Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/Cgw_XsgdS4osdPpFlZd7-pV_EQA.roa
File: Cgw_XsgdS4osdPpFlZd7-pV_EQA.roa (raw, json)
Hash identifier: Evu81KKRg3s1Qk/C92UmAvrI7CajkeiI4ffLoZYC0Og=
Subject key identifier: 0A:0C:3F:5E:C8:1D:4B:8A:2C:74:FA:45:95:97:7B:FA:95:7F:11:00
Certificate issuer: /CN=b914166b685ac015b94126cdb8b18c83a12ed862
Certificate serial: 0196E7D370924B84CEFDDA5204B377552DE9
Authority key identifier: B9:14:16:6B:68:5A:C0:15:B9:41:26:CD:B8:B1:8C:83:A1:2E:D8:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRQWa2hawBW5QSbNuLGMg6Eu2GI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/Cgw_XsgdS4osdPpFlZd7-pV_EQA.roa
Signing time: Mon 19 May 2025 09:15:15 +0000
ROA not before: Mon 19 May 2025 09:15:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47583
IP address blocks: 31.97.0.0/23 maxlen: 24
31.97.8.0/21 maxlen: 24
31.97.16.0/20 maxlen: 24
31.97.32.0/21 maxlen: 24
31.97.40.0/22 maxlen: 24
31.97.44.0/22 maxlen: 24
31.97.48.0/22 maxlen: 24
31.97.52.0/22 maxlen: 24
31.97.56.0/22 maxlen: 24
31.97.60.0/22 maxlen: 24
31.97.64.0/24 maxlen: 24
31.97.65.0/24 maxlen: 24
31.97.66.0/23 maxlen: 24
31.97.68.0/23 maxlen: 24
31.97.70.0/23 maxlen: 24
69.62.64.0/23 maxlen: 24
69.62.66.0/23 maxlen: 24
69.62.68.0/22 maxlen: 24
69.62.72.0/21 maxlen: 24
69.62.80.0/22 maxlen: 24
69.62.84.0/23 maxlen: 24
69.62.86.0/23 maxlen: 24
69.62.88.0/21 maxlen: 24
69.62.96.0/21 maxlen: 24
69.62.104.0/24 maxlen: 24
69.62.105.0/24 maxlen: 24
69.62.106.0/23 maxlen: 24
69.62.108.0/22 maxlen: 24
69.62.112.0/22 maxlen: 24
69.62.116.0/22 maxlen: 24
69.62.120.0/23 maxlen: 24
69.62.122.0/24 maxlen: 24
69.62.123.0/24 maxlen: 24
69.62.124.0/24 maxlen: 24
69.62.125.0/24 maxlen: 24
69.62.126.0/23 maxlen: 24
103.199.184.0/22 maxlen: 24
148.222.52.0/24 maxlen: 24
148.222.53.0/24 maxlen: 24
148.222.54.0/24 maxlen: 24
148.222.55.0/24 maxlen: 24
168.231.64.0/21 maxlen: 24
168.231.72.0/22 maxlen: 24
168.231.76.0/23 maxlen: 24
168.231.78.0/23 maxlen: 24
168.231.80.0/21 maxlen: 24
168.231.88.0/21 maxlen: 24
168.231.96.0/22 maxlen: 24
168.231.100.0/24 maxlen: 24
168.231.101.0/24 maxlen: 24
168.231.102.0/23 maxlen: 24
168.231.104.0/21 maxlen: 24
168.231.112.0/22 maxlen: 24
168.231.116.0/24 maxlen: 24
168.231.117.0/24 maxlen: 24
168.231.118.0/23 maxlen: 24
168.231.120.0/22 maxlen: 24
168.231.124.0/22 maxlen: 24
194.164.148.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 27 May 2025 20:20:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:e7:d3:70:92:4b:84:ce:fd:da:52:04:b3:77:55:2d:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b914166b685ac015b94126cdb8b18c83a12ed862
