Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/7sweZzNZ63YWccAukL_DW5dlBBU.roa
File: 7sweZzNZ63YWccAukL_DW5dlBBU.roa (raw, json)
Hash identifier: 1BWXdYecs5pXP3wRDu3/Z12rGyxlyNoQDEhO4oF0aFM=
Subject key identifier: EE:CC:1E:67:33:59:EB:76:16:71:C0:2E:90:BF:C3:5B:97:65:04:15
Certificate issuer: /CN=b914166b685ac015b94126cdb8b18c83a12ed862
Certificate serial: 0197C68B3A9CE1318AC74BEAD3AC5FE3ADF2
Authority key identifier: B9:14:16:6B:68:5A:C0:15:B9:41:26:CD:B8:B1:8C:83:A1:2E:D8:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRQWa2hawBW5QSbNuLGMg6Eu2GI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/7sweZzNZ63YWccAukL_DW5dlBBU.roa
Signing time: Tue 01 Jul 2025 15:11:42 +0000
ROA not before: Tue 01 Jul 2025 15:11:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47583
IP address blocks: 31.97.0.0/23 maxlen: 24
31.97.2.0/24 maxlen: 24
31.97.3.0/24 maxlen: 24
31.97.8.0/21 maxlen: 24
31.97.16.0/20 maxlen: 24
31.97.32.0/21 maxlen: 24
31.97.40.0/22 maxlen: 24
31.97.44.0/22 maxlen: 24
31.97.48.0/22 maxlen: 24
31.97.52.0/22 maxlen: 24
31.97.56.0/22 maxlen: 24
31.97.60.0/22 maxlen: 24
31.97.64.0/24 maxlen: 24
31.97.65.0/24 maxlen: 24
31.97.66.0/23 maxlen: 24
31.97.68.0/23 maxlen: 24
31.97.70.0/23 maxlen: 24
31.97.72.0/22 maxlen: 24
31.97.76.0/22 maxlen: 24
31.97.80.0/20 maxlen: 24
31.97.96.0/21 maxlen: 24
31.97.104.0/21 maxlen: 24
31.97.112.0/21 maxlen: 24
31.97.120.0/21 maxlen: 24
31.97.128.0/20 maxlen: 24
31.97.144.0/22 maxlen: 24
31.97.148.0/23 maxlen: 24
31.97.150.0/24 maxlen: 24
31.97.151.0/24 maxlen: 24
31.97.152.0/21 maxlen: 24
31.97.160.0/20 maxlen: 24
31.97.176.0/23 maxlen: 24
31.97.178.0/24 maxlen: 24
31.97.179.0/24 maxlen: 24
31.97.180.0/22 maxlen: 24
31.97.184.0/23 maxlen: 24
31.97.186.0/24 maxlen: 24
31.97.187.0/24 maxlen: 24
31.97.188.0/22 maxlen: 24
31.97.192.0/21 maxlen: 24
31.97.200.0/21 maxlen: 24
31.97.208.0/21 maxlen: 24
31.97.216.0/23 maxlen: 24
31.97.218.0/23 maxlen: 24
31.97.220.0/22 maxlen: 24
31.97.224.0/20 maxlen: 24
31.97.240.0/20 maxlen: 24
69.62.64.0/23 maxlen: 24
69.62.66.0/23 maxlen: 24
69.62.68.0/22 maxlen: 24
69.62.72.0/21 maxlen: 24
69.62.80.0/22 maxlen: 24
69.62.84.0/23 maxlen: 24
69.62.86.0/23 maxlen: 24
69.62.88.0/21 maxlen: 24
69.62.96.0/21 maxlen: 24
69.62.104.0/24 maxlen: 24
69.62.105.0/24 maxlen: 24
69.62.106.0/23 maxlen: 24
69.62.108.0/22 maxlen: 24
69.62.112.0/22 maxlen: 24
69.62.116.0/22 maxlen: 24
69.62.120.0/23 maxlen: 24
69.62.122.0/24 maxlen: 24
69.62.123.0/24 maxlen: 24
69.62.124.0/24 maxlen: 24
69.62.125.0/24 maxlen: 24
69.62.126.0/23 maxlen: 24
103.199.184.0/22 maxlen: 24
148.222.52.0/24 maxlen: 24
148.222.53.0/24 maxlen: 24
148.222.54.0/24 maxlen: 24
148.222.55.0/24 maxlen: 24
148.230.64.0/23 maxlen: 24
148.230.66.0/23 maxlen: 24
148.230.68.0/23 maxlen: 24
168.231.64.0/21 maxlen: 24
168.231.72.0/22 maxlen: 24
168.231.76.0/23 maxlen: 24
168.231.78.0/23 maxlen: 24
168.231.80.0/21 maxlen: 24
168.231.88.0/21 maxlen: 24
168.231.96.0/22 maxlen: 24
168.231.100.0/24 maxlen: 24
168.231.101.0/24 maxlen: 24
