Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/Z--5GYsnWqe7JUdXEDus7EB-TLA.roa
File: Z--5GYsnWqe7JUdXEDus7EB-TLA.roa (raw, json)
Hash identifier: G7j1a+UBBEagN71YmCtNv2xdcXFUsxgC1BEFt4JezPE=
Subject key identifier: 67:EF:B9:19:8B:27:5A:A7:BB:25:47:57:10:3B:AC:EC:40:7E:4C:B0
Certificate issuer: /CN=11b69b59d19f2987e49f1852d60bb1777f80a301
Certificate serial: 01894F3356DABAFC1577FA4E19EA793CA03A
Authority key identifier: 11:B6:9B:59:D1:9F:29:87:E4:9F:18:52:D6:0B:B1:77:7F:80:A3:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EbabWdGfKYfknxhS1guxd3-AowE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/Z--5GYsnWqe7JUdXEDus7EB-TLA.roa
Signing time: Thu 13 Jul 2023 12:21:51 +0000
ROA not before: Thu 13 Jul 2023 12:21:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 32780
IP address blocks: 5.188.196.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:34:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:4f:33:56:da:ba:fc:15:77:fa:4e:19:ea:79:3c:a0:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11b69b59d19f2987e49f1852d60bb1777f80a301
Validity
Not Before: Jul 13 12:21:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=67efb9198b275aa7bb254757103bacec407e4cb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:2e:b3:ac:3a:6f:1e:7f:2a:7e:54:95:a0:62:
52:7d:c8:ef:c8:58:0b:8f:48:0b:f1:75:6a:d8:46:
4d:76:23:8c:f9:60:b9:57:28:91:88:cc:ce:a2:a4:
91:dc:5a:51:1e:9f:0e:f6:36:5f:e8:39:e4:9f:49:
7a:91:59:27:ca:5c:c6:03:d9:7b:fc:f7:b1:23:4a:
b8:41:8e:74:58:c9:30:9d:e6:38:b0:1b:fe:7b:9a:
db:1d:e3:16:5c:b0:85:ec:ee:9f:2a:93:d5:66:27:
1d:d5:20:59:e3:70:26:2f:c1:9d:0a:6f:ce:4a:53:
b2:56:f0:11:ff:91:18:31:b5:e8:53:e9:9d:a6:34:
9d:ca:2a:4c:c4:40:95:61:9a:b6:1f:55:12:77:dd:
e7:b5:04:15:42:53:bb:b5:7d:5c:af:64:f0:88:60:
50:cf:a4:7e:d2:52:5c:de:6a:49:19:fc:62:59:56:
b6:a3:c5:1d:98:18:e4:5b:ce:67:91:c7:0e:4f:7f:
db:a3:d0:38:2b:b9:e5:99:d5:71:15:96:bc:d6:0d:
ec:3a:53:72:c7:65:16:ac:b0:4d:e7:d8:d8:c3:3d:
18:a6:91:7f:37:77:20:29:62:1e:42:ec:34:cd:16:
0c:19:a8:31:d7:5d:ac:0a:74:d6:87:e7:f2:38:0f:
a8:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:EF:B9:19:8B:27:5A:A7:BB:25:47:57:10:3B:AC:EC:40:7E:4C:B0
X509v3 Authority Key Identifier:
keyid:11:B6:9B:59:D1:9F:29:87:E4:9F:18:52:D6:0B:B1:77:7F:80:A3:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EbabWdGfKYfknxhS1guxd3-AowE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/Z--5GYsnWqe7JUdXEDus7EB-TLA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/EbabWdGfKYfknxhS1guxd3-AowE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.188.196.0/22
Signature Algorithm: sha256WithRSAEncryption
29:28:bc:8c:08:86:c4:ef:a8:02:74:9f:66:74:1e:9f:fc:88:
69:e9:1b:8c:40:82:b5:ce:3f:9a:f0:4e:26:6c:89:61:c3:ca:
c4:51:41:8a:ba:e0:56:d2:92:9e:e8:e2:47:ce:0f:b7:3a:24:
f9:b3:74:97:fe:8c:01:3c:d1:9b:c1:c9:43:79:76:5c:e9:ee:
27:2c:11:9a:b8:3d:ed:7f:c3:26:06:00:fe:fa:6c:8a:71:9d:
1b:0f:21:46:e8:f4:a4:c6:80:87:b7:99:25:6e:c1:96:45:aa:
b5:0d:9e:78:c5:73:df:4b:1b:f4:52:ef:f6:ba:1c:36:32:8f:
23:31:5c:cc:53:15:d4:66:5f:f0:11:a2:03:5e:3a:4d:da:17:
44:d0:7c:bf:ee:70:f9:cb:af:78:7c:b8:a3:6b:ce:d5:24:47:
eb:81:19:98:d2:a8:1f:82:ad:41:48:11:ca:f9:32:c3:0c:8a:
a1:8d:a2:b0:84:46:88:f9:f7:6e:01:f0:bd:d4:60:ee:a2:c9:
72:a9:c2:9e:55:58:6f:65:8e:55:86:46:07:ee:54:95:e4:9d:
d0:2a:35:b1:0b:c3:fc:99:3f:07:c5:19:39:b5:7f:2c:f2:bc:
a4:cf:1c:ef:34:95:32:35:7f:5f:68:d1:61:7a:a3:4f:58:a7:
75:06:74:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:17:18 2024 by rpki-client on console-ams.rpki-client.org