Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/c5dc73-9be2-4503-8281-4b350eacc86b/1/2MZObyNs7teF5ZKEPMrcqYEASUo.roa
File: 2MZObyNs7teF5ZKEPMrcqYEASUo.roa (raw, json)
Hash identifier: Pg27eqa4lnXOqBuDEojqyUY3Rt2J4PGGS2odCzir3io=
Subject key identifier: D8:C6:4E:6F:23:6C:EE:D7:85:E5:92:84:3C:CA:DC:A9:81:00:49:4A
Certificate issuer: /CN=2fcf619ccecf836f56a72010e82fb7dd240402f9
Certificate serial: 0192B390FE1A82F1E2EEB199EEE05FE4BFDE
Authority key identifier: 2F:CF:61:9C:CE:CF:83:6F:56:A7:20:10:E8:2F:B7:DD:24:04:02:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L89hnM7Pg29WpyAQ6C-33SQEAvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/c5dc73-9be2-4503-8281-4b350eacc86b/1/2MZObyNs7teF5ZKEPMrcqYEASUo.roa
Signing time: Tue 22 Oct 2024 09:31:16 +0000
ROA not before: Tue 22 Oct 2024 09:31:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209095
IP address blocks: 5.182.136.0/22 maxlen: 24
5.182.139.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 01:48:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:b3:90:fe:1a:82:f1:e2:ee:b1:99:ee:e0:5f:e4:bf:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fcf619ccecf836f56a72010e82fb7dd240402f9
Validity
Not Before: Oct 22 09:31:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d8c64e6f236ceed785e592843ccadca98100494a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:29:8b:4e:09:2b:4f:e5:3c:54:74:54:ac:d6:
36:25:21:bb:15:e7:4b:51:a0:25:fb:f6:a1:c5:f8:
64:c8:33:1e:4a:c9:43:60:0a:90:18:d1:28:06:ee:
36:9d:07:f2:fa:58:a3:63:42:9a:86:11:9b:75:7d:
2f:71:97:36:38:c4:9b:95:50:d6:83:cd:29:91:49:
dc:74:b0:68:59:19:b1:50:c5:fc:23:3b:93:e4:20:
71:f6:9d:11:ae:83:76:2d:e5:86:44:3f:a2:46:f1:
fb:48:fb:7e:40:18:38:36:2f:66:1f:72:78:5d:38:
8b:8a:c8:32:25:ba:92:8b:33:d1:ee:9a:1a:3d:19:
3d:3f:f5:d8:3e:e3:26:17:ce:39:99:5a:84:c6:3d:
03:24:42:05:65:77:ae:c2:6e:5c:1c:29:1f:35:4a:
b1:46:05:11:03:8a:40:a0:df:4f:4f:9a:b0:2e:f2:
86:14:82:cb:a0:7f:1e:64:16:a0:cb:6b:92:d4:f3:
84:6f:46:a6:4f:be:1d:19:ed:4b:27:29:d1:a7:e6:
25:df:03:fd:16:37:ab:36:ae:e5:93:94:cb:5c:b8:
b0:6b:fd:09:c5:d2:44:34:2c:52:65:37:fb:44:ff:
e3:d0:8c:c7:dd:f3:be:c5:c4:a5:7d:dd:ca:97:c1:
bf:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:C6:4E:6F:23:6C:EE:D7:85:E5:92:84:3C:CA:DC:A9:81:00:49:4A
X509v3 Authority Key Identifier:
keyid:2F:CF:61:9C:CE:CF:83:6F:56:A7:20:10:E8:2F:B7:DD:24:04:02:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L89hnM7Pg29WpyAQ6C-33SQEAvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c5dc73-9be2-4503-8281-4b350eacc86b/1/2MZObyNs7teF5ZKEPMrcqYEASUo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c5dc73-9be2-4503-8281-4b350eacc86b/1/L89hnM7Pg29WpyAQ6C-33SQEAvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.136.0/22
