Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/3baacc-4201-4951-8354-f85f721fb1b8/1/PlYQquXA-5wT9hsP2yjArRKjmyw.roa
File: PlYQquXA-5wT9hsP2yjArRKjmyw.roa (raw, json)
Hash identifier: A/hOwNIXZgPJzdCrvk2Kvy8reFrYSA5aoMgKvzwVnjo=
Subject key identifier: 3E:56:10:AA:E5:C0:FB:9C:13:F6:1B:0F:DB:28:C0:AD:12:A3:9B:2C
Certificate issuer: /CN=88678ca34c3c6365fb616a66077160a494a6e9d6
Certificate serial: 0196C3688B65DFFD8ACEDC177BFACAF51371
Authority key identifier: 88:67:8C:A3:4C:3C:63:65:FB:61:6A:66:07:71:60:A4:94:A6:E9:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iGeMo0w8Y2X7YWpmB3FgpJSm6dY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/3baacc-4201-4951-8354-f85f721fb1b8/1/PlYQquXA-5wT9hsP2yjArRKjmyw.roa
Signing time: Mon 12 May 2025 07:32:10 +0000
ROA not before: Mon 12 May 2025 07:32:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20921
IP address blocks: 83.231.32.0/23 maxlen: 24
213.143.36.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 12 May 2025 08:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:68:8b:65:df:fd:8a:ce:dc:17:7b:fa:ca:f5:13:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88678ca34c3c6365fb616a66077160a494a6e9d6
Validity
Not Before: May 12 07:32:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3e5610aae5c0fb9c13f61b0fdb28c0ad12a39b2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:8b:ec:8c:01:47:b3:4f:d5:62:39:ba:b5:da:
51:c9:a4:95:16:fc:22:cc:8b:57:c7:99:74:86:85:
c2:69:0c:03:d8:1e:d9:56:0c:c9:ff:f2:21:f1:e4:
bb:cf:49:2e:c8:d5:cd:8d:62:02:64:45:29:4d:8d:
62:60:82:70:70:26:78:3c:f1:66:a3:08:f8:cc:21:
dd:b6:95:8a:95:c3:5b:7f:40:3f:bc:03:25:ac:04:
6b:6e:fb:b6:91:a8:bd:fd:33:16:34:e0:e0:fe:e8:
99:58:18:78:b0:2c:eb:f3:16:09:f6:e6:f6:64:9b:
51:1c:04:ad:28:46:50:95:e4:20:ac:5c:59:1f:ec:
59:06:c3:c2:f9:c3:b6:e2:45:7f:77:94:73:a9:b0:
a8:e8:5b:c0:72:98:76:8d:1f:96:29:dc:af:e3:7a:
f2:9d:73:fa:33:f2:a8:40:58:25:f3:33:bb:ba:c2:
1b:63:16:bd:31:7b:56:9c:38:b7:69:36:2a:ff:10:
a1:46:a9:12:55:bb:39:c6:4b:6c:e4:bc:6f:42:ca:
0e:6b:71:ce:56:dd:83:da:7f:30:51:e4:72:d1:8c:
d5:78:02:59:b2:36:5a:36:94:ef:24:fe:99:3b:73:
63:99:cb:62:a8:14:c5:b3:b1:55:cc:b6:73:16:fb:
af:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:56:10:AA:E5:C0:FB:9C:13:F6:1B:0F:DB:28:C0:AD:12:A3:9B:2C
X509v3 Authority Key Identifier:
keyid:88:67:8C:A3:4C:3C:63:65:FB:61:6A:66:07:71:60:A4:94:A6:E9:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iGeMo0w8Y2X7YWpmB3FgpJSm6dY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/3baacc-4201-4951-8354-f85f721fb1b8/1/PlYQquXA-5wT9hsP2yjArRKjmyw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/3baacc-4201-4951-8354-f85f721fb1b8/1/iGeMo0w8Y2X7YWpmB3FgpJSm6dY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.231.32.0/23
213.143.36.0/22
Signature Algorithm: sha256WithRSAEncryption
b2:31:d0:12:04:9e:a6:85:04:0f:c3:45:e8:0a:82:12:b0:06:
4f:f6:c0:b8:2a:fd:6e:2c:19:3b:cd:98:d0:b0:f4:7c:71:a0:
f9:97:af:8c:9b:8a:32:13:2b:63:69:1b:c5:61:fd:82:49:54:
14:ad:d6:ec:76:a3:63:cb:23:75:07:25:3a:56:26:2b:51:d1:
97:4d:3c:57:27:73:03:c6:8d:d2:de:c8:e7:6f:d0:b0:b4:ae:
0d:fb:72:c8:6a:e0:36:b4:bb:e2:14:44:b7:24:50:a1:4f:de:
4e:18:a0:f0:ac:d6:58:4a:1a:1c:e1:23:0f:3e:aa:33:57:6b:
74:d1:ab:30:95:f7:b8:ea:44:80:16:c9:12:31:1a:bf:2d:d9:
79:4d:a9:82:dd:f0:20:3a:f1:1b:28:7d:b5:91:d1:75:0e:84:
20:de:ff:f1:3c:83:47:ff:7d:94:a0:41:4a:2b:67:a8:5c:b1:
b6:04:b5:02:7e:0a:68:b9:93:55:db:2b:36:be:2a:dd:16:01:
f2:43:0b:c8:66:96:ad:d1:68:a4:b6:63:1d:e2:0a:76:65:39:
f0:40:50:ad:13:38:1f:a9:d7:1b:a4:c6:51:b2:33:a0:2b:4b:
88:5f:63:a3:f1:f2:62:7a:49:c0:33:c7:2f:b9:ac:a1:b5:b8:
a5:b6:bf:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:56:10 2025 by rpki-client