168.231.102.0/23 maxlen: 24
168.231.104.0/21 maxlen: 24
168.231.112.0/22 maxlen: 24
168.231.116.0/24 maxlen: 24
168.231.117.0/24 maxlen: 24
168.231.118.0/23 maxlen: 24
168.231.120.0/22 maxlen: 24
168.231.124.0/22 maxlen: 24
194.164.148.0/22 maxlen: 24
Validation: Failed, certificate revoked on Wed 02 Jul 2025 12:13:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c6:8b:3a:9c:e1:31:8a:c7:4b:ea:d3:ac:5f:e3:ad:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b914166b685ac015b94126cdb8b18c83a12ed862
Validity
Not Before: Jul 1 15:11:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eecc1e673359eb761671c02e90bfc35b97650415
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:51:90:f7:68:59:3d:93:79:d4:75:ba:39:19:
cc:8c:86:d2:3a:02:61:17:1b:64:08:a5:c1:da:76:
c4:ee:46:41:19:38:c6:a4:e7:33:6c:84:a3:19:d9:
6c:93:67:42:79:62:94:46:1b:03:2e:c2:82:ff:f2:
c8:b3:25:0e:a7:cf:d2:1f:6c:d6:1b:20:1b:35:4d:
cd:44:ba:ae:22:78:5f:3c:55:f4:f0:7d:76:eb:b4:
9f:af:0f:b3:65:a9:13:cc:61:31:d9:b6:6a:34:ab:
8c:60:32:51:5c:a7:ab:69:38:64:9a:36:c8:c0:aa:
2d:58:09:b0:f2:17:ed:95:48:6f:7c:5c:05:6e:c0:
59:24:62:67:a9:eb:f9:29:34:49:5b:27:e2:21:7f:
54:71:49:59:ed:23:db:24:75:37:18:00:dd:4c:a4:
ba:1d:2f:8c:da:d7:be:3e:9d:b3:dd:9e:5e:70:45:
2a:b7:34:64:52:f1:21:e3:cf:09:85:aa:ac:ac:a9:
1f:15:6b:ce:e0:e8:ed:3a:03:8b:53:76:97:cb:2f:
7e:8f:a6:06:e2:dd:63:c4:ce:c3:e6:db:c2:37:8c:
89:f9:3d:e6:0b:7f:85:87:91:c3:a9:31:82:e3:56:
84:67:54:9e:83:8e:5d:63:70:53:f2:f2:e4:bb:05:
76:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:CC:1E:67:33:59:EB:76:16:71:C0:2E:90:BF:C3:5B:97:65:04:15
X509v3 Authority Key Identifier:
keyid:B9:14:16:6B:68:5A:C0:15:B9:41:26:CD:B8:B1:8C:83:A1:2E:D8:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRQWa2hawBW5QSbNuLGMg6Eu2GI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/7sweZzNZ63YWccAukL_DW5dlBBU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/uRQWa2hawBW5QSbNuLGMg6Eu2GI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.97.0.0/22
31.97.8.0-31.97.255.255
69.62.64.0/18
103.199.184.0/22
148.222.52.0/22
148.230.64.0-148.230.69.255
168.231.64.0/18
194.164.148.0/22
Signature Algorithm: sha256WithRSAEncryption
80:92:cb:c7:c0:ea:35:3c:c2:e6:7f:a4:1a:db:ee:ab:d3:4b:
3e:7a:dc:97:aa:36:89:ab:83:53:5c:3f:8f:c5:77:89:a0:8b:
84:23:b6:f9:4e:35:9f:54:61:30:26:6f:5c:99:1b:ed:6f:b2:
47:4c:aa:7c:88:b5:d0:bf:3d:3f:eb:e4:a0:4a:e7:1a:46:86:
c4:eb:84:ee:b6:93:35:16:d4:c3:f4:2a:cd:60:8c:8b:56:7d:
cb:d3:08:4d:b5:c8:5d:c0:75:0b:41:7d:21:c5:c0:38:92:49:
66:14:17:16:72:20:71:5a:53:cb:53:2f:d3:a1:b9:96:74:ef:
97:10:98:5c:57:a5:ef:13:4d:f4:b0:71:b3:1d:cb:9f:22:51:
9f:36:a6:a4:e9:43:96:83:90:ae:7a:36:4e:b2:88:72:79:79:
c7:8d:b3:bf:40:6d:24:f0:5f:c2:85:7a:48:04:59:fc:97:f1:
18:5b:b5:74:1a:e3:38:85:c7:8e:68:f0:5d:7e:88:ca:f7:85:
25:b8:4f:92:71:54:0e:ce:1e:d0:1c:7e:dd:8a:78:aa:b7:10:
86:f0:87:00:a4:52:05:f4:c9:64:ee:28:61:b0:f7:16:b9:bc:
ba:45:e8:e5:4b:9b:8d:dd:62:42:31:bf:21:67:b7:bc:19:a4:
a6:8d:e7:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:01:14 2025 by rpki-client