Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/5nur-22JPck_AsQKDgtrXCrx68w.roa
File: 5nur-22JPck_AsQKDgtrXCrx68w.roa (raw, json)
Hash identifier: Hfxqp2H14xwHN80HZaVk2E1jx9ejCuzcFQjqe0y7MNo=
Subject key identifier: E6:7B:AB:FB:6D:89:3D:C9:3F:02:C4:0A:0E:0B:6B:5C:2A:F1:EB:CC
Certificate issuer: /CN=dff24726df3e77f6f4c8e0436613b35110eeaf38
Certificate serial: 0187C1647EE25DC5B89DDE16E94A289822F6
Authority key identifier: DF:F2:47:26:DF:3E:77:F6:F4:C8:E0:43:66:13:B3:51:10:EE:AF:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/5nur-22JPck_AsQKDgtrXCrx68w.roa
Signing time: Thu 27 Apr 2023 06:26:41 +0000
ROA not before: Thu 27 Apr 2023 06:26:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211975
IP address blocks: 31.43.164.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 09 May 2023 18:54:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:c1:64:7e:e2:5d:c5:b8:9d:de:16:e9:4a:28:98:22:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dff24726df3e77f6f4c8e0436613b35110eeaf38
Validity
Not Before: Apr 27 06:26:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e67babfb6d893dc93f02c40a0e0b6b5c2af1ebcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:73:2d:e4:3e:60:4c:f1:4d:03:2c:0a:c9:be:
78:ab:62:76:21:6a:a6:e4:ce:53:a5:ac:cb:fa:35:
d0:0b:92:0d:7e:b1:32:97:9c:1d:b7:e5:c3:26:ca:
fb:73:c1:2c:ab:26:4c:57:5f:a6:c6:3e:73:00:43:
bc:0c:bf:48:6f:cb:1d:b6:88:b2:2a:0b:79:45:ae:
63:0a:6c:34:6b:4d:5d:d1:9f:e8:9e:6e:f0:97:80:
98:69:7b:c4:1d:14:2b:12:07:36:b3:57:77:e5:2c:
01:b2:1a:19:5f:1a:57:80:bd:3c:ea:8d:d2:d0:e8:
ee:74:76:6d:18:75:bb:58:a5:61:63:a5:0f:68:b7:
0a:79:16:f5:5f:12:b4:f9:0a:62:a0:a1:29:9d:8b:
35:f6:82:1c:67:d5:bd:68:bc:20:a9:ca:3e:df:b0:
55:7c:ef:05:60:75:1c:f1:7a:5c:58:d5:f9:40:55:
69:a6:65:45:26:87:33:36:bb:f7:45:54:68:ce:c1:
9f:57:66:98:c9:16:5d:46:47:52:52:03:56:f1:87:
70:6c:fb:a5:a9:f4:79:15:2d:92:e1:1f:ea:8b:91:
ab:2d:b1:b6:bd:d4:29:bc:f5:11:47:bd:ce:02:a8:
95:de:5e:0e:08:a2:49:7c:f0:07:b4:5a:a4:8f:14:
a9:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:7B:AB:FB:6D:89:3D:C9:3F:02:C4:0A:0E:0B:6B:5C:2A:F1:EB:CC
X509v3 Authority Key Identifier:
keyid:DF:F2:47:26:DF:3E:77:F6:F4:C8:E0:43:66:13:B3:51:10:EE:AF:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/5nur-22JPck_AsQKDgtrXCrx68w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.43.164.0/24
Signature Algorithm: sha256WithRSAEncryption
06:1f:9e:54:7b:c7:3a:b1:5e:f2:c6:79:48:5c:f3:bc:17:15:
dd:fe:6f:05:29:6c:a8:4c:d2:96:aa:0e:50:78:db:9f:0c:83:
92:d5:c4:b0:0c:2d:46:46:67:d2:58:8f:76:65:b2:40:1f:f4:
b8:00:40:12:55:6f:06:48:1b:08:25:97:b5:60:81:01:86:51:
06:86:2e:41:ce:7f:02:68:3c:e1:26:62:48:60:01:94:3f:62:
1d:1f:4c:0b:5f:c2:03:29:7f:8d:9d:0f:8d:15:8a:4f:85:5d:
9f:a3:78:f4:e4:57:10:4c:f7:40:75:d7:c0:3c:34:15:a6:3a:
76:63:74:67:48:40:0f:f9:5b:d7:b2:01:64:f8:b3:76:7f:c1:
07:1f:63:6d:00:15:7f:8a:11:65:c6:98:a8:a0:a1:26:14:42:
48:1c:33:09:b1:ca:74:8b:cf:15:ae:fa:10:02:d2:3f:23:7a:
e9:17:97:21:d4:93:3e:c7:0f:16:3f:b4:07:e2:6c:45:c8:12:
38:50:81:50:d7:63:4c:3d:cd:d9:34:06:e9:f3:73:a7:b4:ee:
d8:7e:76:60:a1:fa:e8:49:da:cf:81:f8:db:20:55:4e:7a:7a:
5c:c6:3c:28:27:be:1e:86:b8:ae:10:f7:47:ef:72:ff:17:ac:
61:c1:21:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:35 2024 by rpki-client on console-fra.rpki-client.org