Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/VFh0XPvgY9yf_wmwbP96-dd67TI.roa
File: VFh0XPvgY9yf_wmwbP96-dd67TI.roa (raw, json)
Hash identifier: p7thzNmRNvD7yT1RLoFiVzO3hcdtgeLV8ovnwvq+iis=
Subject key identifier: 54:58:74:5C:FB:E0:63:DC:9F:FF:09:B0:6C:FF:7A:F9:D7:7A:ED:32
Certificate issuer: /CN=b914166b685ac015b94126cdb8b18c83a12ed862
Certificate serial: 01975DE944239116ABC06D82DF9D616E3E33
Authority key identifier: B9:14:16:6B:68:5A:C0:15:B9:41:26:CD:B8:B1:8C:83:A1:2E:D8:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRQWa2hawBW5QSbNuLGMg6Eu2GI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/VFh0XPvgY9yf_wmwbP96-dd67TI.roa
Signing time: Wed 11 Jun 2025 07:34:17 +0000
ROA not before: Wed 11 Jun 2025 07:34:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47583
IP address blocks: 31.97.0.0/23 maxlen: 24
31.97.3.0/24 maxlen: 24
31.97.8.0/21 maxlen: 24
31.97.16.0/20 maxlen: 24
31.97.32.0/21 maxlen: 24
31.97.40.0/22 maxlen: 24
31.97.44.0/22 maxlen: 24
31.97.48.0/22 maxlen: 24
31.97.52.0/22 maxlen: 24
31.97.56.0/22 maxlen: 24
31.97.60.0/22 maxlen: 24
31.97.64.0/24 maxlen: 24
31.97.65.0/24 maxlen: 24
31.97.66.0/23 maxlen: 24
31.97.68.0/23 maxlen: 24
31.97.70.0/23 maxlen: 24
31.97.72.0/22 maxlen: 24
31.97.80.0/20 maxlen: 24
31.97.96.0/21 maxlen: 24
31.97.104.0/21 maxlen: 24
31.97.112.0/21 maxlen: 24
31.97.120.0/21 maxlen: 24
31.97.128.0/20 maxlen: 24
31.97.144.0/22 maxlen: 24
31.97.148.0/23 maxlen: 24
31.97.150.0/24 maxlen: 24
31.97.151.0/24 maxlen: 24
31.97.152.0/21 maxlen: 24
31.97.160.0/20 maxlen: 24
31.97.176.0/23 maxlen: 24
31.97.178.0/24 maxlen: 24
31.97.179.0/24 maxlen: 24
31.97.180.0/22 maxlen: 24
31.97.184.0/23 maxlen: 24
31.97.186.0/24 maxlen: 24
31.97.187.0/24 maxlen: 24
31.97.188.0/22 maxlen: 24
31.97.192.0/21 maxlen: 24
31.97.200.0/21 maxlen: 24
31.97.208.0/21 maxlen: 24
31.97.224.0/20 maxlen: 24
69.62.64.0/23 maxlen: 24
69.62.66.0/23 maxlen: 24
69.62.68.0/22 maxlen: 24
69.62.72.0/21 maxlen: 24
69.62.80.0/22 maxlen: 24
69.62.84.0/23 maxlen: 24
69.62.86.0/23 maxlen: 24
69.62.88.0/21 maxlen: 24
69.62.96.0/21 maxlen: 24
69.62.104.0/24 maxlen: 24
69.62.105.0/24 maxlen: 24
69.62.106.0/23 maxlen: 24
69.62.108.0/22 maxlen: 24
69.62.112.0/22 maxlen: 24
69.62.116.0/22 maxlen: 24
69.62.120.0/23 maxlen: 24
69.62.122.0/24 maxlen: 24
69.62.123.0/24 maxlen: 24
69.62.124.0/24 maxlen: 24
69.62.125.0/24 maxlen: 24
69.62.126.0/23 maxlen: 24
103.199.184.0/22 maxlen: 24
148.222.52.0/24 maxlen: 24
148.222.53.0/24 maxlen: 24
148.222.54.0/24 maxlen: 24
148.222.55.0/24 maxlen: 24
168.231.64.0/21 maxlen: 24
168.231.72.0/22 maxlen: 24
168.231.76.0/23 maxlen: 24
168.231.78.0/23 maxlen: 24
168.231.80.0/21 maxlen: 24
168.231.88.0/21 maxlen: 24
168.231.96.0/22 maxlen: 24
168.231.100.0/24 maxlen: 24
168.231.101.0/24 maxlen: 24
168.231.102.0/23 maxlen: 24
168.231.104.0/21 maxlen: 24
168.231.112.0/22 maxlen: 24
168.231.116.0/24 maxlen: 24
168.231.117.0/24 maxlen: 24
