Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/TGDujaLGUxEgKJD0tAV5ELbLEt8.roa
File: TGDujaLGUxEgKJD0tAV5ELbLEt8.roa (raw, json)
Hash identifier: QeBokpmmt9ysCz0XFCgdXIQ7ot9ZjnY/hyFRbPIqCFo=
Subject key identifier: 4C:60:EE:8D:A2:C6:53:11:20:28:90:F4:B4:05:79:10:B6:CB:12:DF
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0194830FEDB04467C5D84AD65D29FBCECBEC
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/TGDujaLGUxEgKJD0tAV5ELbLEt8.roa
Signing time: Mon 20 Jan 2025 09:34:06 +0000
ROA not before: Mon 20 Jan 2025 09:34:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197992
IP address blocks: 2a05:b300::/29 maxlen: 29
2a06:dfc0::/29 maxlen: 29
2a07:95c0::/29 maxlen: 29
2a07:a300::/29 maxlen: 29
2a0d:1140::/29 maxlen: 29
2a0d:a9c0::/29 maxlen: 29
2a0f:16c0::/29 maxlen: 29
2a0f:1740::/29 maxlen: 29
2a0f:19c0::/29 maxlen: 29
2a0f:1a40::/29 maxlen: 29
2a0f:1ac0::/29 maxlen: 29
2a0f:27c0::/29 maxlen: 29
2a0f:2e40::/29 maxlen: 29
2a0f:3740::/29 maxlen: 29
2a0f:7280::/29 maxlen: 29
2a0f:9600::/29 maxlen: 29
2a0f:ec00::/29 maxlen: 29
2a10:3040::/29 maxlen: 29
2a10:30c0::/29 maxlen: 29
2a10:33c0::/29 maxlen: 29
2a10:3640::/29 maxlen: 29
2a10:3840::/29 maxlen: 29
2a10:5c00::/29 maxlen: 29
2a10:6300::/29 maxlen: 29
2a10:6400::/29 maxlen: 29
2a10:6900::/29 maxlen: 29
2a10:7700::/29 maxlen: 29
2a10:7b00::/29 maxlen: 29
2a11:1200::/29 maxlen: 29
2a11:1880::/29 maxlen: 29
2a11:5c80::/29 maxlen: 29
2a11:8700::/29 maxlen: 29
2a11:89c0::/29 maxlen: 29
2a11:9340::/29 maxlen: 29
2a11:9e00::/29 maxlen: 29
2a11:b200::/29 maxlen: 29
2a11:b740::/29 maxlen: 29
2a11:e580::/29 maxlen: 29
2a11:efc0::/29 maxlen: 29
2a11:f040::/29 maxlen: 29
2a12:ba00::/29 maxlen: 29
2a12:cd00::/29 maxlen: 29
2a12:dc00::/29 maxlen: 29
2a13:200::/29 maxlen: 29
2a13:cc0::/29 maxlen: 29
2a13:2f40::/29 maxlen: 29
2a13:4f00::/29 maxlen: 29
2a13:9100::/29 maxlen: 29
2a13:9b00::/29 maxlen: 29
2a13:9d00::/29 maxlen: 29
2a13:c700::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 20 Jan 2025 15:40:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:83:0f:ed:b0:44:67:c5:d8:4a:d6:5d:29:fb:ce:cb:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jan 20 09:34:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4c60ee8da2c65311202890f4b4057910b6cb12df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:12:7c:fb:67:72:11:25:54:55:03:ae:f2:6c:
40:57:fa:cf:60:b4:19:72:83:82:2b:07:4b:fc:00:
74:90:20:a5:f3:82:ce:04:67:4e:a0:cf:9e:a3:8b:
47:6c:d8:5e:bd:2b:d1:71:a3:58:70:38:20:27:e5:
