Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/pQlr9-zVGS3q8Hjiwk2pAExk7vE.roa
File: pQlr9-zVGS3q8Hjiwk2pAExk7vE.roa (raw, json)
Hash identifier: zAy2c6x51kpweghKqMjV08gKhJrNF+qHmvjcVvrVYdI=
Subject key identifier: A5:09:6B:F7:EC:D5:19:2D:EA:F0:78:E2:C2:4D:A9:00:4C:64:EE:F1
Certificate issuer: /CN=b914166b685ac015b94126cdb8b18c83a12ed862
Certificate serial: 0197CB13330D296D59BFB745F01262F84FE2
Authority key identifier: B9:14:16:6B:68:5A:C0:15:B9:41:26:CD:B8:B1:8C:83:A1:2E:D8:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRQWa2hawBW5QSbNuLGMg6Eu2GI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/pQlr9-zVGS3q8Hjiwk2pAExk7vE.roa
Signing time: Wed 02 Jul 2025 12:18:42 +0000
ROA not before: Wed 02 Jul 2025 12:18:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47583
IP address blocks: 31.97.0.0/23 maxlen: 24
31.97.2.0/24 maxlen: 24
31.97.3.0/24 maxlen: 24
31.97.8.0/21 maxlen: 24
31.97.16.0/20 maxlen: 24
31.97.32.0/21 maxlen: 24
31.97.40.0/22 maxlen: 24
31.97.44.0/22 maxlen: 24
31.97.48.0/22 maxlen: 24
31.97.52.0/22 maxlen: 24
31.97.56.0/22 maxlen: 24
31.97.60.0/22 maxlen: 24
31.97.64.0/24 maxlen: 24
31.97.65.0/24 maxlen: 24
31.97.66.0/23 maxlen: 24
31.97.68.0/23 maxlen: 24
31.97.70.0/23 maxlen: 24
31.97.72.0/22 maxlen: 24
31.97.76.0/22 maxlen: 24
31.97.80.0/20 maxlen: 24
31.97.96.0/21 maxlen: 24
31.97.104.0/21 maxlen: 24
31.97.112.0/21 maxlen: 24
31.97.120.0/21 maxlen: 24
31.97.128.0/20 maxlen: 24
31.97.144.0/22 maxlen: 24
31.97.148.0/23 maxlen: 24
31.97.150.0/24 maxlen: 24
31.97.151.0/24 maxlen: 24
31.97.152.0/21 maxlen: 24
31.97.160.0/20 maxlen: 24
31.97.176.0/23 maxlen: 24
31.97.178.0/24 maxlen: 24
31.97.179.0/24 maxlen: 24
31.97.180.0/22 maxlen: 24
31.97.184.0/23 maxlen: 24
31.97.186.0/24 maxlen: 24
31.97.187.0/24 maxlen: 24
31.97.188.0/22 maxlen: 24
31.97.192.0/21 maxlen: 24
31.97.200.0/21 maxlen: 24
31.97.208.0/21 maxlen: 24
31.97.216.0/23 maxlen: 24
31.97.218.0/23 maxlen: 24
31.97.220.0/22 maxlen: 24
31.97.224.0/20 maxlen: 24
31.97.240.0/20 maxlen: 24
69.62.64.0/23 maxlen: 24
69.62.66.0/23 maxlen: 24
69.62.68.0/22 maxlen: 24
69.62.72.0/21 maxlen: 24
69.62.80.0/22 maxlen: 24
69.62.84.0/23 maxlen: 24
69.62.86.0/23 maxlen: 24
69.62.88.0/21 maxlen: 24
69.62.96.0/21 maxlen: 24
69.62.104.0/24 maxlen: 24
69.62.105.0/24 maxlen: 24
69.62.106.0/23 maxlen: 24
69.62.108.0/22 maxlen: 24
69.62.112.0/22 maxlen: 24
69.62.116.0/22 maxlen: 24
69.62.120.0/23 maxlen: 24
69.62.122.0/24 maxlen: 24
69.62.123.0/24 maxlen: 24
69.62.124.0/24 maxlen: 24
69.62.125.0/24 maxlen: 24
69.62.126.0/23 maxlen: 24
103.199.184.0/22 maxlen: 24
148.222.52.0/24 maxlen: 24
148.222.53.0/24 maxlen: 24
148.222.54.0/24 maxlen: 24
148.222.55.0/24 maxlen: 24
148.230.64.0/23 maxlen: 24
148.230.66.0/23 maxlen: 24
148.230.68.0/23 maxlen: 24
168.231.64.0/21 maxlen: 24
168.231.72.0/22 maxlen: 24
168.231.76.0/23 maxlen: 24
168.231.78.0/23 maxlen: 24
168.231.80.0/21 maxlen: 24
168.231.88.0/21 maxlen: 24
168.231.96.0/22 maxlen: 24
168.231.100.0/24 maxlen: 24
168.231.101.0/24 maxlen: 24
