Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PLXbn-HPAYeK9TxvGGVscxMH57w.roa
File: PLXbn-HPAYeK9TxvGGVscxMH57w.roa (raw, json)
Hash identifier: KH9KXxuZSjI+QEjhfM9bpeAZUXJQiGhQTSFOS7N917A=
Subject key identifier: 3C:B5:DB:9F:E1:CF:01:87:8A:F5:3C:6F:18:65:6C:73:13:07:E7:BC
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019611823C971373E7453122AB73C64ECC20
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PLXbn-HPAYeK9TxvGGVscxMH57w.roa
Signing time: Mon 07 Apr 2025 18:27:49 +0000
ROA not before: Mon 07 Apr 2025 18:27:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12586
IP address blocks: 5.83.128.0/19 maxlen: 32
5.83.128.0/20 maxlen: 32
5.83.136.0/24 maxlen: 24
5.83.151.0/24 maxlen: 32
5.83.156.0/24 maxlen: 24
5.83.157.0/24 maxlen: 24
5.175.128.0/24 maxlen: 32
5.175.129.0/24 maxlen: 32
5.175.130.0/24 maxlen: 32
5.175.131.0/24 maxlen: 32
5.175.133.0/24 maxlen: 32
5.175.143.0/24 maxlen: 24
5.175.218.0/24 maxlen: 32
5.175.219.0/24 maxlen: 32
5.175.225.0/24 maxlen: 32
5.175.226.0/24 maxlen: 32
5.175.227.0/24 maxlen: 32
5.175.228.0/24 maxlen: 32
5.175.229.0/24 maxlen: 32
5.175.230.0/24 maxlen: 32
5.175.231.0/24 maxlen: 32
5.175.232.0/24 maxlen: 32
5.175.235.0/24 maxlen: 32
5.175.237.0/24 maxlen: 24
5.175.239.0/24 maxlen: 24
5.175.240.0/24 maxlen: 32
5.175.241.0/24 maxlen: 32
5.175.242.0/24 maxlen: 32
5.175.243.0/24 maxlen: 32
5.175.244.0/24 maxlen: 32
5.175.251.0/24 maxlen: 32
5.175.252.0/24 maxlen: 32
5.175.253.0/24 maxlen: 32
5.175.254.0/24 maxlen: 32
5.175.255.0/24 maxlen: 32
5.230.0.0/15 maxlen: 32
5.230.6.0/24 maxlen: 32
5.230.11.0/24 maxlen: 32
5.230.102.0/24 maxlen: 32
5.230.224.0/24 maxlen: 32
5.231.24.0/24 maxlen: 24
5.231.104.0/24 maxlen: 24
5.231.232.0/24 maxlen: 24
77.90.0.0/18 maxlen: 32
77.90.18.0/24 maxlen: 24
77.90.21.0/24 maxlen: 24
77.90.38.0/24 maxlen: 24
83.243.80.0/21 maxlen: 32
85.93.0.0/19 maxlen: 32
85.93.12.0/24 maxlen: 24
85.93.15.0/24 maxlen: 24
85.93.20.0/24 maxlen: 32
85.118.160.0/21 maxlen: 32
85.118.162.0/24 maxlen: 24
87.239.128.0/21 maxlen: 32
87.239.130.0/24 maxlen: 24
89.106.64.0/19 maxlen: 32
89.106.92.0/24 maxlen: 24
89.106.93.0/24 maxlen: 24
89.106.94.0/24 maxlen: 24
89.106.95.0/24 maxlen: 24
89.144.0.0/18 maxlen: 32
89.144.21.0/24 maxlen: 24
89.144.22.0/24 maxlen: 24
89.144.38.0/24 maxlen: 24
89.144.60.0/24 maxlen: 24
94.103.160.0/20 maxlen: 32
94.103.163.0/24 maxlen: 24
94.103.164.0/24 maxlen: 24
94.103.166.0/24 maxlen: 24
94.249.128.0/17 maxlen: 32
94.249.153.0/24 maxlen: 24
94.249.158.0/24 maxlen: 24
94.249.212.0/24 maxlen: 24
94.249.214.0/24 maxlen: 24
95.215.32.0/22 maxlen: 32
178.18.144.0/20 maxlen: 32
178.18.151.0/24 maxlen: 32
185.13.156.0/22 maxlen: 32
185.13.159.0/24 maxlen: 24
185.47.140.0/24 maxlen: 32
185.47.141.0/24 maxlen: 32
185.47.143.0/24 maxlen: 24
185.121.69.0/24 maxlen: 24
185.121.71.0/24 maxlen: 32
193.28.251.0/24 maxlen: 32
195.110.14.0/23 maxlen: 32
217.69.160.0/20 maxlen: 32
217.69.167.0/24 maxlen: 24
217.69.170.0/24 maxlen: 24
2a00:12d8::/29 maxlen: 128
2a00:19d0::/29 maxlen: 128