a0:24:af:a6:b7:19:c1:fc:ef:8e:3e:32:3e:1b:a0:
ef:ff:db:31:3d:c0:35:2d:07:84:44:b9:a2:d5:93:
a3:41:59:49:d6:c8:07:e7:1c:83:d1:ef:e7:75:b0:
4a:91:ab:43:cf:9f:3a:47:2c:b1:5d:e0:09:fb:f2:
86:c4:d0:4e:50:ed:cc:2b:ac:72:74:74:1b:58:58:
e3:10:16:f1:2c:69:d7:3c:b5:ed:47:8f:69:8f:b0:
08:8c:96:70:37:9c:a0:ea:0b:d9:18:54:6c:64:89:
d2:92:d6:32:fc:7a:d2:05:04:0e:bc:64:e4:32:ba:
b4:ed:a3:19:a5:7d:ab:97:fe:52:7e:24:39:6b:78:
fe:6a:7d:20:fa:e1:c3:5f:3a:ad:01:71:d9:75:f4:
6f:59:67:75:24:74:57:53:19:89:6b:d1:78:b0:ab:
40:64:5d:eb:8b:69:2b:11:18:ec:d6:a5:5b:c0:5d:
d1:cc:2e:e0:c3:6f:b2:ef:ba:de:5c:fe:a7:19:6b:
9b:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:60:EE:8D:A2:C6:53:11:20:28:90:F4:B4:05:79:10:B6:CB:12:DF
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/TGDujaLGUxEgKJD0tAV5ELbLEt8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:b300::/29
2a06:dfc0::/29
2a07:95c0::/29
2a07:a300::/29
2a0d:1140::/29
2a0d:a9c0::/29
2a0f:16c0::/29
2a0f:1740::/29
2a0f:19c0::/29
2a0f:1a40::/29
2a0f:1ac0::/29
2a0f:27c0::/29
2a0f:2e40::/29
2a0f:3740::/29
2a0f:7280::/29
2a0f:9600::/29
2a0f:ec00::/29
2a10:3040::/29
2a10:30c0::/29
2a10:33c0::/29
2a10:3640::/29
2a10:3840::/29
2a10:5c00::/29
2a10:6300::/29
2a10:6400::/29
2a10:6900::/29
2a10:7700::/29
2a10:7b00::/29
2a11:1200::/29
2a11:1880::/29
2a11:5c80::/29
2a11:8700::/29
2a11:89c0::/29
2a11:9340::/29
2a11:9e00::/29
2a11:b200::/29
2a11:b740::/29
2a11:e580::/29
2a11:efc0::/29
2a11:f040::/29
2a12:ba00::/29
2a12:cd00::/29
2a12:dc00::/29
2a13:200::/29
2a13:cc0::/29
2a13:2f40::/29
2a13:4f00::/29
2a13:9100::/29
2a13:9b00::/29
2a13:9d00::/29
2a13:c700::/29
Signature Algorithm: sha256WithRSAEncryption
8c:fd:35:d3:fb:c8:15:c6:26:8a:95:b6:c0:cf:a9:40:ae:7a:
d2:8b:91:b2:7d:ab:d8:90:ef:21:75:41:2d:97:1e:d2:e1:e9:
f6:63:af:52:49:fd:43:56:18:0a:df:4e:91:be:02:b9:e5:0d:
d0:03:58:13:bc:83:91:97:11:a6:05:ed:08:73:af:05:7c:17:
fa:74:48:1b:86:68:b4:a1:cf:82:9e:e0:93:f4:49:36:3d:d6:
ee:cc:fb:d3:94:44:15:a8:82:52:fe:84:68:e2:e5:83:b0:18:
33:28:d3:e0:ea:d7:8b:54:4c:e8:a0:d2:eb:1b:c6:6a:0f:4c:
e4:02:90:fd:6a:1a:56:cc:38:9b:9d:a5:3c:cd:4f:69:dc:f1:
9a:c6:86:2f:8d:40:99:b0:2f:94:53:9a:05:07:b1:3a:44:11:
57:5c:41:57:5d:90:6d:d6:ca:1e:ba:02:bf:cc:f9:2e:9e:d5:
f3:f5:51:4e:38:5a:49:d9:7e:76:35:b7:d4:cc:c3:d9:dd:8e:
99:de:21:3c:15:cf:59:d7:9f:fc:e1:bb:ec:04:01:da:a0:e1:
b3:4c:5a:42:3c:6f:a2:09:5d:ea:c5:64:f1:fd:53:21:17:3e:
78:d8:87:a7:47:fc:2b:4e:d5:31:5f:ba:ad:68:47:df:cb:6e:
dd:16:a2:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:07:27 2025 by rpki-client