Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/f10e0e-16ca-48b0-abdc-c14f6ba25cb0/1/lnwaLzWWa5ViHFLZAxPlOTScH30.roa
File: lnwaLzWWa5ViHFLZAxPlOTScH30.roa (raw, json)
Hash identifier: y6/OTPlQpnpVyldc5nj03ZdvWsxu5Cg3qcI3o6cOA4M=
Subject key identifier: 96:7C:1A:2F:35:96:6B:95:62:1C:52:D9:03:13:E5:39:34:9C:1F:7D
Certificate issuer: /CN=26425863c309f2655b884c1600394c4338e7fb41
Certificate serial: 019426D9F76B61C4AAE621E23AFA4827B7DE
Authority key identifier: 26:42:58:63:C3:09:F2:65:5B:88:4C:16:00:39:4C:43:38:E7:FB:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JkJYY8MJ8mVbiEwWADlMQzjn-0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/f10e0e-16ca-48b0-abdc-c14f6ba25cb0/1/lnwaLzWWa5ViHFLZAxPlOTScH30.roa
Signing time: Thu 02 Jan 2025 11:50:06 +0000
ROA not before: Thu 02 Jan 2025 11:50:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210511
IP address blocks: 109.107.154.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 11 Apr 2025 13:39:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:f7:6b:61:c4:aa:e6:21:e2:3a:fa:48:27:b7:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26425863c309f2655b884c1600394c4338e7fb41
Validity
Not Before: Jan 2 11:50:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=967c1a2f35966b95621c52d90313e539349c1f7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:82:12:3e:d7:bf:64:59:dd:b3:53:69:5b:54:
58:45:2f:19:15:6f:3a:28:6a:04:8b:c7:b3:d4:cc:
63:34:c3:fc:a5:5b:28:b2:63:dc:ce:01:dc:04:28:
22:21:44:76:4a:62:81:68:10:a4:86:68:6e:c9:eb:
6d:70:38:5f:ab:0b:f9:3c:f2:e1:99:79:6f:69:ef:
18:f2:a9:8e:60:de:e4:ab:ad:69:00:df:d2:8e:57:
ca:cc:bb:f2:1a:48:a2:3b:e5:fd:30:37:47:3b:a7:
e5:81:a0:f1:43:b3:6e:ef:29:f6:ef:77:63:a8:13:
38:b4:60:1a:41:c0:a1:3d:22:58:76:f0:e9:ef:44:
59:12:ff:5a:b2:7c:5e:f2:bc:6e:40:1f:57:1a:14:
41:81:96:b1:b2:e6:33:2e:6d:dd:d8:52:ea:8a:e3:
06:31:7d:db:17:2d:9e:92:4d:5d:cb:86:48:eb:09:
82:83:7d:46:c3:d5:48:f5:99:c9:8a:35:ff:60:58:
b1:ec:84:d0:cf:55:aa:62:08:55:2d:15:e5:2e:1a:
99:b7:6b:cf:ec:92:19:60:c9:bb:7c:dd:10:04:e5:
51:b7:12:c1:3e:21:c3:e1:97:6d:e9:58:8c:2d:6a:
ef:7f:09:59:cc:dd:83:21:4e:30:c2:c1:1e:1f:ca:
3c:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:7C:1A:2F:35:96:6B:95:62:1C:52:D9:03:13:E5:39:34:9C:1F:7D
X509v3 Authority Key Identifier:
keyid:26:42:58:63:C3:09:F2:65:5B:88:4C:16:00:39:4C:43:38:E7:FB:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JkJYY8MJ8mVbiEwWADlMQzjn-0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/f10e0e-16ca-48b0-abdc-c14f6ba25cb0/1/lnwaLzWWa5ViHFLZAxPlOTScH30.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/f10e0e-16ca-48b0-abdc-c14f6ba25cb0/1/JkJYY8MJ8mVbiEwWADlMQzjn-0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.107.154.0/24
Signature Algorithm: sha256WithRSAEncryption
13:25:b3:e2:b2:31:dc:a8:3b:a7:c4:52:88:46:ed:60:41:87:
73:ed:d6:5b:7c:3c:a7:56:9e:c9:57:25:85:9c:52:a2:ba:aa:
1c:b8:3e:05:2b:cc:d2:cf:8a:96:b6:60:fc:49:02:9c:01:d6:
0f:6d:4e:16:ab:9d:ea:6b:48:9b:3b:d5:bc:84:61:d4:89:e0:
6b:75:22:28:9a:ae:b0:48:cd:e2:da:bb:ba:6a:ad:d2:bf:b9:
c5:be:12:10:97:9d:98:33:74:86:d0:1e:75:6b:6a:22:8b:3f:
c8:5b:20:0b:ea:e9:d7:35:f6:e3:49:46:25:3d:89:60:38:90:
af:6a:4b:fb:a0:c7:85:82:74:22:a4:ed:c4:5b:42:4f:71:53:
5e:be:c1:0c:34:36:9c:29:a5:bc:f2:cc:7e:8a:1a:b8:a3:ad:
ad:ff:fa:23:5e:a7:b4:93:ef:14:9f:5e:c6:45:3c:0a:0a:dc:
d9:36:fa:66:e3:d7:cf:55:38:48:12:b6:44:cd:cb:d8:af:21:
c4:0c:6c:a4:1f:55:69:12:33:c6:bb:b8:ca:eb:3e:6e:c6:54:
33:83:9f:da:db:c6:73:8e:53:8d:a9:d6:40:69:05:c3:a6:0b:
b3:4e:11:c9:63:52:cd:ff:a4:b3:8f:9e:19:b5:93:97:8e:9d:
80:a2:e9:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 19:26:27 2025 by rpki-client