Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/uAXDpl2VoYl5idFRPKuv2GSnZJM.roa
File: uAXDpl2VoYl5idFRPKuv2GSnZJM.roa (raw, json)
Hash identifier: CDLwfuyVKwwm9YVLVmL9iV3pqAVn5wuPt0A2UfJm6K4=
Subject key identifier: B8:05:C3:A6:5D:95:A1:89:79:89:D1:51:3C:AB:AF:D8:64:A7:64:93
Certificate issuer: /CN=b914166b685ac015b94126cdb8b18c83a12ed862
Certificate serial: 019715D9F4C73E30ABFE460746B091EC0961
Authority key identifier: B9:14:16:6B:68:5A:C0:15:B9:41:26:CD:B8:B1:8C:83:A1:2E:D8:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRQWa2hawBW5QSbNuLGMg6Eu2GI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/uAXDpl2VoYl5idFRPKuv2GSnZJM.roa
Signing time: Wed 28 May 2025 07:44:54 +0000
ROA not before: Wed 28 May 2025 07:44:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47583
IP address blocks: 31.97.0.0/23 maxlen: 24
31.97.8.0/21 maxlen: 24
31.97.16.0/20 maxlen: 24
31.97.32.0/21 maxlen: 24
31.97.40.0/22 maxlen: 24
31.97.44.0/22 maxlen: 24
31.97.48.0/22 maxlen: 24
31.97.52.0/22 maxlen: 24
31.97.56.0/22 maxlen: 24
31.97.60.0/22 maxlen: 24
31.97.64.0/24 maxlen: 24
31.97.65.0/24 maxlen: 24
31.97.66.0/23 maxlen: 24
31.97.68.0/23 maxlen: 24
31.97.70.0/23 maxlen: 24
31.97.128.0/20 maxlen: 24
31.97.144.0/22 maxlen: 24
31.97.148.0/23 maxlen: 24
31.97.150.0/24 maxlen: 24
31.97.151.0/24 maxlen: 24
31.97.152.0/21 maxlen: 24
31.97.160.0/20 maxlen: 24
31.97.176.0/23 maxlen: 24
31.97.178.0/24 maxlen: 24
31.97.179.0/24 maxlen: 24
31.97.180.0/22 maxlen: 24
31.97.184.0/23 maxlen: 24
31.97.186.0/24 maxlen: 24
31.97.187.0/24 maxlen: 24
31.97.188.0/22 maxlen: 24
69.62.64.0/23 maxlen: 24
69.62.66.0/23 maxlen: 24
69.62.68.0/22 maxlen: 24
69.62.72.0/21 maxlen: 24
69.62.80.0/22 maxlen: 24
69.62.84.0/23 maxlen: 24
69.62.86.0/23 maxlen: 24
69.62.88.0/21 maxlen: 24
69.62.96.0/21 maxlen: 24
69.62.104.0/24 maxlen: 24
69.62.105.0/24 maxlen: 24
69.62.106.0/23 maxlen: 24
69.62.108.0/22 maxlen: 24
69.62.112.0/22 maxlen: 24
69.62.116.0/22 maxlen: 24
69.62.120.0/23 maxlen: 24
69.62.122.0/24 maxlen: 24
69.62.123.0/24 maxlen: 24
69.62.124.0/24 maxlen: 24
69.62.125.0/24 maxlen: 24
69.62.126.0/23 maxlen: 24
103.199.184.0/22 maxlen: 24
148.222.52.0/24 maxlen: 24
148.222.53.0/24 maxlen: 24
148.222.54.0/24 maxlen: 24
148.222.55.0/24 maxlen: 24
168.231.64.0/21 maxlen: 24
168.231.72.0/22 maxlen: 24
168.231.76.0/23 maxlen: 24
168.231.78.0/23 maxlen: 24
168.231.80.0/21 maxlen: 24
168.231.88.0/21 maxlen: 24
168.231.96.0/22 maxlen: 24
168.231.100.0/24 maxlen: 24
168.231.101.0/24 maxlen: 24
168.231.102.0/23 maxlen: 24
168.231.104.0/21 maxlen: 24
168.231.112.0/22 maxlen: 24
168.231.116.0/24 maxlen: 24
168.231.117.0/24 maxlen: 24
168.231.118.0/23 maxlen: 24
168.231.120.0/22 maxlen: 24
168.231.124.0/22 maxlen: 24
194.164.148.0/22 maxlen: 24