168.231.102.0/23 maxlen: 24
168.231.104.0/21 maxlen: 24
168.231.112.0/22 maxlen: 24
168.231.116.0/24 maxlen: 24
168.231.117.0/24 maxlen: 24
168.231.118.0/23 maxlen: 24
168.231.120.0/22 maxlen: 24
168.231.124.0/22 maxlen: 24
194.164.148.0/22 maxlen: 24
Validation: Failed, certificate revoked on Fri 11 Jul 2025 13:10:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cb:13:33:0d:29:6d:59:bf:b7:45:f0:12:62:f8:4f:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b914166b685ac015b94126cdb8b18c83a12ed862
Validity
Not Before: Jul 2 12:18:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a5096bf7ecd5192deaf078e2c24da9004c64eef1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:ce:05:fe:e4:92:e9:63:4f:90:b9:62:8d:75:
d4:01:9a:a5:89:ef:1c:3b:d0:bb:63:6c:27:6f:64:
e0:a4:f2:30:b5:63:b0:4c:60:4e:85:d2:4d:20:e1:
21:88:a5:de:0c:c8:c9:a0:51:35:be:95:43:39:d2:
eb:3e:99:fb:dd:d9:c9:25:97:df:48:85:09:f8:67:
92:9c:34:90:73:a6:85:9e:fe:a5:ae:6c:de:31:7f:
c1:f9:33:2e:4f:5f:dc:69:66:52:fc:6b:c0:15:81:
bc:19:3c:bd:5c:0a:a9:3b:24:06:7b:c1:34:4a:66:
b4:ee:a9:e3:21:f2:c0:07:40:2a:4a:11:57:d4:35:
17:1d:80:4f:21:e8:48:39:ef:46:9a:6a:cb:ba:48:
7f:58:c1:32:2e:7a:de:b1:f7:ba:d4:30:b9:6f:2f:
f1:34:ec:06:50:06:99:2d:5f:92:c5:8d:69:b6:41:
6f:c8:83:19:63:e7:f9:87:e1:20:67:9a:c1:f4:60:
0b:f6:08:b5:65:64:d7:9a:cc:48:e9:d0:63:e8:79:
a9:2b:32:33:4d:f3:91:3d:2a:ba:22:80:65:7a:60:
33:7f:83:b3:e3:cd:fa:bc:fd:a5:57:bb:91:80:08:
8f:f3:55:1e:26:8a:07:c9:aa:d5:bb:cb:7c:dc:f9:
d5:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:09:6B:F7:EC:D5:19:2D:EA:F0:78:E2:C2:4D:A9:00:4C:64:EE:F1
X509v3 Authority Key Identifier:
keyid:B9:14:16:6B:68:5A:C0:15:B9:41:26:CD:B8:B1:8C:83:A1:2E:D8:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRQWa2hawBW5QSbNuLGMg6Eu2GI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/pQlr9-zVGS3q8Hjiwk2pAExk7vE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/uRQWa2hawBW5QSbNuLGMg6Eu2GI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.97.0.0/22
31.97.8.0-31.97.255.255
69.62.64.0/18
103.199.184.0/22
148.222.52.0/22
148.230.64.0-148.230.69.255
168.231.64.0/18
194.164.148.0/22
Signature Algorithm: sha256WithRSAEncryption
af:05:f4:f9:ee:8a:c3:eb:06:5c:d4:cc:87:57:42:17:86:f1:
70:fd:31:06:f9:46:bb:6d:da:5e:e0:f5:29:8f:11:1a:0c:36:
f9:11:a5:bb:0e:bb:99:fe:79:7a:a3:c6:c5:0a:f6:69:14:a3:
d3:b1:9f:9f:b8:f5:70:fe:01:10:0a:13:4d:6b:ff:1f:94:62:
23:dd:ef:e5:53:81:55:42:36:9e:4f:a0:a0:25:85:40:2a:12:
f1:ec:c9:43:5b:6f:e0:85:c0:31:70:ab:96:8e:ae:1a:2b:c1:
59:de:e7:b9:7d:24:88:f8:51:28:88:e1:8a:04:a3:cd:1b:f4:
49:86:b2:d3:4a:2e:f9:5e:75:1d:aa:6a:6e:f3:26:49:38:3a:
ec:2e:79:4b:d5:5a:2c:69:a4:9c:de:60:11:ae:38:67:c0:1f:
c8:63:05:e0:97:5d:57:56:6b:4b:0f:a8:6c:4b:2d:58:f7:0e:
22:93:5b:08:8a:fe:53:f2:00:41:db:ec:93:f9:39:41:e0:11:
82:e7:9b:61:62:c6:83:e7:83:79:23:c7:a1:47:30:3c:36:0a:
97:58:57:50:b9:56:d3:1f:8f:32:3e:07:df:a4:bc:3e:e2:9f:
cc:99:4f:45:a8:70:8e:64:ab:d6:d5:25:5c:8d:79:a8:38:1f:
fb:0d:ef:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:06:46 2025 by rpki-client