Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/uDyo7ZLld5DLgyJnlSDHycqMIgM.roa
File: uDyo7ZLld5DLgyJnlSDHycqMIgM.roa (raw, json)
Hash identifier: bAieS2GshSa3MZXp4NDn4VHU/C7A5cpOHoWWFGkkZGE=
Subject key identifier: B8:3C:A8:ED:92:E5:77:90:CB:83:22:67:95:20:C7:C9:CA:8C:22:03
Certificate issuer: /CN=b914166b685ac015b94126cdb8b18c83a12ed862
Certificate serial: 01978222A4F4184E0B3A37BC32A40F22E1FE
Authority key identifier: B9:14:16:6B:68:5A:C0:15:B9:41:26:CD:B8:B1:8C:83:A1:2E:D8:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRQWa2hawBW5QSbNuLGMg6Eu2GI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/uDyo7ZLld5DLgyJnlSDHycqMIgM.roa
Signing time: Wed 18 Jun 2025 08:23:17 +0000
ROA not before: Wed 18 Jun 2025 08:23:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47583
IP address blocks: 31.97.0.0/23 maxlen: 24
31.97.2.0/24 maxlen: 24
31.97.3.0/24 maxlen: 24
31.97.8.0/21 maxlen: 24
31.97.16.0/20 maxlen: 24
31.97.32.0/21 maxlen: 24
31.97.40.0/22 maxlen: 24
31.97.44.0/22 maxlen: 24
31.97.48.0/22 maxlen: 24
31.97.52.0/22 maxlen: 24
31.97.56.0/22 maxlen: 24
31.97.60.0/22 maxlen: 24
31.97.64.0/24 maxlen: 24
31.97.65.0/24 maxlen: 24
31.97.66.0/23 maxlen: 24
31.97.68.0/23 maxlen: 24
31.97.70.0/23 maxlen: 24
31.97.72.0/22 maxlen: 24
31.97.80.0/20 maxlen: 24
31.97.96.0/21 maxlen: 24
31.97.104.0/21 maxlen: 24
31.97.112.0/21 maxlen: 24
31.97.120.0/21 maxlen: 24
31.97.128.0/20 maxlen: 24
31.97.144.0/22 maxlen: 24
31.97.148.0/23 maxlen: 24
31.97.150.0/24 maxlen: 24
31.97.151.0/24 maxlen: 24
31.97.152.0/21 maxlen: 24
31.97.160.0/20 maxlen: 24
31.97.176.0/23 maxlen: 24
31.97.178.0/24 maxlen: 24
31.97.179.0/24 maxlen: 24
31.97.180.0/22 maxlen: 24
31.97.184.0/23 maxlen: 24
31.97.186.0/24 maxlen: 24
31.97.187.0/24 maxlen: 24
31.97.188.0/22 maxlen: 24
31.97.192.0/21 maxlen: 24
31.97.200.0/21 maxlen: 24
31.97.208.0/21 maxlen: 24
31.97.224.0/20 maxlen: 24
69.62.64.0/23 maxlen: 24
69.62.66.0/23 maxlen: 24
69.62.68.0/22 maxlen: 24
69.62.72.0/21 maxlen: 24
69.62.80.0/22 maxlen: 24
69.62.84.0/23 maxlen: 24
69.62.86.0/23 maxlen: 24
69.62.88.0/21 maxlen: 24
69.62.96.0/21 maxlen: 24
69.62.104.0/24 maxlen: 24
69.62.105.0/24 maxlen: 24
69.62.106.0/23 maxlen: 24
69.62.108.0/22 maxlen: 24
69.62.112.0/22 maxlen: 24
69.62.116.0/22 maxlen: 24
69.62.120.0/23 maxlen: 24
69.62.122.0/24 maxlen: 24
69.62.123.0/24 maxlen: 24
69.62.124.0/24 maxlen: 24
69.62.125.0/24 maxlen: 24
69.62.126.0/23 maxlen: 24
103.199.184.0/22 maxlen: 24
148.222.52.0/24 maxlen: 24
148.222.53.0/24 maxlen: 24
148.222.54.0/24 maxlen: 24
