Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/PWsLDiewXuBJ-EIHV2r70qCCcmQ.roa
File: PWsLDiewXuBJ-EIHV2r70qCCcmQ.roa (raw, json)
Hash identifier: dyEyVqDgzKdEb95xmpfxkFNV3y+8Efly8f3f0fnB2ek=
Subject key identifier: 3D:6B:0B:0E:27:B0:5E:E0:49:F8:42:07:57:6A:FB:D2:A0:82:72:64
Certificate issuer: /CN=b914166b685ac015b94126cdb8b18c83a12ed862
Certificate serial: 01977FD8B445D0E8322688B5A81C1C6C81F7
Authority key identifier: B9:14:16:6B:68:5A:C0:15:B9:41:26:CD:B8:B1:8C:83:A1:2E:D8:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRQWa2hawBW5QSbNuLGMg6Eu2GI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/PWsLDiewXuBJ-EIHV2r70qCCcmQ.roa
Signing time: Tue 17 Jun 2025 21:43:17 +0000
ROA not before: Tue 17 Jun 2025 21:43:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47583
IP address blocks: 31.97.0.0/23 maxlen: 24
31.97.3.0/24 maxlen: 24
31.97.8.0/21 maxlen: 24
31.97.16.0/20 maxlen: 24
31.97.32.0/21 maxlen: 24
31.97.40.0/22 maxlen: 24
31.97.44.0/22 maxlen: 24
31.97.48.0/22 maxlen: 24
31.97.52.0/22 maxlen: 24
31.97.56.0/22 maxlen: 24
31.97.60.0/22 maxlen: 24
31.97.64.0/24 maxlen: 24
31.97.65.0/24 maxlen: 24
31.97.66.0/23 maxlen: 24
31.97.68.0/23 maxlen: 24
31.97.70.0/23 maxlen: 24
31.97.72.0/22 maxlen: 24
31.97.80.0/20 maxlen: 24
31.97.96.0/21 maxlen: 24
31.97.104.0/21 maxlen: 24
31.97.112.0/21 maxlen: 24
31.97.120.0/21 maxlen: 24
31.97.128.0/20 maxlen: 24
31.97.144.0/22 maxlen: 24
31.97.148.0/23 maxlen: 24
31.97.150.0/24 maxlen: 24
31.97.151.0/24 maxlen: 24
31.97.152.0/21 maxlen: 24
31.97.160.0/20 maxlen: 24
31.97.176.0/23 maxlen: 24
31.97.178.0/24 maxlen: 24
31.97.179.0/24 maxlen: 24
31.97.180.0/22 maxlen: 24
31.97.184.0/23 maxlen: 24
31.97.186.0/24 maxlen: 24
31.97.187.0/24 maxlen: 24
31.97.188.0/22 maxlen: 24
31.97.192.0/21 maxlen: 24
31.97.200.0/21 maxlen: 24
31.97.208.0/21 maxlen: 24
31.97.224.0/20 maxlen: 24
69.62.64.0/23 maxlen: 24
69.62.66.0/23 maxlen: 24
69.62.68.0/22 maxlen: 24
69.62.72.0/21 maxlen: 24
69.62.80.0/22 maxlen: 24
69.62.84.0/23 maxlen: 24
69.62.86.0/23 maxlen: 24
69.62.88.0/21 maxlen: 24
69.62.96.0/21 maxlen: 24
69.62.104.0/24 maxlen: 24
69.62.105.0/24 maxlen: 24
69.62.106.0/23 maxlen: 24
69.62.108.0/22 maxlen: 24
69.62.112.0/22 maxlen: 24
69.62.116.0/22 maxlen: 24
69.62.120.0/23 maxlen: 24
69.62.122.0/24 maxlen: 24
69.62.123.0/24 maxlen: 24
69.62.124.0/24 maxlen: 24
69.62.125.0/24 maxlen: 24
69.62.126.0/23 maxlen: 24
103.199.184.0/22 maxlen: 24
148.222.52.0/24 maxlen: 24
148.222.53.0/24 maxlen: 24
148.222.54.0/24 maxlen: 24
148.222.55.0/24 maxlen: 24
168.231.64.0/21 maxlen: 24
168.231.72.0/22 maxlen: 24
168.231.76.0/23 maxlen: 24
168.231.78.0/23 maxlen: 24
168.231.80.0/21 maxlen: 24
168.231.88.0/21 maxlen: 24
168.231.96.0/22 maxlen: 24
168.231.100.0/24 maxlen: 24
168.231.101.0/24 maxlen: 24
168.231.102.0/23 maxlen: 24
168.231.104.0/21 maxlen: 24
168.231.112.0/22 maxlen: 24
168.231.116.0/24 maxlen: 24
168.231.117.0/24 maxlen: 24
