Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/6dd682-2b06-405c-8693-46be79870be8/1/KOELO1HciVURaDTciETZ3YBUUIU.roa
File: KOELO1HciVURaDTciETZ3YBUUIU.roa (raw, json)
Hash identifier: x3F8mE4QCq4BBgk5838PUsUSD7Gl2cwYuYbe5j00Hkk=
Subject key identifier: 28:E1:0B:3B:51:DC:89:55:11:68:34:DC:88:44:D9:DD:80:54:50:85
Certificate issuer: /CN=e90391d244173f3e1aa821db77484b1ada53557f
Certificate serial: 0191E18EF86D7A814904EE215F3328457D23
Authority key identifier: E9:03:91:D2:44:17:3F:3E:1A:A8:21:DB:77:48:4B:1A:DA:53:55:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6QOR0kQXPz4aqCHbd0hLGtpTVX8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/6dd682-2b06-405c-8693-46be79870be8/1/KOELO1HciVURaDTciETZ3YBUUIU.roa
Signing time: Wed 11 Sep 2024 14:48:48 +0000
ROA not before: Wed 11 Sep 2024 14:48:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212604
IP address blocks: 31.42.178.0/23 maxlen: 23
Validation: Failed, certificate revoked on Wed 01 Jan 2025 23:47:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:e1:8e:f8:6d:7a:81:49:04:ee:21:5f:33:28:45:7d:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e90391d244173f3e1aa821db77484b1ada53557f
Validity
Not Before: Sep 11 14:48:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=28e10b3b51dc8955116834dc8844d9dd80545085
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d2:fb:dc:eb:25:69:d1:52:a4:11:a1:a6:a5:
1a:fa:42:73:48:51:8a:be:1f:a5:16:d0:f7:22:96:
27:45:eb:d8:96:42:d0:03:28:8b:14:a3:5b:1c:1e:
01:ba:bb:a2:46:4d:a7:9e:17:48:68:fd:5f:46:7b:
6d:bc:49:cd:2a:25:33:2c:6d:3c:9a:c3:23:e9:10:
a1:5d:b4:dc:ea:19:bf:7e:f3:2a:88:cc:f2:29:00:
b4:9c:11:fd:07:b0:4a:36:e5:85:c6:cf:c0:6e:ff:
de:e4:e8:49:27:b2:1d:fc:5d:1c:b4:46:c0:78:e6:
c9:ca:6b:1c:07:eb:85:b2:81:59:32:b1:c2:2d:76:
4b:74:6b:be:d4:8a:c1:d1:19:85:29:5c:8a:3c:9f:
51:30:06:aa:8b:dd:22:06:a4:bf:45:af:e7:79:b4:
66:03:26:d9:58:b0:31:26:b9:6d:89:bf:0f:63:eb:
6b:df:62:55:b8:ed:06:68:c0:cd:cc:00:55:e3:27:
94:83:2f:38:80:c5:14:c6:27:5a:79:46:dc:92:14:
3a:fb:3b:d4:1a:e0:83:44:a4:1e:50:c9:f7:4d:aa:
71:37:ff:e3:0b:37:1d:48:f0:0e:06:4e:97:c4:06:
df:ff:bf:0f:1e:f5:58:d3:c4:55:ac:e2:11:e5:d4:
5c:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:E1:0B:3B:51:DC:89:55:11:68:34:DC:88:44:D9:DD:80:54:50:85
X509v3 Authority Key Identifier:
keyid:E9:03:91:D2:44:17:3F:3E:1A:A8:21:DB:77:48:4B:1A:DA:53:55:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6QOR0kQXPz4aqCHbd0hLGtpTVX8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6dd682-2b06-405c-8693-46be79870be8/1/KOELO1HciVURaDTciETZ3YBUUIU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6dd682-2b06-405c-8693-46be79870be8/1/6QOR0kQXPz4aqCHbd0hLGtpTVX8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.42.178.0/23
Signature Algorithm: sha256WithRSAEncryption
41:d7:4b:56:11:a4:ba:7b:4a:83:53:a5:0e:5d:a7:53:45:5a:
5e:a2:70:c2:28:27:4c:e0:8e:6f:33:e3:30:d1:3e:08:b5:7f:
45:3d:0e:d3:bd:43:9c:6d:be:0b:f2:e7:05:ac:51:9a:47:a9:
45:ff:52:2d:56:11:65:ba:a9:ba:c5:72:cd:c9:18:70:69:e0:
8f:b9:57:d4:56:4c:13:98:90:dc:ee:93:30:ca:c1:a4:81:40:
56:43:5e:10:2e:0d:45:b8:18:77:93:e0:91:68:47:30:4c:15:
cf:af:5d:df:96:67:2b:43:03:c2:83:cc:2e:8c:ad:23:f3:58:
dc:d9:ec:20:bc:9f:f0:75:e1:26:ca:e0:ba:f0:2f:3b:6b:95:
00:8a:4d:0b:30:f8:1d:17:60:7e:ba:8c:a2:04:d2:fa:f5:9d:
01:b4:c1:8e:cb:4f:eb:07:5c:2c:59:da:96:cd:61:64:3d:34:
d1:b6:b5:51:36:72:9f:33:33:31:9a:7b:f4:97:a1:17:02:de:
26:1a:a5:50:ad:7a:dc:da:fd:8a:87:a1:36:27:1e:e9:c2:26:
c4:d9:38:7d:70:08:81:1f:e9:1f:39:36:11:5b:fa:27:af:1d:
a9:0f:9c:2a:dc:50:04:5e:55:93:c4:ff:84:8b:90:21:2b:04:
2c:2c:72:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:22:20 2025 by rpki-client