Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/PZPG1Sxn_lC5PvTjtjMKQ8ehnmo.roa
File: PZPG1Sxn_lC5PvTjtjMKQ8ehnmo.roa (raw, json)
Hash identifier: +pbYxBr1zOcHXPhY3NiOvzPpe7fB1XIJp25N9lPz/4o=
Subject key identifier: 3D:93:C6:D5:2C:67:FE:50:B9:3E:F4:E3:B6:33:0A:43:C7:A1:9E:6A
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0196210845FB1E96692DFB22E7767CAC181D
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/PZPG1Sxn_lC5PvTjtjMKQ8ehnmo.roa
Signing time: Thu 10 Apr 2025 18:48:32 +0000
ROA not before: Thu 10 Apr 2025 18:48:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 138195
IP address blocks: 151.243.143.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 13 Apr 2025 04:16:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:21:08:45:fb:1e:96:69:2d:fb:22:e7:76:7c:ac:18:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Apr 10 18:48:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3d93c6d52c67fe50b93ef4e3b6330a43c7a19e6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:3e:f2:a5:45:94:2c:54:84:76:0b:64:7e:06:
1d:af:7f:96:88:59:db:ad:fd:90:67:e0:ff:c0:f6:
d4:1b:d0:57:90:54:33:bb:c2:94:c1:8e:61:c3:85:
42:5c:2e:35:fe:64:68:76:07:84:6d:38:ef:3a:92:
a5:85:33:1c:ea:5c:d4:fd:72:4f:f2:97:6d:fc:f6:
ae:23:28:ad:a8:32:5f:bf:0d:b3:40:52:ff:5e:56:
02:6f:32:c9:b7:ac:dd:bb:20:c0:8b:a8:9f:e6:07:
30:dd:b4:30:9d:a7:12:22:df:53:03:bd:5e:40:8c:
b0:b9:2e:0f:4d:66:0b:e4:22:b4:f4:0f:d7:d9:f9:
26:b8:39:1a:94:44:e0:8c:ef:77:d1:db:d2:fe:56:
98:cd:e3:ab:1c:f8:ac:ff:ee:57:d6:02:74:db:b1:
2f:1d:3e:e6:01:56:ad:6a:55:8c:28:07:b3:69:42:
08:2c:80:1c:d1:e1:e7:ff:5d:a4:0f:4e:25:75:2a:
d8:3f:ff:9d:dc:a6:f9:3e:29:14:af:b9:90:fc:1f:
e1:cc:80:0a:9b:22:b7:33:ba:15:bc:d1:ae:b8:78:
96:c0:a1:ad:c2:10:39:9d:b2:1d:c7:6f:af:cc:a0:
2c:be:fd:29:d7:3f:3a:a8:52:d6:d7:60:80:16:c6:
bc:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:93:C6:D5:2C:67:FE:50:B9:3E:F4:E3:B6:33:0A:43:C7:A1:9E:6A
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/PZPG1Sxn_lC5PvTjtjMKQ8ehnmo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.243.143.0/24
Signature Algorithm: sha256WithRSAEncryption
00:58:d1:70:72:ae:97:e2:6c:af:4c:1c:98:6f:03:b6:03:07:
bf:db:62:ea:23:33:fb:f9:4c:b8:88:e6:a7:ef:86:f2:5e:88:
e8:17:a2:2e:27:bc:3f:aa:a7:2b:ba:ff:ba:d8:02:c4:2f:8c:
f2:50:c8:cc:1a:fd:9e:1a:75:ab:83:f2:ef:9f:a0:ae:10:e9:
0f:6b:68:e9:de:3f:b6:04:60:bb:1c:0f:42:05:90:24:17:2d:
08:bf:c7:a2:a0:92:92:87:8c:51:46:29:e7:a9:0a:da:79:33:
e6:2e:32:16:b2:94:76:07:9e:95:61:69:49:b2:db:df:a8:b5:
8a:43:cb:c4:ed:0e:11:15:6c:06:32:4f:20:78:c2:fe:90:e6:
d1:a4:a2:7b:9f:79:2a:72:28:61:80:74:2a:66:50:72:ad:9f:
9e:e5:ba:cd:f1:1c:1f:c4:eb:1b:b2:a0:51:ea:43:c2:e3:7c:
ff:09:be:6b:a5:47:57:b4:31:64:70:a2:60:51:33:37:0b:3d:
08:3a:8d:67:e5:07:16:84:9c:a1:79:ee:24:4c:7a:46:70:e9:
73:51:0b:af:4f:47:e9:df:2f:fe:5c:9c:04:75:74:4f:12:9c:
69:48:3b:f5:9f:e0:d3:0d:90:47:96:bc:38:f0:d5:ee:bf:9c:
28:60:73:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 21:12:17 2025 by rpki-client