Validity
Not Before: May 19 09:15:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0a0c3f5ec81d4b8a2c74fa4595977bfa957f1100
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:40:c9:5e:a6:52:f7:a1:42:a3:2f:4c:f0:e1:
24:6f:d6:e5:53:fc:85:66:1b:28:0f:68:e7:b0:5d:
dc:69:b6:56:ee:1c:6b:d5:73:78:ad:16:48:65:ef:
9c:08:38:65:d3:b0:4d:e2:bc:ae:4f:32:92:fa:1e:
4a:71:74:f9:39:06:7a:e5:f7:51:dd:13:05:e1:57:
91:78:48:b1:9a:fb:eb:28:01:c0:91:cd:31:14:ab:
09:1b:60:4a:90:6f:be:6f:13:33:25:36:c9:44:35:
95:c5:66:73:17:d4:25:9f:b6:31:58:a0:e0:2a:af:
72:e3:31:e8:91:d7:f4:cc:85:bf:cb:a9:c1:2a:88:
98:98:44:9b:b5:3b:02:5f:84:f1:db:a6:db:b2:e9:
31:85:f0:48:81:41:71:2f:ef:41:71:88:f8:e9:ba:
95:89:40:99:ec:75:a1:ef:22:d6:95:5a:3a:3c:e2:
f4:6b:9c:9e:91:4d:13:18:fc:9f:d3:98:5f:db:6d:
96:12:37:ef:f1:b6:e4:7f:11:c1:b3:db:43:46:f8:
25:99:88:4a:14:a8:3a:65:d9:3f:69:17:a5:f1:13:
5f:72:91:96:bd:75:b8:12:92:91:6c:21:cd:ad:ab:
e6:08:da:b1:7a:49:4f:25:49:95:77:d8:a0:68:0f:
b8:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:0C:3F:5E:C8:1D:4B:8A:2C:74:FA:45:95:97:7B:FA:95:7F:11:00
X509v3 Authority Key Identifier:
keyid:B9:14:16:6B:68:5A:C0:15:B9:41:26:CD:B8:B1:8C:83:A1:2E:D8:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRQWa2hawBW5QSbNuLGMg6Eu2GI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/Cgw_XsgdS4osdPpFlZd7-pV_EQA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/uRQWa2hawBW5QSbNuLGMg6Eu2GI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.97.0.0/23
31.97.8.0-31.97.71.255
69.62.64.0/18
103.199.184.0/22
148.222.52.0/22
168.231.64.0/18
194.164.148.0/22
Signature Algorithm: sha256WithRSAEncryption
42:3e:e3:98:d2:f0:f8:3e:09:6d:c7:49:e1:95:a1:13:bf:41:
ce:86:09:82:2d:df:d9:51:c1:db:65:c7:09:ab:91:b7:6a:de:
d9:68:c4:af:70:e7:6b:98:2f:02:1a:15:b7:66:28:d2:8c:f1:
00:89:2d:e4:1e:50:cd:f3:96:3a:45:be:44:3d:ff:e8:f0:73:
c5:63:21:5b:ac:54:e7:6c:6d:bf:69:9c:8e:bc:8b:a2:a5:b2:
41:5e:1b:2f:cb:7a:6e:b4:d3:d9:e8:22:b9:21:ab:94:53:29:
ee:eb:44:d1:08:7f:83:be:8a:5c:10:f0:a7:e9:87:fe:2f:53:
79:1c:d1:e2:c9:83:87:f3:69:d6:8f:8a:1c:0b:a3:ca:00:bf:
5e:4b:cf:a9:db:91:39:b5:59:e9:d8:e7:f6:53:31:c8:48:bd:
b9:5e:bb:f6:8a:17:1b:28:2f:40:51:5d:04:6f:11:20:50:9f:
c3:27:1c:99:c7:74:9d:e0:d0:5d:ed:80:66:ff:16:90:e8:24:
20:30:93:eb:60:8b:2e:6e:39:7c:68:d5:1a:16:7f:10:6f:df:
ff:a7:79:ed:a7:d7:a5:4c:4a:0f:ef:0c:a3:38:ce:c9:dd:d4:
c5:b6:bf:74:98:26:35:01:8f:5a:1a:18:b4:8b:e0:ee:ac:2d:
ed:4e:c4:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:50:17 2025 by rpki-client