Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/LcHqK0a_xtPQmctaQEyjICkKKVA.roa
File: LcHqK0a_xtPQmctaQEyjICkKKVA.roa (raw, json)
Hash identifier: DF7BU742Yy6os2SN65TA/QXMT6tbbiQaIJ4HtDT5whc=
Subject key identifier: 2D:C1:EA:2B:46:BF:C6:D3:D0:99:CB:5A:40:4C:A3:20:29:0A:29:50
Certificate issuer: /CN=296593b747e76a56492511bb3612e4d5e4cbe7ec
Certificate serial: 018C4803C1C7D4626F3B144D99E29714ECC1
Authority key identifier: 29:65:93:B7:47:E7:6A:56:49:25:11:BB:36:12:E4:D5:E4:CB:E7:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/LcHqK0a_xtPQmctaQEyjICkKKVA.roa
Signing time: Fri 08 Dec 2023 06:00:54 +0000
ROA not before: Fri 08 Dec 2023 06:00:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49581
IP address blocks: 43.251.163.0/24 maxlen: 24
43.251.162.0/24 maxlen: 24
37.114.32.0/24 maxlen: 24
37.114.58.0/24 maxlen: 24
37.114.54.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:48:03:c1:c7:d4:62:6f:3b:14:4d:99:e2:97:14:ec:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=296593b747e76a56492511bb3612e4d5e4cbe7ec
Validity
Not Before: Dec 8 06:00:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2dc1ea2b46bfc6d3d099cb5a404ca320290a2950
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:23:9e:b0:00:8d:2c:c0:66:bf:72:54:bd:05:
7e:a6:2f:52:b4:39:ff:03:4a:a0:6f:59:bc:5f:49:
e2:48:82:f9:3f:7b:4b:2a:af:6a:12:2e:94:37:52:
05:e8:7e:2e:7b:65:84:3d:cb:94:c9:dd:3b:7e:bd:
8f:9b:09:bc:30:54:65:fe:96:07:c3:46:2f:87:b3:
46:e9:05:27:ef:b8:e4:5f:e4:8c:20:e4:2e:9a:76:
5e:31:b9:9a:bc:51:70:a8:25:ce:df:25:30:ec:40:
94:5f:d1:d1:4b:f3:d4:09:0d:fa:1c:97:1e:d8:b0:
ae:8e:b3:e8:c1:8e:d5:46:5c:01:87:26:23:7b:26:
f5:4d:ea:1f:a6:4b:3e:cf:86:70:27:fe:3a:76:9d:
d0:59:4d:3a:b3:b8:51:fe:5f:62:fc:79:c2:7c:5b:
6d:04:4d:a4:49:9e:19:50:f4:ec:67:db:48:a7:70:
2d:0c:52:f7:c4:6d:b6:14:5b:60:29:b2:8a:ca:9b:
3b:ad:cb:5e:40:b0:fc:df:49:0a:1f:35:1e:76:be:
38:8c:de:de:0a:e4:9d:0d:df:cc:36:9b:5c:63:7c:
4c:9f:eb:cb:7a:b7:d4:8a:1b:69:d1:3c:b9:5d:3d:
04:8d:ce:64:2f:30:02:cb:e1:27:fc:a0:21:70:7b:
4b:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:C1:EA:2B:46:BF:C6:D3:D0:99:CB:5A:40:4C:A3:20:29:0A:29:50
X509v3 Authority Key Identifier:
keyid:29:65:93:B7:47:E7:6A:56:49:25:11:BB:36:12:E4:D5:E4:CB:E7:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/LcHqK0a_xtPQmctaQEyjICkKKVA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.114.32.0/24
37.114.54.0/24
37.114.58.0/24
43.251.162.0/23
Signature Algorithm: sha256WithRSAEncryption
2b:cc:8d:d7:ea:1b:8e:51:af:2a:76:cf:22:13:73:0b:28:f5:
75:9b:d6:51:4d:95:90:36:53:dd:c6:6d:ec:03:e9:71:79:f8:
74:d4:1e:a4:30:4c:72:61:00:1c:0c:d0:b9:a0:fb:0a:89:13:
21:fd:9f:67:a7:93:e2:9d:89:a6:1f:5e:1c:81:fa:9a:c9:91:
55:c7:de:1a:7b:e2:ea:69:95:78:86:cd:da:0b:d5:b6:af:02:
de:29:78:28:fe:0e:fd:e0:6d:f5:ea:34:39:b1:a9:a1:d0:e9:
bd:da:79:73:47:e0:6b:c6:4e:61:37:79:e5:e9:44:50:2b:43:
f9:7a:f1:46:5a:79:41:b6:62:a1:f8:8a:40:b3:0b:4d:55:fb:
59:85:3c:33:33:72:de:90:65:5c:4a:43:95:b9:84:24:f4:24:
b5:45:7c:92:89:d7:a9:f8:ab:91:5b:db:9a:57:88:61:66:42:
3a:63:c6:56:3d:84:9a:49:8e:69:53:12:a7:94:af:72:f8:4f:
f5:7e:d9:59:38:cb:5c:8b:6d:6b:04:33:d6:b8:62:b2:be:4c:
29:f0:9d:9a:bd:34:c8:b9:66:bc:ac:89:5f:41:37:64:56:a9:
db:53:84:35:be:e7:45:db:04:59:77:22:16:8b:a8:65:00:03:
15:df:ae:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 11:34:51 2024 by rpki-client on console-ams.rpki-client.org