Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS134478.roa
File: AS134478.roa (raw, json)
Hash identifier: 4vCo3Ej4LJqoQKajglrMOiNK/9WBVeaS9DGWG9Ium/w=
Subject key identifier: 30:7A:5A:51:10:54:5A:86:D2:56:D8:A6:40:C9:CB:93:82:99:83:CF
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 27CC872115612D45C22FED07C1C0298F893A0DFD
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS134478.roa
Signing time: Tue 05 Nov 2024 03:40:00 +0000
ROA not before: Tue 05 Nov 2024 03:35:00 +0000
ROA not after: Tue 04 Nov 2025 03:40:00 +0000
asID: 134478
IP address blocks: 2a06:a005:580::/44 maxlen: 48
2a06:a005:950::/44 maxlen: 48
2a06:a005:d00::/44 maxlen: 48
Validation: Failed, certificate revoked on Fri 13 Dec 2024 02:56:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:cc:87:21:15:61:2d:45:c2:2f:ed:07:c1:c0:29:8f:89:3a:0d:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Nov 5 03:35:00 2024 GMT
Not After : Nov 4 03:40:00 2025 GMT
Subject: CN=307A5A5110545A86D256D8A640C9CB93829983CF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:16:4f:13:04:41:a6:82:8d:ef:0f:e5:e3:95:
43:70:3c:dd:a2:fc:87:14:fe:61:09:9e:e7:9f:08:
65:1a:fb:35:45:f0:0a:b5:bc:b4:35:76:72:b7:a3:
9c:fb:35:44:e9:93:9f:1a:fc:54:6e:64:46:28:23:
fa:bd:f2:80:a3:f9:5b:b8:cf:30:84:29:eb:f9:1c:
81:7f:fa:68:2f:fd:98:3f:27:91:87:95:ad:6c:92:
ba:ef:37:5a:24:58:a6:e5:4a:71:c4:aa:c7:00:e3:
39:a7:17:c5:ef:b7:f5:df:66:cc:9b:46:32:11:fd:
d4:13:92:ed:85:e9:74:76:3f:7a:5f:46:a6:6b:86:
4b:0b:e2:92:c9:3f:26:55:a1:40:cf:6b:27:c1:8b:
90:11:5b:84:94:09:54:60:90:d7:d2:93:e9:a1:fd:
25:f1:59:e8:70:9e:15:04:22:fa:88:83:ef:b4:34:
5e:36:d9:f9:f0:30:b2:ac:b7:1e:13:27:c9:c3:fd:
d2:09:12:81:d0:e7:85:52:8c:df:2b:f0:f5:19:c8:
b7:33:fc:ef:42:72:ad:5d:32:d3:7e:c7:75:71:71:
e2:d0:f6:d7:a2:7b:41:62:65:e0:6f:54:b3:bd:1b:
1b:61:bf:09:a5:91:de:ad:a6:9c:87:32:23:89:e4:
59:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:7A:5A:51:10:54:5A:86:D2:56:D8:A6:40:C9:CB:93:82:99:83:CF
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS134478.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:580::/44
2a06:a005:950::/44
2a06:a005:d00::/44
Signature Algorithm: sha256WithRSAEncryption
39:f9:b2:6a:1d:ff:cc:97:de:04:f1:f2:66:ff:7d:6d:1f:8c:
d7:b2:7b:53:66:94:48:8b:b6:12:ef:7a:41:e6:31:63:cf:59:
94:77:d4:22:0f:6c:51:61:a3:9b:23:a4:14:8a:7d:79:73:8f:
f3:8c:d5:36:cf:73:8f:7c:b4:f2:7c:b6:6c:05:25:77:e9:87:
35:da:bb:54:d3:9b:07:98:51:f2:93:c0:d0:82:f1:69:ce:2c:
cc:90:57:4a:bf:c7:85:d4:c1:b8:fb:d0:eb:08:1e:42:54:38:
e3:3f:5e:a2:3c:e7:c0:d6:50:da:67:25:09:37:5e:7a:34:ca:
26:2e:b7:b6:8d:0d:d4:e7:6e:05:c0:f8:43:fc:a5:a1:53:76:
02:20:b3:20:9c:55:21:72:cc:88:bb:59:52:76:85:26:bc:b5:
8f:79:25:59:fb:51:09:42:e2:8f:9a:2b:82:d9:13:8d:42:48:
8e:90:07:fa:67:be:fd:f9:43:72:47:fd:fd:19:60:c4:40:16:
c0:21:89:ef:0d:e7:b5:ea:00:9c:03:bd:0d:d1:01:8a:58:1d:
f2:03:b7:1f:66:7a:c8:e9:11:97:f7:64:11:e8:56:30:40:e3:
7c:cd:6a:4c:79:c1:3f:8f:3d:4a:cf:27:bb:7c:b2:54:c3:bc:
45:71:4c:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 01:46:16 2025 by rpki-client