Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/LWaJzV-QncKnak9ackRY4rFbruQ.roa
File: LWaJzV-QncKnak9ackRY4rFbruQ.roa (raw, json)
Hash identifier: 047gVwcbyb1MDcRN+sun6ZvMTAzeLmhV1ZKPZVcBvXg=
Subject key identifier: 2D:66:89:CD:5F:90:9D:C2:A7:6A:4F:5A:72:44:58:E2:B1:5B:AE:E4
Certificate issuer: /CN=adf491488a7cd8448a420945871c0b99672dc66e
Certificate serial: 019421B1EFD7989B4F6E0DC2A1AEEB934ADA
Authority key identifier: AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/LWaJzV-QncKnak9ackRY4rFbruQ.roa
Signing time: Wed 01 Jan 2025 11:48:16 +0000
ROA not before: Wed 01 Jan 2025 11:48:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56486
IP address blocks: 151.247.242.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 12 Jan 2025 10:45:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:ef:d7:98:9b:4f:6e:0d:c2:a1:ae:eb:93:4a:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adf491488a7cd8448a420945871c0b99672dc66e
Validity
Not Before: Jan 1 11:48:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2d6689cd5f909dc2a76a4f5a724458e2b15baee4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:5e:8e:63:6b:c6:51:12:dd:2e:95:aa:18:4f:
c1:36:66:e5:7b:03:13:ef:28:92:8d:ec:39:da:d4:
1c:09:eb:7d:dd:14:05:88:b8:70:6d:4d:48:c5:d3:
7e:c1:d0:f2:62:7f:95:c6:1a:11:a8:5c:d2:e9:dc:
95:f9:4a:b1:e4:cd:bf:60:9a:41:a3:a8:ec:68:01:
57:6a:ec:7a:dc:bd:70:f2:a1:77:bc:ff:70:7c:77:
76:5d:1e:04:55:58:02:01:cd:e5:b3:ff:bc:2b:cd:
bb:3b:b7:c3:29:65:3d:60:66:0d:b9:7f:15:97:4b:
1e:e9:22:3e:0f:f4:1b:0d:ce:49:9a:f9:6c:fa:a6:
df:32:6c:82:de:60:32:a7:ec:50:5e:c3:c5:4c:8f:
41:5a:23:ff:52:cb:2b:ce:8e:0f:65:2e:08:63:75:
89:ab:92:27:8e:a6:b5:aa:cf:15:e0:36:3b:d4:e5:
9c:ee:a2:0c:6c:bf:4f:47:5a:a3:f7:c5:8d:9b:3f:
a6:ae:04:75:a2:f1:6f:21:ee:a0:ee:02:ca:5a:84:
95:25:ce:d7:d9:a2:9d:08:cd:3c:21:4a:ce:30:cc:
7d:a5:2f:8e:47:24:a2:6d:d5:4e:a3:31:c2:35:c4:
d5:0c:db:17:ac:2e:c5:32:94:38:e0:2b:14:9a:ca:
a2:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:66:89:CD:5F:90:9D:C2:A7:6A:4F:5A:72:44:58:E2:B1:5B:AE:E4
X509v3 Authority Key Identifier:
keyid:AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/LWaJzV-QncKnak9ackRY4rFbruQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.247.242.0/24
Signature Algorithm: sha256WithRSAEncryption
74:6e:50:b4:cc:23:2a:a6:83:78:91:6d:b3:fa:68:52:57:12:
04:4a:45:f1:3f:1e:d7:95:e4:b5:a1:d3:c1:b9:49:c9:74:fb:
3f:70:aa:74:d8:1a:3e:10:c1:0b:83:c2:5c:71:0b:a1:05:27:
07:11:3a:b2:86:34:ab:e5:d5:6e:37:bb:14:1d:39:c9:e7:9b:
fc:85:e8:bf:d6:5a:37:84:98:31:17:53:09:9e:01:26:1b:fc:
7d:43:50:6c:a4:5b:7c:79:4f:39:d8:90:f8:84:45:0e:0f:f7:
47:55:a2:63:c6:f6:59:ec:9f:ee:89:69:7f:cc:49:e5:6e:ba:
b7:63:f1:e7:b7:f1:6d:23:1e:7c:b8:01:cd:1d:4c:42:f5:14:
8f:3f:e6:4f:96:6f:0e:1c:cf:ea:c4:c9:1c:be:12:c7:aa:7c:
b9:2c:40:af:9d:7e:34:cf:a4:77:a7:ab:29:df:62:07:ea:f8:
06:85:38:0e:0b:a5:89:c9:c1:19:eb:eb:1b:f4:95:5c:33:52:
fa:b7:58:59:c3:cb:cc:c8:16:bd:e6:26:ce:75:7f:19:4c:47:
91:04:01:4f:1d:66:60:2e:c1:53:a0:fd:76:78:65:c1:42:e8:
dc:34:49:f8:e5:d6:63:34:e3:d0:b0:ad:60:d1:80:b2:9f:42:
f4:a4:40:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 19:23:45 2025 by rpki-client