Signature Algorithm: sha256WithRSAEncryption
68:90:14:33:1f:44:71:53:e9:af:41:30:56:aa:79:38:4c:a8:
a7:14:98:cb:8e:d7:3d:47:58:a4:6f:51:ac:6b:6b:6a:b7:81:
6d:73:47:c0:c8:41:33:65:a5:d6:5c:64:f0:d0:4b:f6:c7:e1:
37:f2:2b:b1:fd:70:67:dc:90:3b:54:00:d5:c3:c4:09:ee:8f:
20:55:02:14:59:e9:f0:50:2a:77:e4:88:77:18:5b:cc:b7:5a:
42:8b:ec:69:f4:ad:b0:e1:c5:3a:69:83:dc:95:43:7d:f5:23:
4c:a2:69:e8:cf:c5:07:83:9c:0f:54:0a:9c:d8:11:10:c9:28:
d0:65:ac:73:9f:0e:f7:8f:0b:ec:97:ef:5d:3f:d3:37:31:d5:
d5:d4:e9:f0:a8:7a:87:04:81:a5:59:76:a6:27:86:64:31:0f:
3e:b9:f4:15:4a:05:1c:5e:e7:d0:b8:97:a3:4c:1e:83:d6:23:
db:42:86:fd:61:89:f1:98:af:37:a7:3d:03:be:18:4c:da:96:
7b:94:4a:c9:c3:ee:1b:b1:cc:3d:ca:92:22:4c:93:21:df:bc:
27:92:92:cd:30:bc:88:79:a0:a6:58:4f:f8:97:fa:08:df:e3:
38:05:51:11:fc:43:19:7b:54:fc:3f:98:e7:99:40:b1:be:11:
3a:64:3a:c6
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZKzkP4agvHi7rGZ7uBf5L/eMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmY2Y2MTljY2VjZjgzNmY1NmE3MjAxMGU4MmZiN2RkMjQw
NDAyZjkwHhcNMjQxMDIyMDkzMTE2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkOGM2NGU2ZjIzNmNlZWQ3ODVlNTkyODQzY2NhZGNhOTgxMDA0OTRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxymLTgkrT+U8VHRUrNY2JSG7FedL
UaAl+/ahxfhkyDMeSslDYAqQGNEoBu42nQfy+lijY0KahhGbdX0vcZc2OMSblVDW
g80pkUncdLBoWRmxUMX8IzuT5CBx9p0RroN2LeWGRD+iRvH7SPt+QBg4Ni9mH3J4
XTiLisgyJbqSizPR7poaPRk9P/XYPuMmF845mVqExj0DJEIFZXeuwm5cHCkfNUqx
RgURA4pAoN9PT5qwLvKGFILLoH8eZBagy2uS1POEb0amT74dGe1LJynRp+Yl3wP9
FjerNq7lk5TLXLiwa/0JxdJENCxSZTf7RP/j0IzH3fO+xcSlfd3Kl8G/8wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNjGTm8jbO7XheWShDzK3KmBAElKMB8GA1UdIwQY
MBaAFC/PYZzOz4NvVqcgEOgvt90kBAL5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDg5aG5NN1BnMjlXcHlBUTZDLTMzU1FFQXZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9jNWRjNzMtOWJlMi00NTAzLTgyODEt
NGIzNTBlYWNjODZiLzEvMk1aT2J5TnM3dGVGNVpLRVBNcmNxWUVBU1VvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC9jNWRjNzMtOWJlMi00NTAzLTgyODEtNGIzNTBlYWNjODZi
LzEvTDg5aG5NN1BnMjlXcHlBUTZDLTMzU1FFQXZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCBbaIMA0G
CSqGSIb3DQEBCwUAA4IBAQBokBQzH0RxU+mvQTBWqnk4TKinFJjLjtc9R1ikb1Gs
a2tqt4Ftc0fAyEEzZaXWXGTw0Ev2x+E38iux/XBn3JA7VADVw8QJ7o8gVQIUWenw
UCp35Ih3GFvMt1pCi+xp9K2w4cU6aYPclUN99SNMomnoz8UHg5wPVAqc2BEQySjQ
Zaxznw73jwvsl+9dP9M3MdXV1OnwqHqHBIGlWXamJ4ZkMQ8+ufQVSgUcXufQuJej
TB6D1iPbQob9YYnxmK83pz0DvhhM2pZ7lErJw+4bscw9ypIiTJMh37wnkpLNMLyI
eaCmWE/4l/oI3+M4BVER/EMZe1T8P5jnmUCxvhE6ZDrG
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:39:39 2025 by rpki-client