ8NsAs=
Subject key identifier: C9:35:46:01:B7:62:12:FB:15:87:11:31:6A:C9:D8:AC:44:29:04:B0
Certificate issuer: /CN=624ad4535ac88dd534199f2a726095af71afe44e
Certificate serial: 0197E979943FD5CA79EEE1C2632A4079A9D8
Authority key identifier: 62:4A:D4:53:5A:C8:8D:D5:34:19:9F:2A:72:60:95:AF:71:AF:E4:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/yTVGAbdiEvsVhxExasnYrEQpBLA.roa
Signing time: Tue 08 Jul 2025 09:59:08 +0000
ROA not before: Tue 08 Jul 2025 09:59:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197706
IP address blocks: 31.171.152.0/24 maxlen: 24
31.171.153.0/24 maxlen: 24
31.171.154.0/24 maxlen: 24
31.171.155.0/24 maxlen: 24
31.171.159.0/24 maxlen: 24
45.142.25.0/24 maxlen: 24
45.142.26.0/24 maxlen: 24
45.142.27.0/24 maxlen: 24
103.69.32.0/24 maxlen: 24
103.69.33.0/24 maxlen: 24
103.69.34.0/24 maxlen: 24
103.69.35.0/24 maxlen: 24
103.93.40.0/24 maxlen: 24
103.93.41.0/24 maxlen: 24
103.93.42.0/24 maxlen: 24
103.124.164.0/24 maxlen: 24
103.124.165.0/24 maxlen: 24
103.124.166.0/24 maxlen: 24
103.124.167.0/24 maxlen: 24
103.204.120.0/24 maxlen: 24
103.204.121.0/24 maxlen: 24
103.204.122.0/24 maxlen: 24
103.204.123.0/24 maxlen: 24
103.254.240.0/24 maxlen: 24
103.254.241.0/24 maxlen: 24
103.254.242.0/24 maxlen: 24
103.254.243.0/24 maxlen: 24
109.104.132.0/24 maxlen: 24
109.104.135.0/24 maxlen: 24
109.104.136.0/24 maxlen: 24
109.104.137.0/24 maxlen: 24
109.104.138.0/24 maxlen: 24
109.104.139.0/24 maxlen: 24
109.104.140.0/22 maxlen: 22
109.104.140.0/24 maxlen: 24
109.104.141.0/24 maxlen: 24
109.104.142.0/24 maxlen: 24
109.104.143.0/24 maxlen: 24
109.104.156.0/24 maxlen: 24
109.104.157.0/24 maxlen: 24
109.104.159.0/24 maxlen: 24
144.48.52.0/24 maxlen: 24
144.48.53.0/24 maxlen: 24
144.48.54.0/24 maxlen: 24
144.48.55.0/24 maxlen: 24
185.53.100.0/24 maxlen: 24
185.53.101.0/24 maxlen: 24
185.53.102.0/24 maxlen: 24
185.53.103.0/24 maxlen: 24
185.153.125.0/24 maxlen: 24
185.153.126.0/24 maxlen: 24
185.153.127.0/24 maxlen: 24
199.168.120.0/24 maxlen: 24
199.168.121.0/24 maxlen: 24
199.168.122.0/24 maxlen: 24
199.168.123.0/24 maxlen: 24
2a04:27c0::/29 maxlen: 48
2a04:27c0:fffd::/48 maxlen: 48
2a04:27c0:fffe::/48 maxlen: 48
2a09:6e40::/29 maxlen: 48
2a09:6e47::/48 maxlen: 48
2a09:6ec0::/29 maxlen: 48
2a0d:27c0::/29 maxlen: 48
2a0d:27c4::/32 maxlen: 32
2a0d:42c0::/29 maxlen: 48
2a0d:4a40::/29 maxlen: 48
2a0d:4a46::/32 maxlen: 32
2a0e:3f00::/29 maxlen: 48
2a0e:3f01::/48 maxlen: 48
2a0e:4f00::/29 maxlen: 48
2a0e:4f05::/32 maxlen: 32
2a0e:d4c0::/29 maxlen: 48
2a0f:42c0::/29 maxlen: 48
2a0f:a880::/29 maxlen: 48
Validation: Failed, certificate revoked on Tue 08 Jul 2025 10:12:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:e9:79:94:3f:d5:ca:79:ee:e1:c2:63:2a:40:79:a9:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=624ad4535ac88dd534199f2a726095af71afe44e
