Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/TYhDMaiIRu9jhYm0_bqpz5Z1WF8.roa
File: TYhDMaiIRu9jhYm0_bqpz5Z1WF8.roa (raw, json)
Hash identifier: cBTrb0q7q3TPH9G5mIl3Y9YEA65B/jGP/rW9Lp8q2KI=
Subject key identifier: 4D:88:43:31:A8:88:46:EF:63:85:89:B4:FD:BA:A9:CF:96:75:58:5F
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01971D210E9489CCB276D3C385D990B182D9
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/TYhDMaiIRu9jhYm0_bqpz5Z1WF8.roa
Signing time: Thu 29 May 2025 17:39:55 +0000
ROA not before: Thu 29 May 2025 17:39:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14576
IP address blocks: 2a06:a5c0::/29 maxlen: 29
2a06:dfc0::/29 maxlen: 29
2a07:bb40::/29 maxlen: 29
2a09:b700::/29 maxlen: 29
2a0d:8f80::/29 maxlen: 29
2a0f:e00::/29 maxlen: 29
2a0f:19c0::/29 maxlen: 29
2a0f:2300::/29 maxlen: 29
2a0f:2840::/29 maxlen: 29
2a0f:2d40::/29 maxlen: 29
2a0f:3240::/29 maxlen: 29
2a0f:35c0::/29 maxlen: 29
2a0f:36c0::/29 maxlen: 29
2a0f:9e00::/29 maxlen: 29
2a0f:a200::/29 maxlen: 29
2a0f:e540::/29 maxlen: 29
2a0f:e600::/29 maxlen: 29
2a0f:e9c0::/29 maxlen: 29
2a10:30c0::/29 maxlen: 29
2a10:3140::/29 maxlen: 29
2a10:31c0::/29 maxlen: 29
2a10:3340::/29 maxlen: 29
2a10:3540::/29 maxlen: 29
2a10:36c0::/29 maxlen: 29
2a10:3740::/29 maxlen: 29
2a10:4a00::/29 maxlen: 29
2a10:5400::/29 maxlen: 29
2a10:6400::/29 maxlen: 29
2a10:6500::/29 maxlen: 29
2a10:6b00::/29 maxlen: 29
2a10:6d00::/29 maxlen: 29
2a10:7100::/29 maxlen: 29
2a10:7300::/29 maxlen: 29
2a10:7500::/29 maxlen: 29
2a10:7900::/29 maxlen: 29
2a10:7b00::/29 maxlen: 29
2a10:7d00::/29 maxlen: 29
2a10:7f00::/29 maxlen: 29
2a11:4800::/29 maxlen: 32
2a11:7440::/29 maxlen: 29
2a11:89c0::/29 maxlen: 29
2a11:e580::/29 maxlen: 29
2a12:2c80::/29 maxlen: 29
2a12:4b00::/29 maxlen: 29
2a12:5e00::/29 maxlen: 29
2a12:d100::/29 maxlen: 29
2a12:d540::/29 maxlen: 29
2a12:d5c0::/29 maxlen: 29
2a13:200::/29 maxlen: 29
2a13:2bc0::/29 maxlen: 29
2a13:3080::/29 maxlen: 29
2a13:8f00::/29 maxlen: 29
2a13:9680::/29 maxlen: 29
2a13:a100::/29 maxlen: 29
2a13:df00::/29 maxlen: 29
2a13:f900::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 03 Jun 2025 08:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:1d:21:0e:94:89:cc:b2:76:d3:c3:85:d9:90:b1:82:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: May 29 17:39:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4d884331a88846ef638589b4fdbaa9cf9675585f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:f8:38:8d:46:f0:f3:f2:c5:bb:ff:94:60:59:
b6:dd:01:48:a2:27:6f:03:1c:0b:9c:a4:bd:0b:65:
86:f6:39:08:e1:f9:9f:55:45:43:fb:6a:f5:b9:26:
29:df:b7:67:e4:09:a1:13:82:76:c9:b1:50:14:b6:
