Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/l1nwOGEHXCdQjjUmaDuXltyrtb8.roa
File: l1nwOGEHXCdQjjUmaDuXltyrtb8.roa (raw, json)
Hash identifier: 1LCuJlM+ykXhPzcBSxcktPzcPf50HaOvEjH9WNJBKv0=
Subject key identifier: 97:59:F0:38:61:07:5C:27:50:8E:35:26:68:3B:97:96:DC:AB:B5:BF
Certificate issuer: /CN=b914166b685ac015b94126cdb8b18c83a12ed862
Certificate serial: 01979C84442EF45A5D1DEE0A7A85BC8F72E9
Authority key identifier: B9:14:16:6B:68:5A:C0:15:B9:41:26:CD:B8:B1:8C:83:A1:2E:D8:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRQWa2hawBW5QSbNuLGMg6Eu2GI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/l1nwOGEHXCdQjjUmaDuXltyrtb8.roa
Signing time: Mon 23 Jun 2025 11:20:03 +0000
ROA not before: Mon 23 Jun 2025 11:20:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47583
IP address blocks: 31.97.0.0/23 maxlen: 24
31.97.3.0/24 maxlen: 24
31.97.8.0/21 maxlen: 24
31.97.16.0/20 maxlen: 24
31.97.32.0/21 maxlen: 24
31.97.40.0/22 maxlen: 24
31.97.44.0/22 maxlen: 24
31.97.48.0/22 maxlen: 24
31.97.52.0/22 maxlen: 24
31.97.56.0/22 maxlen: 24
31.97.60.0/22 maxlen: 24
31.97.64.0/24 maxlen: 24
31.97.65.0/24 maxlen: 24
31.97.66.0/23 maxlen: 24
31.97.68.0/23 maxlen: 24
31.97.70.0/23 maxlen: 24
31.97.72.0/22 maxlen: 24
31.97.76.0/22 maxlen: 24
31.97.80.0/20 maxlen: 24
31.97.96.0/21 maxlen: 24
31.97.104.0/21 maxlen: 24
31.97.112.0/21 maxlen: 24
31.97.120.0/21 maxlen: 24
31.97.128.0/20 maxlen: 24
31.97.144.0/22 maxlen: 24
31.97.148.0/23 maxlen: 24
31.97.150.0/24 maxlen: 24
31.97.151.0/24 maxlen: 24
31.97.152.0/21 maxlen: 24
31.97.160.0/20 maxlen: 24
31.97.176.0/23 maxlen: 24
31.97.178.0/24 maxlen: 24
31.97.179.0/24 maxlen: 24
31.97.180.0/22 maxlen: 24
31.97.184.0/23 maxlen: 24
31.97.186.0/24 maxlen: 24
31.97.187.0/24 maxlen: 24
31.97.188.0/22 maxlen: 24
31.97.192.0/21 maxlen: 24
31.97.200.0/21 maxlen: 24
31.97.208.0/21 maxlen: 24
31.97.216.0/23 maxlen: 24
31.97.224.0/20 maxlen: 24
31.97.240.0/20 maxlen: 24
69.62.64.0/23 maxlen: 24
69.62.66.0/23 maxlen: 24
69.62.68.0/22 maxlen: 24
69.62.72.0/21 maxlen: 24
69.62.80.0/22 maxlen: 24
69.62.84.0/23 maxlen: 24
69.62.86.0/23 maxlen: 24
69.62.88.0/21 maxlen: 24
69.62.96.0/21 maxlen: 24
69.62.104.0/24 maxlen: 24
69.62.105.0/24 maxlen: 24
69.62.106.0/23 maxlen: 24
69.62.108.0/22 maxlen: 24
69.62.112.0/22 maxlen: 24
69.62.116.0/22 maxlen: 24
69.62.120.0/23 maxlen: 24
69.62.122.0/24 maxlen: 24
69.62.123.0/24 maxlen: 24
69.62.124.0/24 maxlen: 24
69.62.125.0/24 maxlen: 24
69.62.126.0/23 maxlen: 24
103.199.184.0/22 maxlen: 24
148.222.52.0/24 maxlen: 24
148.222.53.0/24 maxlen: 24
148.222.54.0/24 maxlen: 24
148.222.55.0/24 maxlen: 24
168.231.64.0/21 maxlen: 24
168.231.72.0/22 maxlen: 24
168.231.76.0/23 maxlen: 24
168.231.78.0/23 maxlen: 24
168.231.80.0/21 maxlen: 24
168.231.88.0/21 maxlen: 24
168.231.96.0/22 maxlen: 24
168.231.100.0/24 maxlen: 24
168.231.101.0/24 maxlen: 24
168.231.102.0/23 maxlen: 24
168.231.104.0/21 maxlen: 24
168.231.112.0/22 maxlen: 24
