Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/Vfsd4oQRelOy5bIx67qR-YlqGwA.roa
File: Vfsd4oQRelOy5bIx67qR-YlqGwA.roa (raw, json)
Hash identifier: SQEIRVkDmH64PtkmcxgDiq8upV73yp0LW5YfsHN+jB4=
Subject key identifier: 55:FB:1D:E2:84:11:7A:53:B2:E5:B2:31:EB:BA:91:F9:89:6A:1B:00
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 0197E453BE972B46FA19101EC0C66D9C25F0
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/Vfsd4oQRelOy5bIx67qR-YlqGwA.roa
Signing time: Mon 07 Jul 2025 09:59:42 +0000
ROA not before: Mon 07 Jul 2025 09:59:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200845
IP address blocks: 31.15.0.0/22 maxlen: 22
31.15.0.0/23 maxlen: 23
31.15.0.0/24 maxlen: 24
31.15.1.0/24 maxlen: 24
31.15.2.0/23 maxlen: 23
31.15.2.0/24 maxlen: 24
31.15.3.0/24 maxlen: 25
31.15.4.0/24 maxlen: 24
31.15.5.0/24 maxlen: 24
31.15.6.0/24 maxlen: 24
45.133.60.0/22 maxlen: 22
45.133.60.0/23 maxlen: 23
45.133.60.0/24 maxlen: 24
45.133.61.0/24 maxlen: 24
45.133.62.0/23 maxlen: 23
45.133.62.0/24 maxlen: 24
45.133.63.0/24 maxlen: 24
45.145.135.0/24 maxlen: 24
45.150.84.0/23 maxlen: 23
45.150.84.0/24 maxlen: 24
45.150.85.0/24 maxlen: 24
45.152.140.0/22 maxlen: 22
45.152.140.0/23 maxlen: 23
45.152.140.0/24 maxlen: 24
45.152.141.0/24 maxlen: 24
45.152.142.0/23 maxlen: 23
45.152.142.0/24 maxlen: 24
45.152.143.0/24 maxlen: 24
45.155.56.0/22 maxlen: 22
45.155.56.0/23 maxlen: 23
45.155.56.0/24 maxlen: 24
45.155.57.0/24 maxlen: 24
45.155.58.0/23 maxlen: 23
45.155.58.0/24 maxlen: 24
45.155.59.0/24 maxlen: 24
89.190.152.0/22 maxlen: 22
89.190.152.0/24 maxlen: 24
89.190.153.0/24 maxlen: 24
89.190.154.0/24 maxlen: 24
89.190.155.0/24 maxlen: 24
178.19.40.0/24 maxlen: 24
178.19.41.0/24 maxlen: 24
178.19.42.0/24 maxlen: 24
185.28.51.0/24 maxlen: 24
185.229.216.0/22 maxlen: 22
185.229.216.0/23 maxlen: 23
185.229.217.0/24 maxlen: 24
185.229.218.0/23 maxlen: 23
185.229.219.0/24 maxlen: 24
185.231.186.0/24 maxlen: 24
185.244.228.0/23 maxlen: 23
185.244.228.0/24 maxlen: 24
185.244.229.0/24 maxlen: 24
185.244.230.0/24 maxlen: 24
185.244.231.0/24 maxlen: 24
185.246.12.0/23 maxlen: 23
185.246.12.0/24 maxlen: 24
185.246.13.0/24 maxlen: 24
185.246.15.0/24 maxlen: 24
194.31.104.0/22 maxlen: 22
194.31.104.0/23 maxlen: 23
194.31.104.0/24 maxlen: 24
194.31.105.0/24 maxlen: 24
194.31.106.0/23 maxlen: 23
194.31.106.0/24 maxlen: 24
194.31.107.0/24 maxlen: 24
194.32.112.0/22 maxlen: 22
194.32.112.0/24 maxlen: 24
194.32.113.0/24 maxlen: 24
194.32.114.0/24 maxlen: 24
