Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/af4ef8-ed07-4acd-a42f-c96c2ce859e5/1/k-ax_kaXxZo4yswUA7zhssvuNfA.roa
File: k-ax_kaXxZo4yswUA7zhssvuNfA.roa (raw, json)
Hash identifier: 3pfkehJ3TjBnahSiZsI/XQijjT1aml7YsyST7iaFz/s=
Subject key identifier: 93:E6:B1:FE:46:97:C5:9A:38:CA:CC:14:03:BC:E1:B2:CB:EE:35:F0
Certificate issuer: /CN=016e5e31fa8716aaa54e18fcdcfed3fc94db90b5
Certificate serial: 019420D61FAFB1174456A61C966B49EF05CA
Authority key identifier: 01:6E:5E:31:FA:87:16:AA:A5:4E:18:FC:DC:FE:D3:FC:94:DB:90:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AW5eMfqHFqqlThj83P7T_JTbkLU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/af4ef8-ed07-4acd-a42f-c96c2ce859e5/1/k-ax_kaXxZo4yswUA7zhssvuNfA.roa
Signing time: Wed 01 Jan 2025 07:48:11 +0000
ROA not before: Wed 01 Jan 2025 07:48:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206805
IP address blocks: 212.8.237.0/24 maxlen: 24
212.8.237.4/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 16 Jan 2025 09:08:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:1f:af:b1:17:44:56:a6:1c:96:6b:49:ef:05:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=016e5e31fa8716aaa54e18fcdcfed3fc94db90b5
Validity
Not Before: Jan 1 07:48:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=93e6b1fe4697c59a38cacc1403bce1b2cbee35f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:96:ed:8b:d1:d6:bf:7f:3a:de:b5:1d:27:39:
20:36:17:69:8c:2f:c9:bd:30:08:a7:a3:13:f4:6c:
8a:1c:1d:8b:2b:a9:fb:23:5b:a4:d6:0f:d6:fc:8d:
1b:64:ef:f2:d1:f5:9e:3e:f1:39:fc:6a:be:4f:64:
27:7a:e2:7c:98:2c:ae:02:81:b3:1e:e9:1b:d6:f0:
8d:cb:69:7d:2a:77:b9:7d:7d:82:93:dd:97:8e:32:
ad:c7:9f:db:92:a1:db:aa:b4:76:6c:8c:fe:6b:e5:
de:81:5c:58:b1:92:87:e4:d7:c1:c9:b3:41:cb:87:
0b:25:4c:bb:e8:9e:1d:aa:d8:b4:0b:60:a1:bb:ad:
ff:8b:94:84:f5:f3:7b:cd:ef:9c:c8:27:42:7c:55:
7a:ff:99:0a:7d:10:0c:a8:26:c1:13:35:a9:5f:09:
eb:c9:3b:7c:14:13:97:2f:1c:90:13:0b:f7:3a:44:
ca:65:52:23:72:21:97:2c:11:58:59:e2:25:59:52:
1f:5b:50:33:f8:f7:e5:75:e7:2f:1a:df:1d:4a:f5:
0d:2f:d2:65:ef:c0:1e:76:12:39:7b:d5:40:4a:a8:
1d:36:8c:00:43:81:8d:8e:35:e9:01:60:ea:6c:cf:
ee:63:15:6a:7e:09:a9:c2:20:c1:a6:33:df:7a:a6:
1a:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:E6:B1:FE:46:97:C5:9A:38:CA:CC:14:03:BC:E1:B2:CB:EE:35:F0
X509v3 Authority Key Identifier:
keyid:01:6E:5E:31:FA:87:16:AA:A5:4E:18:FC:DC:FE:D3:FC:94:DB:90:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AW5eMfqHFqqlThj83P7T_JTbkLU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/af4ef8-ed07-4acd-a42f-c96c2ce859e5/1/k-ax_kaXxZo4yswUA7zhssvuNfA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/af4ef8-ed07-4acd-a42f-c96c2ce859e5/1/AW5eMfqHFqqlThj83P7T_JTbkLU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.8.237.0/24
Signature Algorithm: sha256WithRSAEncryption
49:1e:f6:42:5e:6c:d7:2b:26:57:8f:ff:b1:ed:c9:a0:16:bd:
f6:55:99:3c:cc:fd:b4:9f:08:44:44:fd:08:6c:9a:2d:13:32:
aa:bf:b1:3f:89:6c:03:72:b7:8e:ea:a4:27:72:70:fc:c2:4d:
6b:90:7c:4c:ba:90:61:6d:ef:e2:9f:bb:55:c3:35:82:4d:f6:
ae:32:52:66:ad:70:f9:37:08:3e:fc:ad:77:aa:8f:28:72:f0:
bc:11:b5:90:0d:0e:00:d7:92:b5:ee:5b:28:ac:7c:ae:73:24:
08:d8:e5:28:8a:44:98:ee:7d:a8:ca:97:bd:d9:01:03:d6:72:
dc:b4:a6:62:82:4a:81:77:e6:18:67:d3:70:5c:45:49:25:eb:
92:bf:72:ce:c2:b2:40:85:4e:7d:ee:5b:c4:26:c2:2a:93:06:
a5:41:0f:c7:4d:52:70:59:23:f0:0a:79:2a:17:98:4c:e4:b9:
be:53:a7:29:7b:33:fa:c7:eb:d8:47:6a:da:71:56:64:aa:6c:
36:c7:51:02:bd:77:14:46:58:a1:8e:ec:e1:19:dd:1d:ce:e8:
6c:20:c1:ac:2d:35:39:24:29:d8:b7:ef:6b:7f:c3:69:28:f7:
d1:69:1b:9f:60:0e:5d:3b:f0:6e:e5:e2:6e:de:e6:b9:6d:c5:
d7:5c:79:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 13:28:19 2025 by rpki-client