148.222.55.0/24 maxlen: 24
168.231.64.0/21 maxlen: 24
168.231.72.0/22 maxlen: 24
168.231.76.0/23 maxlen: 24
168.231.78.0/23 maxlen: 24
168.231.80.0/21 maxlen: 24
168.231.88.0/21 maxlen: 24
168.231.96.0/22 maxlen: 24
168.231.100.0/24 maxlen: 24
168.231.101.0/24 maxlen: 24
168.231.102.0/23 maxlen: 24
168.231.104.0/21 maxlen: 24
168.231.112.0/22 maxlen: 24
168.231.116.0/24 maxlen: 24
168.231.117.0/24 maxlen: 24
168.231.118.0/23 maxlen: 24
168.231.120.0/22 maxlen: 24
168.231.124.0/22 maxlen: 24
194.164.148.0/22 maxlen: 24
Validation: Failed, certificate revoked on Wed 18 Jun 2025 12:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:82:22:a4:f4:18:4e:0b:3a:37:bc:32:a4:0f:22:e1:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b914166b685ac015b94126cdb8b18c83a12ed862
Validity
Not Before: Jun 18 08:23:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b83ca8ed92e57790cb8322679520c7c9ca8c2203
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d9:36:a6:5f:28:16:78:de:e1:a2:95:20:a3:
01:d7:26:63:f0:89:86:62:46:a0:8d:b9:0c:02:a1:
7c:2c:9e:4a:d1:7b:eb:5c:41:ac:b3:42:b6:4d:33:
c0:b5:03:b7:fb:6f:63:fb:95:46:8e:71:4b:8f:9c:
a4:97:9f:2c:87:52:2e:a2:99:d2:18:3c:53:6b:64:
24:0c:7c:52:9c:f2:3f:c9:e1:34:53:16:88:bd:cf:
ed:66:3f:78:78:ac:80:49:fc:4a:9f:2d:9c:a5:94:
a7:e2:9f:2c:ac:a8:79:cc:55:a0:89:79:d5:22:ff:
e5:3c:c1:3b:f3:04:6c:35:5f:52:9c:cd:72:6a:46:
97:9a:0c:e9:93:c3:c9:d6:e5:30:f7:18:05:96:69:
aa:76:b3:5f:50:b4:3f:df:1a:d3:de:96:c6:43:69:
d2:e0:ff:09:f2:ca:2c:d5:19:c4:98:62:14:21:60:
8f:15:25:2c:e8:03:59:55:83:63:50:d2:19:04:71:
1b:58:09:29:8f:fb:8a:bb:fd:01:9f:39:c7:8a:80:
c6:1d:a8:c8:70:ff:23:ba:a6:4d:86:93:54:c9:c7:
8f:b8:02:8c:77:5e:8f:be:b1:2b:0c:82:45:0e:d9:
cb:63:a2:6f:2f:ad:e4:d4:da:bd:7f:f3:97:1f:bd:
75:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:3C:A8:ED:92:E5:77:90:CB:83:22:67:95:20:C7:C9:CA:8C:22:03
X509v3 Authority Key Identifier:
keyid:B9:14:16:6B:68:5A:C0:15:B9:41:26:CD:B8:B1:8C:83:A1:2E:D8:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRQWa2hawBW5QSbNuLGMg6Eu2GI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/uDyo7ZLld5DLgyJnlSDHycqMIgM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/uRQWa2hawBW5QSbNuLGMg6Eu2GI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.97.0.0/22
31.97.8.0-31.97.75.255
31.97.80.0-31.97.215.255
31.97.224.0/20
69.62.64.0/18
103.199.184.0/22
148.222.52.0/22
168.231.64.0/18
194.164.148.0/22
Signature Algorithm: sha256WithRSAEncryption
81:80:14:10:67:0d:f3:a3:be:c8:64:1e:53:1d:50:48:ce:0b:
be:ee:e1:04:c1:ac:1c:d7:d1:63:17:8a:6b:4e:2d:b8:28:88:
4d:4d:8c:85:d6:85:e8:4d:3d:fb:a6:07:b8:3e:1b:c7:a7:c0:
97:c7:9f:38:a3:d7:68:9a:45:b9:39:89:e3:df:ec:37:7c:12:
e4:4e:b8:ff:a3:5b:06:9e:86:84:d3:44:29:ca:74:e6:6f:b6:
40:24:cf:32:ba:f2:ff:96:dc:c7:5b:11:a0:ff:2c:26:c8:81:
59:2b:3a:da:31:42:12:3f:83:f5:cb:e2:25:d2:04:51:a2:a0:
30:c0:67:3b:c2:4e:b5:d4:5a:bb:a0:a8:d5:ed:99:35:cf:49:
df:45:01:73:8d:93:ec:df:49:23:31:b3:7b:32:a4:1b:cf:d5:
49:2a:bc:23:e5:06:58:8f:d3:f5:5c:12:68:c3:a9:39:e9:ef:
30:50:56:6e:eb:24:db:1b:93:2e:56:8e:9a:af:1c:b5:00:13:
53:19:fe:b4:d8:27:b9:93:96:38:b4:2b:26:d8:7d:7c:21:47:
72:1b:b8:7f:68:f6:89:65:15:7d:f4:82:14:0b:de:37:52:70:
0b:1c:90:e7:70:63:87:78:b1:cb:45:1f:8f:6f:2c:05:76:27:
1e:33:62:c5
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgISAZeCIqT0GE4LOje8MqQPIuH+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5MTQxNjZiNjg1YWMwMTViOTQxMjZjZGI4YjE4YzgzYTEy
ZWQ4NjIwHhcNMjUwNjE4MDgyMzE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiODNjYThlZDkyZTU3NzkwY2I4MzIyNjc5NTIwYzdjOWNhOGMyMjAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArdk2pl8oFnje4aKVIKMB1yZj8ImG
YkagjbkMAqF8LJ5K0XvrXEGss0K2TTPAtQO3+29j+5VGjnFLj5ykl58sh1IuopnS
GDxTa2QkDHxSnPI/yeE0UxaIvc/tZj94eKyASfxKny2cpZSn4p8srKh5zFWgiXnV
Iv/lPME78wRsNV9SnM1yakaXmgzpk8PJ1uUw9xgFlmmqdrNfULQ/3xrT3pbGQ2nS
4P8J8sos1RnEmGIUIWCPFSUs6ANZVYNjUNIZBHEbWAkpj/uKu/0BnznHioDGHajI
cP8juqZNhpNUycePuAKMd16PvrErDIJFDtnLY6JvL63k1Nq9f/OXH711MQIDAQAB
o4ICSTCCAkUwHQYDVR0OBBYEFLg8qO2S5XeQy4MiZ5Ugx8nKjCIDMB8GA1UdIwQY
MBaAFLkUFmtoWsAVuUEmzbixjIOhLthiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVJRV2EyaGF3Qlc1UVNiTnVMR01nNkV1MkdJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi9kM2JlNzAtZGRmMS00OGY1LTg2NmYt
ZWE2N2E5ODYyNWZlLzEvdUR5bzdaTGxkNURMZ3lKbmxTREh5Y3FNSWdNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi9kM2JlNzAtZGRmMS00OGY1LTg2NmYtZWE2N2E5ODYyNWZl
LzEvdVJRV2EyaGF3Qlc1UVNiTnVMR01nNkV1MkdJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMF8GCCsGAQUFBwEHAQH/BFAwTjBMBAIAATBGAwQCH2EAMAwD
BAMfYQgDBAIfYUgwDAMEBB9hUAMEAx9h0AMEBB9h4AMEBkU+QAMEAmfHuAMEApTe
NAMEBqjnQAMEAsKklDANBgkqhkiG9w0BAQsFAAOCAQEAgYAUEGcN86O+yGQeUx1Q
SM4Lvu7hBMGsHNfRYxeKa04tuCiITU2MhdaF6E09+6YHuD4bx6fAl8efOKPXaJpF
uTmJ49/sN3wS5E64/6NbBp6GhNNEKcp05m+2QCTPMrry/5bcx1sRoP8sJsiBWSs6
2jFCEj+D9cviJdIEUaKgMMBnO8JOtdRau6Co1e2ZNc9J30UBc42T7N9JIzGzezKk
G8/VSSq8I+UGWI/T9VwSaMOpOenvMFBWbusk2xuTLlaOmq8ctQATUxn+tNgnuZOW
OLQrJth9fCFHchu4f2j2iWUVffSCFAveN1JwCxyQ53Bjh3ixy0Ufj28sBXYnHjNi
xQ==
-----END CERTIFICATE-----
Generated at Sun Jul 27 11:57:53 2025 by rpki-client