168.231.118.0/23 maxlen: 24
168.231.120.0/22 maxlen: 24
168.231.124.0/22 maxlen: 24
194.164.148.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 17 Jun 2025 20:44:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5d:e9:44:23:91:16:ab:c0:6d:82:df:9d:61:6e:3e:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b914166b685ac015b94126cdb8b18c83a12ed862
Validity
Not Before: Jun 11 07:34:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5458745cfbe063dc9fff09b06cff7af9d77aed32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:43:9e:f5:30:65:4d:23:3f:7e:fd:4c:55:c4:
82:9c:df:87:98:a7:48:9b:73:c7:00:a3:eb:e0:b0:
7d:6d:f9:c5:d5:f5:f1:ac:cd:8d:a6:7c:79:14:27:
ed:9b:d4:f0:ef:15:50:fb:e1:59:b7:68:a1:8c:c7:
6f:0e:58:f5:6f:31:c4:5b:99:e0:63:2d:b9:0c:02:
33:0d:28:5d:3c:f4:01:22:dc:26:21:43:74:41:d3:
e8:29:50:e9:e4:35:42:6c:89:a4:e7:c3:d8:be:d5:
e9:98:6d:d6:94:52:80:04:7b:7f:15:5f:49:f9:ed:
3b:2f:3f:b6:d9:04:18:16:a2:73:00:e2:74:03:9b:
56:cd:58:25:3c:34:df:13:8a:c8:6a:d6:26:60:2c:
8a:84:9e:b4:69:d0:9a:d4:07:88:10:21:6d:72:11:
82:2d:6a:05:bf:7a:53:cd:62:14:02:c6:66:31:5b:
d4:32:4a:a3:c8:44:7f:d2:3e:8d:50:f2:a2:dc:d1:
34:e7:47:87:1e:74:0c:b6:61:2e:a5:c7:9d:de:ae:
19:2f:45:e5:0a:a5:36:ef:4a:63:da:28:02:ad:45:
c3:62:a7:e8:0b:7d:46:a5:1f:0b:4c:b4:80:a4:35:
91:96:ee:ab:08:c1:97:d1:33:f3:59:f7:57:29:67:
6f:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:58:74:5C:FB:E0:63:DC:9F:FF:09:B0:6C:FF:7A:F9:D7:7A:ED:32
X509v3 Authority Key Identifier:
keyid:B9:14:16:6B:68:5A:C0:15:B9:41:26:CD:B8:B1:8C:83:A1:2E:D8:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRQWa2hawBW5QSbNuLGMg6Eu2GI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/VFh0XPvgY9yf_wmwbP96-dd67TI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/uRQWa2hawBW5QSbNuLGMg6Eu2GI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.97.0.0/23
31.97.3.0/24
31.97.8.0-31.97.75.255
31.97.80.0-31.97.215.255
31.97.224.0/20
69.62.64.0/18
103.199.184.0/22
148.222.52.0/22
168.231.64.0/18
194.164.148.0/22
Signature Algorithm: sha256WithRSAEncryption
ab:2a:97:c9:a5:bb:11:c9:7f:8a:b6:e3:41:a6:f5:46:05:1c:
56:dc:5b:bc:13:dc:64:37:d5:49:f2:3d:4e:c4:5a:0f:41:12:
f5:4c:f3:37:54:18:9a:cf:4e:22:6b:ef:a6:fb:22:d0:34:06:
f0:ac:f7:7b:10:bd:97:4e:f2:70:6a:67:e0:8d:ab:41:8d:9e:
71:ed:ca:4d:85:27:83:e1:e9:fc:88:d3:6f:33:ca:75:d6:84:
04:52:d1:77:e8:0b:00:c8:95:fa:bc:35:6d:e6:67:26:cc:b5:
9c:53:41:00:25:97:2f:78:63:cc:85:5d:33:e6:8e:b4:a5:f7:
90:71:28:52:4d:6d:74:10:b2:2e:1f:c1:df:fd:3f:fe:e5:2f:
ff:03:73:05:ae:e5:f1:81:fd:80:18:ff:0c:79:29:58:56:b2:
aa:79:cb:d1:6c:81:3e:81:d5:90:a2:35:6e:af:ee:bf:74:2b:
b9:20:73:c0:7f:e6:e4:6f:66:55:df:52:81:5b:97:17:2d:84:
b2:1c:d3:4f:9e:dd:ed:a8:4a:a5:7f:4c:41:6e:b7:8a:1c:3d:
33:79:61:b0:82:ba:b3:ee:71:81:3d:a7:13:73:fb:7e:dd:fd:
23:5f:0b:7a:48:29:40:73:0e:a1:f1:73:c3:5b:cb:87:77:95:
dd:4d:8f:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:57:06 2025 by rpki-client