Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/TTFLI4LkgIBkEgE395VEEQjXLPk.roa
File: TTFLI4LkgIBkEgE395VEEQjXLPk.roa (raw, json)
Hash identifier: nmfTQXtIWaUn9fc0jTv0wPrS4oZtiouc7QV8DKQyZe0=
Subject key identifier: 4D:31:4B:23:82:E4:80:80:64:12:01:37:F7:95:44:11:08:D7:2C:F9
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0195C33A4262786CACE25918A8A5C630BABE
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/TTFLI4LkgIBkEgE395VEEQjXLPk.roa
Signing time: Sun 23 Mar 2025 13:38:49 +0000
ROA not before: Sun 23 Mar 2025 13:38:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7029
IP address blocks: 64.226.54.0/23 maxlen: 23
64.226.156.0/22 maxlen: 22
2a0e:1a80:1::/48 maxlen: 48
2a0e:c783::/32 maxlen: 32
2a0e:c785:1::/48 maxlen: 48
2a0e:f200::/48 maxlen: 48
2a0f:1e80:d9a8::/48 maxlen: 48
2a0f:3d80:bac::/48 maxlen: 48
2a0f:7d06:102::/48 maxlen: 48
2a0f:e847:acab::/48 maxlen: 48
2a10:67c2:3::/48 maxlen: 48
2a12:ac43:1::/48 maxlen: 48
2a12:ac45::/32 maxlen: 32
2a13:18c0:2::/48 maxlen: 48
2a13:e103::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 02 Apr 2025 09:08:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:c3:3a:42:62:78:6c:ac:e2:59:18:a8:a5:c6:30:ba:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Mar 23 13:38:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4d314b2382e4808064120137f795441108d72cf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:69:53:95:ee:3a:cd:70:8f:3c:11:6a:72:e7:
2c:e7:2c:de:0d:33:4a:2f:83:6a:12:12:38:e8:5c:
90:3c:dd:10:2e:a0:1a:c7:e6:27:05:f8:01:f4:a9:
b4:87:bc:50:bd:ab:eb:dd:df:5a:9a:93:fc:ed:e9:
de:b7:98:02:b6:3a:27:8d:fe:aa:72:16:50:1d:ae:
01:02:5d:6d:aa:97:4b:4b:16:04:1e:d5:7a:77:4f:
aa:e2:45:a4:fa:54:43:bb:8e:c0:1f:5d:b4:0f:29:
e4:2b:a9:d8:d3:d8:b9:8a:78:e7:df:5c:30:7d:b8:
b3:cc:af:a9:f9:85:50:2e:d0:87:82:f2:4a:cd:ad:
4a:e4:91:bd:90:15:95:51:d8:f8:ef:c5:7e:58:61:
36:06:f2:33:bb:ee:4c:20:83:c8:71:5f:35:5d:35:
db:25:cd:f0:43:d9:3c:b4:fa:48:ab:3f:83:2a:f0:
be:99:37:c4:c1:33:b0:c6:e4:39:ab:82:03:eb:78:
77:f8:43:37:1b:18:9f:4e:a8:0d:b1:5a:4d:d7:64:
ce:46:39:df:ca:00:8f:39:f9:48:78:94:c8:d2:8c:
ca:cb:06:90:a7:48:69:f3:70:a1:d6:7d:4c:0f:a3:
83:04:2e:c1:5d:81:e7:35:dc:67:cc:7d:65:d1:69:
05:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:31:4B:23:82:E4:80:80:64:12:01:37:F7:95:44:11:08:D7:2C:F9
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/TTFLI4LkgIBkEgE395VEEQjXLPk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.226.54.0/23
64.226.156.0/22
IPv6:
2a0e:1a80:1::/48
2a0e:c783::/32
2a0e:c785:1::/48
2a0e:f200::/48
2a0f:1e80:d9a8::/48
2a0f:3d80:bac::/48
2a0f:7d06:102::/48
2a0f:e847:acab::/48
2a10:67c2:3::/48
2a12:ac43:1::/48
2a12:ac45::/32
2a13:18c0:2::/48
2a13:e103::/32
Signature Algorithm: sha256WithRSAEncryption
07:dc:cc:69:68:b3:32:6c:1c:90:40:cb:7d:c3:6e:13:4d:bc:
a8:c9:03:33:91:af:14:bf:74:56:ab:85:f9:4a:1f:b4:d4:23:
bf:62:dc:ab:e7:3b:aa:81:a1:05:17:71:b4:85:93:f1:c5:53:
d2:84:5a:99:5e:4c:0a:ae:fb:17:76:79:76:56:5e:94:9e:e3:
7c:eb:b2:87:d1:06:1f:3d:43:0e:0c:3f:ad:47:e5:34:f6:f8:
0a:6d:97:d6:a3:70:b6:50:4a:ff:0e:1d:d6:b7:b6:cd:2d:c1:
c5:a7:e8:4e:ce:ad:fa:bc:21:c1:99:bd:a3:f6:96:be:6e:5d:
37:d0:a2:a7:09:37:69:97:81:25:fe:57:5a:ff:44:3c:94:e3:
88:dc:f9:5c:bc:86:8d:30:b9:9e:1b:ae:95:f7:f3:a5:e7:9f:
69:bc:37:1c:cb:e6:8e:e2:aa:8d:aa:13:7a:e5:f7:20:17:f2:
02:81:90:cf:5f:2a:92:b6:f9:26:6e:5f:d1:84:59:f7:84:2c:
26:18:0b:80:53:62:6c:69:ab:00:fb:6e:1f:fa:a5:9f:eb:9e:
75:b0:56:3f:81:5f:db:88:5c:6a:6a:8a:d7:2c:a0:c5:0a:84:
10:4d:8f:06:48:2b:a5:83:47:03:50:1b:ab:27:01:89:fe:94:
9e:48:0c:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 20:46:49 2025 by rpki-client