Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/PVJo7mBUQRlx-o44YDiEOblQAAE.roa
File: PVJo7mBUQRlx-o44YDiEOblQAAE.roa (raw, json)
Hash identifier: 7+V27PURDvTGyHZ+1tcmUTe6g9lhy4QQbKQU6wsJRP4=
Subject key identifier: 3D:52:68:EE:60:54:41:19:71:FA:8E:38:60:38:84:39:B9:50:00:01
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0196D3F4B24FBE8C91D09F897A79E0D56D66
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/PVJo7mBUQRlx-o44YDiEOblQAAE.roa
Signing time: Thu 15 May 2025 12:39:11 +0000
ROA not before: Thu 15 May 2025 12:39:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51765
IP address blocks: 93.88.205.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 21 May 2025 17:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d3:f4:b2:4f:be:8c:91:d0:9f:89:7a:79:e0:d5:6d:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: May 15 12:39:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3d5268ee6054411971fa8e3860388439b9500001
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:41:5b:3e:d6:03:08:8e:59:a8:2b:5d:c2:9d:
c1:32:dc:6a:46:ce:75:cc:44:34:82:e0:fd:82:78:
30:0d:22:30:04:e6:a2:fc:bc:bc:e5:87:2e:3b:52:
4e:b2:05:7a:05:5e:7d:2b:b9:71:ea:d4:ac:9e:b9:
87:35:7c:fc:91:65:57:75:e7:33:80:5b:e1:51:36:
96:2b:83:c3:9d:c4:af:df:2b:74:bf:23:a4:05:77:
18:0e:8f:2e:af:27:19:15:d4:21:18:58:96:83:11:
23:c2:27:06:87:51:72:94:79:32:a5:37:e6:d6:46:
09:83:14:15:80:6b:96:1d:55:42:8d:79:8f:de:1d:
03:d4:67:8c:95:ca:75:51:26:4d:94:df:86:df:18:
4d:72:40:b3:3b:b8:d9:96:73:5a:b5:68:63:44:99:
e3:fb:3b:58:1d:b3:88:d9:85:ba:2b:b3:fc:ea:0c:
57:da:66:29:9f:c2:76:fb:be:b8:08:7c:b8:d8:05:
53:57:e9:e4:94:6f:91:f2:4c:d4:79:e5:ca:0a:54:
6c:14:22:fe:dc:80:26:c3:8c:0d:ec:84:4e:a6:1e:
83:e9:4b:50:73:e0:5e:77:2e:80:22:0e:f5:18:52:
c4:a3:78:49:7c:f2:b5:dd:59:b5:f5:60:ca:c1:b5:
14:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:52:68:EE:60:54:41:19:71:FA:8E:38:60:38:84:39:B9:50:00:01
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/PVJo7mBUQRlx-o44YDiEOblQAAE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.88.205.0/24
Signature Algorithm: sha256WithRSAEncryption
68:30:1a:1d:bb:be:d1:bd:44:8e:b3:59:93:c4:52:df:34:02:
d6:cf:af:c9:1e:62:6d:d1:da:ed:e3:db:2c:28:08:69:e8:90:
58:6e:78:1b:d7:3f:dc:84:de:d5:1b:01:3d:6f:21:7d:c4:ab:
f0:b8:e7:f0:3b:6e:eb:9a:48:04:07:53:48:9d:35:6c:36:74:
bf:bb:af:98:b6:af:56:55:db:fe:e9:77:f9:c3:c9:6e:18:28:
9f:f0:3b:ee:fe:67:22:21:67:d0:78:bd:2b:86:51:69:b4:4e:
b7:f8:a7:32:c5:68:2f:51:16:57:b4:32:82:fb:99:57:0e:60:
93:59:7d:ce:86:74:21:17:03:03:b8:68:48:7e:01:b5:24:df:
94:4d:de:98:63:63:22:02:0c:03:df:fb:95:f0:93:0d:fc:82:
63:bd:36:c1:a8:f9:38:3f:78:fa:c4:c4:f9:31:7f:bb:56:09:
da:15:ae:d2:79:f3:ad:9c:b6:b7:c7:10:a4:39:23:4e:bf:2c:
3f:88:c7:1d:3b:85:9c:cd:76:1e:28:94:35:ad:c2:b3:b4:cf:
97:ea:88:7f:46:3f:d6:f5:b0:69:2f:3d:e3:ce:8d:6f:95:be:
78:14:1c:11:97:22:96:f7:b3:ca:d2:ab:1b:68:72:fe:b5:0f:
eb:11:1d:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 22:10:44 2025 by rpki-client