Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/elX7AUmqttGeBaUUiTEUNuGUZ0A.roa
File: elX7AUmqttGeBaUUiTEUNuGUZ0A.roa (raw, json)
Hash identifier: 6xeMWtWwdrLOebOGsEr0gpLNqSY7S6m8W3CX0lV1lk4=
Subject key identifier: 7A:55:FB:01:49:AA:B6:D1:9E:05:A5:14:89:31:14:36:E1:94:67:40
Certificate issuer: /CN=296593b747e76a56492511bb3612e4d5e4cbe7ec
Certificate serial: 01856E01C181E330F273F1B9FA55CC900739
Authority key identifier: 29:65:93:B7:47:E7:6A:56:49:25:11:BB:36:12:E4:D5:E4:CB:E7:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/elX7AUmqttGeBaUUiTEUNuGUZ0A.roa
Signing time: Sun 01 Jan 2023 15:44:46 +0000
ROA not before: Sun 01 Jan 2023 15:44:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49581
IP address blocks: 43.251.163.0/24 maxlen: 24
43.251.162.0/24 maxlen: 24
37.114.32.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:01:c1:81:e3:30:f2:73:f1:b9:fa:55:cc:90:07:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=296593b747e76a56492511bb3612e4d5e4cbe7ec
Validity
Not Before: Jan 1 15:44:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7a55fb0149aab6d19e05a51489311436e1946740
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:16:57:8f:ef:d8:00:07:86:21:e2:ab:ed:10:
d9:ba:3a:92:0c:1a:9d:58:da:00:3c:91:b9:12:cf:
b8:c4:45:2b:a1:17:39:da:4b:16:19:e4:b2:c3:d9:
01:bb:29:1c:da:19:a1:0e:28:b3:e4:db:cd:d4:10:
3e:74:7a:db:26:8e:e3:e7:98:1b:d9:ca:1c:f8:4d:
31:24:0f:5d:35:47:e7:b6:70:0a:f7:42:bd:d2:7e:
c6:99:ef:f2:74:dd:f9:1d:d4:01:c1:a1:79:68:1f:
80:54:17:62:03:b6:3b:54:46:5b:61:b1:09:25:28:
c8:df:1c:ce:93:45:36:a4:94:95:03:65:b0:04:f7:
4c:91:be:ca:7d:66:3b:e1:9d:4f:9c:16:94:51:d7:
bb:70:78:ca:33:a5:1e:9b:3a:9a:ac:b6:bd:3c:dc:
f7:60:31:a4:c7:3d:89:cf:d6:c0:c2:3d:c4:80:b7:
ca:7b:48:0a:ca:a4:f6:09:07:d7:b3:65:49:c1:38:
0f:49:6f:c6:ea:9b:8a:97:d7:32:8b:e4:78:24:e9:
86:dd:7c:bd:25:71:5a:d4:e0:f6:bb:59:23:78:74:
bb:62:04:db:d0:0d:2a:b5:2b:e5:d4:f9:ed:bc:09:
ae:da:2e:07:f2:2f:99:5c:e1:ce:cd:f9:51:af:48:
37:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:55:FB:01:49:AA:B6:D1:9E:05:A5:14:89:31:14:36:E1:94:67:40
X509v3 Authority Key Identifier:
keyid:29:65:93:B7:47:E7:6A:56:49:25:11:BB:36:12:E4:D5:E4:CB:E7:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/elX7AUmqttGeBaUUiTEUNuGUZ0A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.114.32.0/24
43.251.162.0/23
Signature Algorithm: sha256WithRSAEncryption
cc:0f:4e:c2:11:cf:55:c5:ff:ee:07:4e:d3:b7:54:4e:43:52:
c9:36:a1:2b:b0:f3:1c:ac:79:cb:a3:02:9b:a0:68:f1:e9:12:
96:22:6d:ea:a6:d3:84:6b:04:af:8f:1a:bc:9b:b1:b9:b8:ff:
6a:ca:b2:b0:af:49:43:e6:c6:de:95:9c:ab:a0:47:92:0b:50:
43:a5:07:b8:30:94:52:da:dc:63:96:88:18:ab:ea:78:4b:e3:
29:3e:54:51:da:bc:b0:ac:4e:0a:23:9b:35:79:c3:bf:b3:19:
9c:b8:ea:57:e9:ce:5c:e5:9e:52:78:cd:23:0d:24:b3:1e:f7:
d2:d1:db:74:1c:ee:50:6f:b8:52:34:bf:e8:f3:8c:67:ca:10:
91:35:81:7c:23:34:fb:0f:3a:ae:bf:d6:21:09:3f:2d:7a:a4:
e8:37:6e:e5:2f:7c:a8:6f:2c:13:33:90:20:b0:ee:ab:c0:3d:
b0:50:19:c4:43:7e:21:58:02:6c:e2:46:e9:ee:c5:be:92:a1:
8d:d0:c6:c7:d0:b7:9c:fd:05:61:6c:d6:c3:19:91:34:7e:f0:
98:f5:b8:bf:83:1c:aa:fb:28:43:43:42:7b:7a:81:36:dc:5e:
47:a4:36:11:6c:d6:58:37:a7:3e:e9:08:0c:39:97:cd:91:95:
80:89:34:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 10 14:30:14 2023 by rpki-client on console-ams.rpki-client.org