![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a6631303a3a2f34382d3438203d3e203532303235.roa
File: 326130353a646663343a6631303a3a2f34382d3438203d3e203532303235.roa (raw, json)
Hash identifier: HgKx4zul7KpkzS4T3IdM5t9uNTq3mBK+Zux9n6P8zaY=
Subject key identifier: 70:A5:9A:91:64:29:24:12:47:92:89:D4:1E:D4:26:09:50:0F:30:70
Certificate issuer: /CN=0AAD221E4070989D4939FACA0F0981AB26E93895
Certificate serial: 36DE075ED405509A6FF3E09E7565364D0AE8C64D
Authority key identifier: 0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
Subject info access: rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a6631303a3a2f34382d3438203d3e203532303235.roa
Signing time: Mon 08 Apr 2024 04:17:06 +0000
ROA not before: Mon 08 Apr 2024 04:12:06 +0000
ROA not after: Mon 07 Apr 2025 04:17:06 +0000
asID: 52025
IP address blocks: 2a05:dfc4:f10::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 23 May 2024 12:48:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:de:07:5e:d4:05:50:9a:6f:f3:e0:9e:75:65:36:4d:0a:e8:c6:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0AAD221E4070989D4939FACA0F0981AB26E93895
Validity
Not Before: Apr 8 04:12:06 2024 GMT
Not After : Apr 7 04:17:06 2025 GMT
Subject: CN=70A59A9164292412479289D41ED42609500F3070
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:d2:d2:6b:65:82:dd:9f:43:46:2a:12:37:33:
8e:8c:5b:b1:f5:d6:71:fb:14:38:a4:0c:9f:04:65:
ba:25:17:3f:e4:60:a8:97:04:38:64:76:1c:1e:b5:
77:a0:7c:52:e8:c8:c6:a5:eb:2e:c1:98:fe:5f:80:
6a:43:f3:f1:59:ac:f6:ee:70:4e:9d:93:48:60:a2:
e6:3c:a0:13:cf:58:ad:58:25:16:a8:d7:92:fe:00:
19:f2:0e:2c:97:f8:54:a1:84:9e:d1:eb:3d:0e:96:
d7:24:f5:e6:ef:9a:13:79:87:69:5d:66:d5:70:48:
e9:8d:27:ff:07:fa:de:90:8e:ba:f2:b3:46:1a:98:
2f:da:40:ba:39:41:b3:83:f9:16:8e:76:1f:21:33:
7b:82:d1:07:98:cd:1e:bd:59:7c:c5:70:c7:d0:43:
54:75:c1:66:6e:61:29:fb:8e:7d:93:2b:62:a6:d3:
f2:87:d2:2f:25:c4:0d:71:c1:e1:da:e8:99:7b:33:
91:13:a6:03:1e:51:1a:07:10:5f:d0:80:bb:41:24:
ce:d1:bc:dc:cc:92:7e:45:b4:01:f0:2d:74:b9:4f:
8d:a5:ef:45:d8:a5:51:47:23:ac:6f:6b:cf:fb:57:
cc:79:53:19:48:eb:80:91:41:7b:26:7b:0f:20:a5:
2d:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:A5:9A:91:64:29:24:12:47:92:89:D4:1E:D4:26:09:50:0F:30:70
X509v3 Authority Key Identifier:
keyid:0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a6631303a3a2f34382d3438203d3e203532303235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc4:f10::/48
Signature Algorithm: sha256WithRSAEncryption
2b:34:18:11:ba:36:f8:ef:60:bf:64:d6:4e:2e:a0:30:46:37:
1c:87:81:3b:36:92:38:87:e6:82:a9:cd:68:00:ad:f7:c4:7f:
65:63:d7:52:cb:b0:5d:99:7c:71:ec:12:3b:ed:29:21:15:13:
21:27:0e:64:f3:aa:9a:7b:fd:c0:0f:9f:f0:7a:ee:df:77:b1:
c9:41:12:e7:19:65:4b:6f:10:41:0c:1a:b6:de:44:46:8a:68:
c2:29:56:81:a0:b1:91:ba:c0:ff:e9:bc:78:fc:2c:27:e1:73:
59:14:3d:a4:bf:06:a3:5e:99:f7:30:58:5a:ab:4e:56:29:6c:
50:ad:c1:4a:e3:ec:10:19:a7:b0:44:41:f1:d0:6f:0d:86:5b:
7c:0a:93:23:6d:9d:26:f3:1c:8f:54:3b:f5:3f:0a:f5:00:32:
92:1e:51:77:37:f8:3a:24:6e:f9:35:9d:c2:b8:7f:cf:65:a7:
c1:27:e4:7e:9c:82:ea:25:7e:42:a0:50:2c:1a:b3:1d:9b:5f:
16:be:c7:ef:8b:4c:0d:fa:a9:70:a3:72:45:b8:d8:82:7e:25:
78:5d:d3:40:ae:37:3e:7d:74:bf:a8:05:1f:e6:cd:89:5c:3e:
3e:85:27:30:68:e5:98:f9:88:00:cd:a3:49:eb:d8:3f:d1:d1:
69:d2:8e:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:05:18 2025 by rpki-client