194.32.115.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 07 Jul 2025 11:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:e4:53:be:97:2b:46:fa:19:10:1e:c0:c6:6d:9c:25:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Jul 7 09:59:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=55fb1de284117a53b2e5b231ebba91f9896a1b00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:2d:6e:0d:7c:04:0a:13:43:e4:3b:b5:db:63:
b2:4c:f4:e8:b3:91:9c:c1:da:c6:6a:d1:89:53:b7:
c6:da:5e:71:28:35:17:88:16:98:ad:7b:01:3a:d6:
bc:1d:07:45:c6:fa:1c:0c:ef:d8:d3:57:a4:99:ba:
80:a1:d1:a0:95:d5:d3:05:2b:51:b0:07:97:b4:a0:
4c:91:62:71:03:ce:78:60:f4:74:0e:a9:e3:f8:06:
d3:7d:45:6b:b9:80:da:4a:68:d3:e5:66:86:dd:4c:
5d:64:59:ac:36:26:44:59:44:ba:4c:2e:25:1e:08:
b3:6b:84:32:dc:20:a1:e8:3b:f0:c2:37:c1:b1:28:
db:e8:19:36:53:42:21:96:40:a7:9e:c2:86:fc:1e:
c3:b6:c8:8c:10:de:b7:d6:8a:94:d1:70:c0:3f:5e:
8f:27:66:db:b0:08:6b:84:c7:0f:bd:8a:76:60:c8:
67:36:30:67:87:b5:10:04:92:a7:19:8b:0e:65:90:
12:a3:65:ea:09:fd:c7:f3:5d:32:3d:f3:b2:c6:b1:
48:e8:f5:92:cc:a7:70:48:fe:6b:37:6e:04:13:b8:
82:33:32:cf:38:f9:4e:21:f4:cc:5f:87:2a:b4:78:
28:53:e8:38:92:0f:b4:b6:d1:82:4c:c6:7e:47:33:
58:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:FB:1D:E2:84:11:7A:53:B2:E5:B2:31:EB:BA:91:F9:89:6A:1B:00
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/Vfsd4oQRelOy5bIx67qR-YlqGwA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.15.0.0-31.15.6.255
45.133.60.0/22
45.145.135.0/24
45.150.84.0/23
45.152.140.0/22
45.155.56.0/22
89.190.152.0/22
178.19.40.0-178.19.42.255
185.28.51.0/24
185.229.216.0/22
185.231.186.0/24
185.244.228.0/22
185.246.12.0/23
185.246.15.0/24
194.31.104.0/22
194.32.112.0/22
Signature Algorithm: sha256WithRSAEncryption
71:d8:3b:57:e1:a1:60:54:d9:cf:45:69:f1:d2:1a:2f:18:83:
b3:a5:49:50:7f:53:f7:8b:fc:d7:2a:d4:ba:ca:8c:5b:e9:1d:
3b:cc:9a:bf:7c:a9:47:5c:b5:a8:91:b6:21:82:74:1f:20:2f:
24:da:0c:83:87:f5:cd:7b:1f:b3:e0:f8:61:8c:bc:1d:ce:39:
4f:26:d1:31:45:c7:24:d0:89:e2:0c:68:30:ae:71:a8:63:a1:
ed:de:f3:79:d3:4d:f1:4a:c1:c4:11:b6:6d:28:48:98:63:5a:
60:98:2c:18:53:0f:9d:da:88:66:2c:65:6d:a6:ed:f5:f8:df:
3b:44:a2:2b:2c:37:de:3f:bb:22:a5:43:34:8d:6b:ce:70:23:
ca:96:e1:4f:94:02:d0:96:01:54:64:75:0f:a5:5f:bb:b0:e3:
53:7c:f3:f0:bd:c1:cc:fd:21:6d:07:d7:e6:16:82:d9:3c:54:
12:e9:58:59:cd:64:b6:67:51:91:50:a9:a5:cc:62:69:2b:97:
b5:cc:71:e8:e3:c5:e2:1d:ac:3c:0b:9c:3f:73:94:0a:33:42:
8d:f6:83:79:a4:f8:d0:f7:9f:39:fc:81:44:09:ce:c8:a1:e6:
9a:c6:a1:eb:64:75:d6:f2:8d:d0:93:02:75:e3:85:48:e8:86:
4c:c1:cc:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 06:02:58 2025 by rpki-client