f5:2d:24:d7:65:04:48:5f:59:42:1d:32:84:27:10:
0d:ab:db:fa:b2:35:0d:8b:0e:9a:07:ff:3e:38:5a:
b2:b6:36:42:4d:3b:13:85:4d:f7:12:de:09:8e:4a:
ba:73:c5:59:e8:3b:c7:87:11:ec:da:99:c6:92:80:
96:63:56:66:d3:f0:89:af:23:14:73:dc:75:5c:68:
52:02:38:f1:19:de:f7:f0:24:3a:a0:ae:df:55:0d:
b5:ac:8f:9d:31:0b:b7:0a:4f:97:be:e8:2e:78:56:
38:a9:4c:79:c4:db:8c:12:61:ec:3a:38:e1:dd:30:
78:2f:7b:81:11:41:36:02:51:29:a4:c1:13:cf:ad:
77:9c:f6:ea:86:95:46:f7:b3:d5:81:e5:26:69:36:
e8:3d:93:0a:30:fb:a8:e5:86:ef:f9:51:2b:9e:39:
9a:84:f4:52:fc:df:a7:41:55:35:21:79:bc:09:c1:
c8:01:9f:dc:59:fa:a4:98:3d:38:41:de:f7:e8:d4:
ea:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:88:43:31:A8:88:46:EF:63:85:89:B4:FD:BA:A9:CF:96:75:58:5F
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/TYhDMaiIRu9jhYm0_bqpz5Z1WF8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a5c0::/29
2a06:dfc0::/29
2a07:bb40::/29
2a09:b700::/29
2a0d:8f80::/29
2a0f:e00::/29
2a0f:19c0::/29
2a0f:2300::/29
2a0f:2840::/29
2a0f:2d40::/29
2a0f:3240::/29
2a0f:35c0::/29
2a0f:36c0::/29
2a0f:9e00::/29
2a0f:a200::/29
2a0f:e540::/29
2a0f:e600::/29
2a0f:e9c0::/29
2a10:30c0::/29
2a10:3140::/29
2a10:31c0::/29
2a10:3340::/29
2a10:3540::/29
2a10:36c0::/29
2a10:3740::/29
2a10:4a00::/29
2a10:5400::/29
2a10:6400::/29
2a10:6500::/29
2a10:6b00::/29
2a10:6d00::/29
2a10:7100::/29
2a10:7300::/29
2a10:7500::/29
2a10:7900::/29
2a10:7b00::/29
2a10:7d00::/29
2a10:7f00::/29
2a11:4800::/29
2a11:7440::/29
2a11:89c0::/29
2a11:e580::/29
2a12:2c80::/29
2a12:4b00::/29
2a12:5e00::/29
2a12:d100::/29
2a12:d540::/29
2a12:d5c0::/29
2a13:200::/29
2a13:2bc0::/29
2a13:3080::/29
2a13:8f00::/29
2a13:9680::/29
2a13:a100::/29
2a13:df00::/29
2a13:f900::/29
Signature Algorithm: sha256WithRSAEncryption
09:81:64:6b:11:97:b8:79:ec:74:d8:3d:aa:f7:71:1a:0d:fa:
07:51:1f:f7:1d:97:23:73:22:ea:b9:58:6a:0b:43:36:d6:79:
7b:5d:7a:87:98:3e:a9:ce:c4:8b:72:c0:55:81:c5:fc:82:52:
8c:72:66:a0:ca:c7:d8:4a:9c:ef:fc:17:56:06:a6:a7:48:81:
4b:ad:ec:4e:e4:a8:d7:b0:22:27:71:b4:01:7b:e5:f6:21:0e:
4f:ae:15:36:cb:e4:aa:b4:c6:cf:e3:5d:e8:6e:ef:34:21:3a:
8c:4e:a4:33:09:c0:38:79:d7:46:e9:a1:79:65:09:0b:dd:bd:
f8:e3:f9:84:32:5f:86:f0:ae:82:09:7a:e5:44:10:ac:00:0c:
1c:07:45:a2:0b:29:4e:48:31:14:e2:5b:08:7e:54:21:13:81:
ff:fe:b7:15:2f:bf:c8:d7:2b:3b:74:de:73:68:50:84:65:9a:
74:7a:10:cc:b5:e2:2e:67:34:cb:f1:15:16:52:e9:e3:1e:22:
ce:45:ed:b9:0b:82:e2:0c:f6:f0:cb:ba:2a:c8:34:b0:3d:75:
fc:a9:fa:45:2e:76:1a:a0:ba:e8:e5:0f:49:ab:e5:8d:cb:cd:
43:cb:0c:2e:e1:c7:1d:5c:a2:cd:c9:69:8b:47:56:1b:6f:3c:
da:a3:bf:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 06:32:44 2025 by rpki-client