2a00:cdc0::/32 maxlen: 128
2a01:bd40::/29 maxlen: 128
2a02:7a0::/29 maxlen: 128
2a02:2fc0::/29 maxlen: 128
2a02:2fc0::/48 maxlen: 48
2a02:2fc0:1::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 07 Apr 2025 20:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:11:82:3c:97:13:73:e7:45:31:22:ab:73:c6:4e:cc:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Apr 7 18:27:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3cb5db9fe1cf01878af53c6f18656c731307e7bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:50:65:32:44:c7:ce:c8:7b:ad:ed:cb:8f:30:
4e:a7:4a:dd:9e:dc:31:5f:dd:28:4b:24:e9:3b:5f:
ef:dc:61:1b:fd:08:74:b2:61:a1:c6:0a:d6:ef:bb:
da:ab:cc:13:74:e2:37:b6:3c:af:dd:6d:ac:70:a9:
77:a2:41:86:79:38:4d:a4:3d:b0:b6:95:5a:45:09:
4e:a7:bb:85:5e:de:fd:d5:cf:41:63:df:87:18:ef:
b0:99:95:5f:d7:c0:6e:26:55:f7:bd:2b:f1:cb:71:
bf:a7:b8:72:44:02:90:c8:06:22:98:dd:b5:18:8d:
9d:c5:9b:84:0b:1c:39:98:d5:7e:e0:be:7a:eb:eb:
64:43:8b:26:52:81:1f:ac:3a:ec:cc:9a:67:b3:7d:
b9:60:75:c1:fd:09:6a:cb:3c:d9:ed:84:20:89:3d:
6d:97:ab:9e:65:10:7f:56:5e:e1:da:26:21:1f:de:
2f:fe:75:15:5d:9c:c1:9e:2d:3c:b0:21:16:2a:c4:
f2:df:7a:17:2f:df:ee:d3:1c:66:9e:ff:45:3f:19:
31:58:a9:dd:a2:80:2e:bb:0b:f1:bf:1b:d9:d1:d0:
a5:7a:24:3b:cd:93:0f:25:aa:cb:5f:75:a0:9c:be:
65:34:03:1e:33:88:21:20:db:ca:4e:65:f9:50:37:
fe:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:B5:DB:9F:E1:CF:01:87:8A:F5:3C:6F:18:65:6C:73:13:07:E7:BC
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PLXbn-HPAYeK9TxvGGVscxMH57w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.128.0/19
5.175.128.0/22
5.175.133.0/24
5.175.143.0/24
5.175.218.0/23
5.175.225.0-5.175.232.255
5.175.235.0/24
5.175.237.0/24
5.175.239.0-5.175.244.255
5.175.251.0-5.175.255.255
5.230.0.0/15
77.90.0.0/18
83.243.80.0/21
85.93.0.0/19
85.118.160.0/21
87.239.128.0/21
89.106.64.0/19
89.144.0.0/18
94.103.160.0/20
94.249.128.0/17
95.215.32.0/22
178.18.144.0/20
185.13.156.0/22
185.47.140.0/23
185.47.143.0/24
185.121.69.0/24
185.121.71.0/24
193.28.251.0/24
195.110.14.0/23
217.69.160.0/20
IPv6:
2a00:12d8::/29
2a00:19d0::/29
2a00:cdc0::/32
2a01:bd40::/29
2a02:7a0::/29
2a02:2fc0::/29
Signature Algorithm: sha256WithRSAEncryption
ab:00:e0:e4:65:ea:b7:53:cf:a8:fe:79:17:31:23:51:5f:33:
b7:78:c7:f3:08:5d:8e:d8:17:64:04:20:87:4d:1a:fd:24:21:
84:99:75:6b:e3:8b:2c:6b:70:b2:95:92:67:8d:d1:4b:5e:e4:
a1:13:d8:b2:f0:89:83:4d:8a:4a:02:a1:30:db:23:9e:09:0c:
88:05:b6:ab:86:ac:2b:c0:51:78:e7:75:a3:b6:e4:0f:65:b2:
84:0a:1f:fe:ce:d3:9d:2b:03:fa:66:7d:ea:69:33:a3:b6:ff:
57:5b:7d:25:c9:3e:4a:27:73:02:94:08:b9:4d:21:02:92:a6:
05:51:a9:a0:62:1a:b6:0a:c5:16:22:1f:ee:f7:4d:4d:2e:a7:
cb:cd:7b:2b:98:78:a9:03:45:23:4a:a2:3f:60:2c:4e:01:b1:
c1:4e:23:e2:11:ba:7b:2c:bd:33:18:cf:81:3f:61:95:53:83:
f3:53:60:dc:35:8a:0a:8b:ae:ad:7e:32:51:b5:33:62:67:3d:
05:75:8e:46:f0:a5:5b:3a:99:b1:8b:ec:9f:54:6d:5d:98:f3:
16:4e:39:fc:d8:bc:08:34:8a:67:eb:2f:9e:db:9d:47:31:43:
36:2e:11:40:2f:5c:52:3e:54:17:2f:88:fa:66:2b:6d:61:43:
93:99:7f:34
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Jun 16 14:56:03 2025 by rpki-client