Validation: Failed, certificate revoked on Thu 29 May 2025 06:17:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:15:d9:f4:c7:3e:30:ab:fe:46:07:46:b0:91:ec:09:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b914166b685ac015b94126cdb8b18c83a12ed862
Validity
Not Before: May 28 07:44:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b805c3a65d95a1897989d1513cabafd864a76493
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:95:e2:58:e2:7b:32:1f:34:ef:92:bd:87:ff:
58:22:30:4f:3c:70:09:21:21:6d:ff:7b:1b:00:82:
3d:34:80:1e:81:f6:48:07:96:91:a4:40:b3:f2:e7:
4a:90:1e:84:c5:08:02:00:22:43:49:68:5d:2e:87:
46:74:c8:0a:0a:74:c2:5a:f3:64:b4:f8:f3:14:59:
33:78:98:4d:c8:23:71:f5:f9:be:da:7f:16:00:08:
94:ba:ad:4a:f1:29:88:98:f6:b2:7f:e6:34:fe:74:
78:a8:21:9c:1e:df:af:23:52:7f:a9:12:3e:e6:97:
39:46:65:a8:5b:67:72:10:15:38:1e:8f:32:b9:41:
81:d7:35:8c:ca:d5:9a:0f:1b:7b:15:7c:15:af:ee:
d6:f1:f7:db:12:b7:d1:4b:f6:f6:7f:b0:7d:93:6a:
d3:50:98:86:28:14:71:6f:51:70:06:87:7d:f8:b2:
c8:ee:48:d2:c2:7c:76:55:99:fe:aa:8c:93:14:54:
8d:a1:e1:62:f1:b0:eb:21:39:5f:6a:fa:d2:15:b3:
e8:3c:98:8e:34:43:83:de:e7:fe:a9:af:13:7b:72:
8c:72:19:fb:a6:ae:cb:60:4f:f7:b8:ef:55:a5:15:
b7:e0:81:7c:0c:bf:82:f3:ec:8f:8c:8e:d3:47:2c:
fe:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:05:C3:A6:5D:95:A1:89:79:89:D1:51:3C:AB:AF:D8:64:A7:64:93
X509v3 Authority Key Identifier:
keyid:B9:14:16:6B:68:5A:C0:15:B9:41:26:CD:B8:B1:8C:83:A1:2E:D8:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRQWa2hawBW5QSbNuLGMg6Eu2GI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/uAXDpl2VoYl5idFRPKuv2GSnZJM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/uRQWa2hawBW5QSbNuLGMg6Eu2GI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.97.0.0/23
31.97.8.0-31.97.71.255
31.97.128.0/18
69.62.64.0/18
103.199.184.0/22
148.222.52.0/22
168.231.64.0/18
194.164.148.0/22
Signature Algorithm: sha256WithRSAEncryption
94:4e:82:ba:75:76:39:10:af:85:17:b8:bd:dc:8d:3b:3b:0b:
fa:5b:da:23:33:19:b1:f3:4b:27:ef:8d:d1:cc:a2:5b:9e:16:
41:8c:2d:44:bb:03:12:16:7d:93:c7:02:8b:fe:ff:13:f1:0c:
bc:e4:d7:5f:5e:61:9d:25:df:cd:eb:b5:39:f0:3b:dc:ca:c0:
21:80:c5:f5:5d:ac:aa:b4:43:96:9d:f7:2b:f3:77:de:80:fc:
9c:1a:d5:b2:c5:07:ac:82:eb:45:ff:d7:cc:1b:3c:e5:00:9a:
8d:94:e1:5b:8c:c7:24:33:b3:ac:10:8f:d5:71:bb:7a:09:06:
17:c1:43:c8:8b:4c:81:80:85:e4:21:37:c6:5d:1e:77:1a:09:
8d:26:dd:c2:8e:00:dd:40:06:48:07:eb:9b:9e:c7:d5:58:a0:
88:0d:a7:21:8c:d1:af:fe:de:ad:a5:35:72:20:c5:f8:a7:f0:
09:c6:a9:48:03:97:c7:56:b9:de:28:fe:9d:c6:a6:d7:7a:d1:
b3:f8:1e:3a:bd:a3:cd:f9:b8:c0:da:f6:0f:0d:0b:74:ae:b5:
88:e6:e7:3c:42:78:ba:7d:27:eb:5d:f2:23:b4:97:39:82:11:
51:f1:fa:dc:2e:86:ec:af:8b:89:97:80:95:d9:cc:84:6a:e3:
b9:ba:7b:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:44:38 2025 by rpki-client