Validity
Not Before: Jul 8 09:59:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c9354601b76212fb158711316ac9d8ac442904b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:68:10:a0:a7:e0:13:02:db:49:cb:02:1c:6f:
56:9d:52:8f:63:89:4d:7c:8a:1b:54:02:40:63:aa:
28:92:33:97:aa:3a:40:51:ce:fb:07:d6:f1:89:58:
a1:2a:47:00:e6:87:e2:9f:a0:a0:23:f7:f5:32:e2:
c0:0e:6d:2e:24:76:ba:ab:91:7a:42:7c:f7:b5:a0:
bf:12:01:25:71:8a:b4:71:24:27:21:a3:f1:01:30:
c4:c6:d4:04:4a:a0:87:55:fc:1a:e1:63:33:99:14:
c1:eb:e7:79:21:70:e5:91:53:61:0a:64:4a:4a:2d:
45:3c:d8:e0:d8:33:92:4f:12:f0:57:76:06:1d:42:
92:82:f6:89:89:ef:84:54:3a:a2:e6:84:58:c0:1f:
73:8b:d8:da:82:3c:6b:37:28:0f:7f:c3:ab:4b:91:
dc:bd:02:e2:6c:b3:77:04:19:8d:bd:72:43:98:31:
0f:8c:93:c2:bb:a5:ae:14:25:c4:ec:50:a3:47:04:
7e:f1:1f:65:2a:d0:70:8b:e7:d8:be:61:6a:bf:98:
5b:56:dc:d3:28:6b:60:93:65:e4:74:2a:db:2d:75:
e5:4c:f8:d3:60:1b:a4:0c:00:3c:9d:c9:d3:f0:6d:
dc:98:78:3e:a8:4f:e6:33:a3:cc:9f:b4:ef:b9:f0:
f4:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:35:46:01:B7:62:12:FB:15:87:11:31:6A:C9:D8:AC:44:29:04:B0
X509v3 Authority Key Identifier:
keyid:62:4A:D4:53:5A:C8:8D:D5:34:19:9F:2A:72:60:95:AF:71:AF:E4:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/yTVGAbdiEvsVhxExasnYrEQpBLA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.171.152.0/22
31.171.159.0/24
45.142.25.0-45.142.27.255
103.69.32.0/22
103.93.40.0-103.93.42.255
103.124.164.0/22
103.204.120.0/22
103.254.240.0/22
109.104.132.0/24
109.104.135.0-109.104.143.255
109.104.156.0/23
109.104.159.0/24
144.48.52.0/22
185.53.100.0/22
185.153.125.0-185.153.127.255
199.168.120.0/22
IPv6:
2a04:27c0::/29
2a09:6e40::/29
2a09:6ec0::/29
2a0d:27c0::/29
2a0d:42c0::/29
2a0d:4a40::/29
2a0e:3f00::/29
2a0e:4f00::/29
2a0e:d4c0::/29
2a0f:42c0::/29
2a0f:a880::/29
Signature Algorithm: sha256WithRSAEncryption
01:2a:d1:ca:b8:37:e3:62:54:a9:f9:c5:e4:2e:4a:27:68:82:
de:27:6a:1d:0d:42:08:b6:12:e2:f1:da:2c:fc:b6:19:85:07:
38:ec:01:37:42:1c:9e:c5:61:0d:0d:2c:b2:15:51:6e:fa:b1:
e8:2a:77:6a:b0:a4:ce:36:33:30:6e:71:4e:8c:b3:b3:73:bf:
28:59:77:9d:24:9a:39:d2:ff:35:f6:24:ff:2e:06:89:3d:d2:
bc:6e:e6:be:e7:62:b0:f8:2b:ad:15:fe:3b:6a:a4:19:69:03:
40:ee:28:b3:13:08:1a:2f:b6:58:4a:6d:d6:ff:5e:c0:ba:94:
d5:43:94:7b:f6:cc:57:91:b6:04:a7:ca:b8:64:a1:06:1a:c9:
2f:29:45:90:22:6d:6e:de:cc:c1:03:29:67:ff:ec:f8:4d:b4:
58:34:16:2f:ec:e1:86:18:73:28:4d:ef:77:c2:82:2a:5a:a6:
49:5b:00:c0:80:aa:09:63:a1:af:8f:45:a5:f8:ad:54:b5:1c:
24:3a:0f:8c:79:dc:07:4d:f7:51:e2:58:a4:ad:76:2c:89:05:
7b:0a:28:70:87:90:c5:3b:c0:64:ce:89:8f:43:3f:ee:4f:64:
d5:83:af:47:07:3b:17:99:ec:03:af:95:1e:00:20:4a:5a:83:
2b:b2:59:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 23:29:56 2025 by rpki-client