168.231.118.0/23 maxlen: 24
168.231.120.0/22 maxlen: 24
168.231.124.0/22 maxlen: 24
194.164.148.0/22 maxlen: 24
Validation: Failed, certificate revoked on Wed 18 Jun 2025 07:25:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7f:d8:b4:45:d0:e8:32:26:88:b5:a8:1c:1c:6c:81:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b914166b685ac015b94126cdb8b18c83a12ed862
Validity
Not Before: Jun 17 21:43:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3d6b0b0e27b05ee049f84207576afbd2a0827264
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:97:ed:23:a6:3a:86:9b:6e:0f:38:23:8f:81:
7f:14:59:dc:c3:e1:a2:b1:62:5d:94:ff:fa:f5:a6:
65:c5:63:ad:e4:0d:83:24:98:29:f3:e1:44:4e:00:
05:2b:3d:3c:d3:be:95:d7:cf:80:61:dd:56:1f:d5:
35:9f:ad:9c:22:af:6d:d4:85:72:2d:f4:9e:ba:61:
14:51:bf:d1:d6:ee:60:50:eb:2c:1b:59:27:22:e2:
d6:d6:c3:5b:d0:4a:23:14:73:23:41:7d:73:ce:a5:
e0:ac:dd:78:69:53:34:bf:44:13:17:2d:1e:68:a2:
29:0a:64:47:13:64:24:c0:ca:60:9a:e9:5d:ea:38:
84:85:21:d3:82:c1:5d:44:25:00:11:77:ff:e9:b5:
23:88:df:98:8c:90:55:ff:f3:50:44:77:62:f6:81:
04:ca:bb:b6:c4:d8:29:66:52:03:98:72:02:5e:38:
c2:de:e0:3f:6b:0d:94:f5:4f:d5:fa:ba:5f:dd:68:
cc:cb:35:d6:15:ff:e3:ca:35:dd:10:54:5a:b0:c9:
f3:45:38:eb:09:db:f5:f4:9f:88:40:be:21:6d:bc:
df:e0:44:61:a3:7c:6e:18:82:36:1e:1a:3b:8b:c8:
82:6c:c5:25:1a:d9:7b:a0:13:7e:ca:6c:7b:46:97:
55:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:6B:0B:0E:27:B0:5E:E0:49:F8:42:07:57:6A:FB:D2:A0:82:72:64
X509v3 Authority Key Identifier:
keyid:B9:14:16:6B:68:5A:C0:15:B9:41:26:CD:B8:B1:8C:83:A1:2E:D8:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRQWa2hawBW5QSbNuLGMg6Eu2GI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/PWsLDiewXuBJ-EIHV2r70qCCcmQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/uRQWa2hawBW5QSbNuLGMg6Eu2GI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.97.0.0/23
31.97.3.0/24
31.97.8.0-31.97.75.255
31.97.80.0-31.97.215.255
31.97.224.0/20
69.62.64.0/18
103.199.184.0/22
148.222.52.0/22
168.231.64.0/18
194.164.148.0/22
Signature Algorithm: sha256WithRSAEncryption
1d:22:12:f1:c6:b9:8f:21:44:d7:bf:35:2e:2e:be:33:34:a9:
45:95:97:cd:df:38:5a:e7:26:d9:22:44:7f:a7:63:16:3e:6c:
b0:75:ca:f1:da:de:1c:47:5c:6e:0f:20:c6:3e:68:6d:5b:ce:
84:28:9e:0c:ca:e2:4e:35:a4:94:43:b4:fc:d4:5a:2f:7e:78:
d2:18:59:eb:0b:e1:cd:03:84:45:df:88:c2:b6:dc:ab:ee:1b:
ff:05:41:b3:95:69:ca:62:5d:e8:cd:b5:94:1f:03:f6:60:af:
34:5c:4a:4e:92:cf:e7:93:e0:89:34:5c:1d:fb:4a:71:7e:11:
f8:e8:de:28:2f:96:00:f1:49:c4:b4:58:26:d8:d0:fa:f1:9d:
3d:0e:6d:d6:0f:7a:79:d6:66:7e:ef:44:1d:7f:6e:f0:ff:04:
20:0f:bb:00:51:6c:95:3f:e4:a1:57:ef:60:4e:9d:99:68:dd:
69:5e:96:51:f5:f3:60:7f:1f:05:23:90:a5:9f:7b:c6:33:3c:
5f:b4:05:e7:28:7e:23:2c:83:ff:65:0b:aa:52:4e:4c:40:21:
3e:d6:81:2f:8d:0a:10:08:92:3d:4d:2b:a8:2d:c6:88:93:de:
d1:99:18:ff:c7:13:a3:ec:98:87:bd:3f:a3:56:25:8d:f3:16:
b5:de:e7:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:59:40 2025 by rpki-client