168.231.116.0/24 maxlen: 24
168.231.117.0/24 maxlen: 24
168.231.118.0/23 maxlen: 24
168.231.120.0/22 maxlen: 24
168.231.124.0/22 maxlen: 24
194.164.148.0/22 maxlen: 24
Validation: Failed, certificate revoked on Fri 27 Jun 2025 12:40:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:9c:84:44:2e:f4:5a:5d:1d:ee:0a:7a:85:bc:8f:72:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b914166b685ac015b94126cdb8b18c83a12ed862
Validity
Not Before: Jun 23 11:20:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9759f03861075c27508e3526683b9796dcabb5bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:3c:49:c2:db:2b:3e:f6:7b:03:59:15:3b:a7:
a4:16:e9:b1:0e:d5:c1:55:fe:6c:08:59:ac:7c:37:
9f:23:88:5b:ab:c7:3c:05:61:60:53:6b:72:48:68:
91:0d:a6:16:f6:ab:57:30:5e:3b:3a:b1:48:ad:40:
53:82:23:aa:a4:5f:c9:28:c8:0f:1d:1d:ae:13:fb:
ad:25:04:4d:af:61:87:fd:e9:39:b7:ac:6d:fd:61:
98:2a:81:78:12:3b:48:4b:f7:b3:a6:88:b2:43:48:
a8:57:37:e1:50:ee:02:e0:41:8f:bd:da:f6:2e:ed:
ab:cc:16:bf:4e:72:69:34:29:d6:f6:ce:d8:f9:3e:
f1:33:4d:0f:b6:b6:e9:de:98:49:c8:26:97:a2:3b:
a7:8f:56:d2:fb:07:ee:fe:25:91:86:28:38:ac:23:
ff:d2:4d:fa:7f:7f:c4:37:07:a5:5c:39:3c:86:f5:
19:a9:53:39:aa:f8:2e:3f:a3:63:91:02:60:92:d5:
ae:ef:a3:a4:bb:1f:c6:d8:2d:ac:78:89:27:74:0a:
5e:98:03:82:03:f3:81:cd:20:a3:6d:09:8a:d8:6f:
ee:2c:ab:18:a7:2a:2c:4b:b8:de:33:5c:f6:7f:8e:
39:1e:8c:db:74:f6:be:d3:6e:f9:0f:7c:40:cf:1c:
cb:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:59:F0:38:61:07:5C:27:50:8E:35:26:68:3B:97:96:DC:AB:B5:BF
X509v3 Authority Key Identifier:
keyid:B9:14:16:6B:68:5A:C0:15:B9:41:26:CD:B8:B1:8C:83:A1:2E:D8:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRQWa2hawBW5QSbNuLGMg6Eu2GI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/l1nwOGEHXCdQjjUmaDuXltyrtb8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/uRQWa2hawBW5QSbNuLGMg6Eu2GI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.97.0.0/23
31.97.3.0/24
31.97.8.0-31.97.217.255
31.97.224.0/19
69.62.64.0/18
103.199.184.0/22
148.222.52.0/22
168.231.64.0/18
194.164.148.0/22
Signature Algorithm: sha256WithRSAEncryption
9d:58:0a:f1:2b:da:7b:fb:fe:e7:ba:da:2d:cf:18:2f:be:65:
44:8d:8b:ab:b9:7d:73:34:10:9e:26:ef:53:61:ad:9c:b3:65:
14:75:a1:60:ee:a7:ca:8e:39:d5:23:46:58:89:53:cf:1a:b3:
eb:cf:6a:73:6e:9d:22:49:2e:ba:50:aa:8f:ae:89:e2:63:36:
57:0c:92:6a:7a:ae:c4:49:13:0e:0a:40:dd:12:a5:9e:66:df:
35:e4:41:84:ea:dc:1f:b7:e7:66:06:18:09:21:b0:9a:1f:14:
e2:81:c5:1d:5a:a6:8a:ab:5b:02:f4:f4:24:11:07:a9:16:d3:
bb:00:42:0a:96:27:fe:b2:14:a3:93:89:e3:b7:31:12:84:4b:
0c:ea:7c:41:ca:16:f3:eb:50:c8:e8:85:87:94:6e:a7:8a:68:
fb:59:2d:26:4a:49:9b:19:be:24:81:25:be:d9:5d:0e:d2:19:
1d:22:07:db:fb:88:3a:3b:38:62:2f:86:2a:da:66:63:84:67:
58:e6:b0:15:db:bd:63:5e:2f:dd:ee:ab:9f:3a:cb:be:7b:49:
3f:42:69:cc:07:b9:96:cd:c4:9e:49:94:d0:8c:fb:be:8e:9b:
d1:db:cd:36:8b:47:2d:00:de:78:d8:fa:05:15:9b:38:6e:9f:
35:5b:92:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:05:51 2025 by rpki-client