Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS139328.roa
File: AS139328.roa (raw, json)
Hash identifier: 4HdIx9L7Qx366fdm0jX1OwcRzgX3D+7UDO7bNyapwVM=
Subject key identifier: AC:05:2C:A9:24:A6:AF:5D:77:4A:00:ED:63:29:29:07:4B:38:D2:7E
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 3A2CFF00C92A6D85626D433BABCD683FEDF738A0
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS139328.roa
Signing time: Tue 05 Nov 2024 03:40:04 +0000
ROA not before: Tue 05 Nov 2024 03:35:04 +0000
ROA not after: Tue 04 Nov 2025 03:40:04 +0000
asID: 139328
IP address blocks: 2a06:a005:4c0::/44 maxlen: 48
2a06:a005:510::/44 maxlen: 48
2a06:a005:520::/44 maxlen: 48
2a06:a005:530::/44 maxlen: 48
2a06:a005:540::/44 maxlen: 48
2a06:a005:550::/44 maxlen: 48
2a06:a005:660::/44 maxlen: 48
2a06:a005:1150::/44 maxlen: 48
Validation: Failed, certificate revoked on Fri 13 Dec 2024 02:56:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:2c:ff:00:c9:2a:6d:85:62:6d:43:3b:ab:cd:68:3f:ed:f7:38:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Nov 5 03:35:04 2024 GMT
Not After : Nov 4 03:40:04 2025 GMT
Subject: CN=AC052CA924A6AF5D774A00ED632929074B38D27E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:94:6d:d1:c4:fd:e1:d8:1c:fa:2f:e7:4b:a7:
3d:99:dc:ce:05:e0:20:76:83:13:02:2d:51:76:06:
01:1a:9e:e8:97:07:73:fb:36:92:ba:dc:92:1b:eb:
45:64:41:32:61:67:d1:fd:58:f0:b0:53:31:a0:73:
22:b0:87:1c:dd:b2:77:b3:e4:06:49:33:5d:6a:00:
55:f9:e3:ef:5c:c3:73:19:7d:9c:89:8f:06:79:72:
75:c9:55:fc:94:a1:0e:08:bb:a3:d0:93:1e:3d:18:
f8:1d:9e:68:ac:9f:a5:9f:23:04:e8:4f:0d:e6:99:
ea:d8:a7:bc:d0:ad:31:5a:1b:b5:30:82:79:3a:eb:
dc:ae:64:2f:26:5a:90:13:c4:74:7b:4e:fe:1c:32:
6d:53:ea:46:8c:b1:0b:d9:3f:03:07:49:1c:55:24:
2e:55:80:a5:82:64:09:29:8c:88:dd:d9:bf:61:e7:
56:b7:f2:f8:16:08:b9:a6:61:d0:26:2f:fb:8e:bd:
08:19:d9:fd:50:8c:24:5f:1e:5b:01:e9:7e:2f:2e:
9d:16:35:aa:f8:e7:81:fd:b4:80:69:79:01:16:42:
f7:45:ce:9c:ba:22:26:3c:c6:b9:df:e0:98:37:c1:
2b:de:00:d0:a3:5f:d5:bd:35:53:24:76:42:70:7b:
9c:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:05:2C:A9:24:A6:AF:5D:77:4A:00:ED:63:29:29:07:4B:38:D2:7E
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS139328.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:4c0::/44
2a06:a005:510::-2a06:a005:55f:ffff:ffff:ffff:ffff:ffff
2a06:a005:660::/44
2a06:a005:1150::/44
Signature Algorithm: sha256WithRSAEncryption
ca:a7:d1:e8:d3:66:f3:e8:b4:c4:c3:e0:67:ee:b8:08:32:6f:
90:ac:36:74:cb:cd:80:ee:44:fa:55:37:f5:07:ea:28:09:81:
31:34:ea:9b:dc:69:88:98:c1:e5:f6:c2:fd:6c:57:ee:62:d7:
1d:b6:aa:66:16:c9:3d:9b:57:05:76:0c:7e:09:40:6f:94:0e:
11:1c:ef:aa:4a:04:76:4f:36:03:ef:81:57:80:52:cf:64:aa:
4d:11:7b:d0:78:29:31:9a:06:6e:2d:bd:e0:02:13:16:fc:62:
38:54:be:5d:be:b4:25:f4:f2:fb:c4:62:9b:14:d1:e3:4c:1b:
ec:55:22:b8:2a:0c:cb:53:48:37:34:65:7f:01:8f:c6:23:fe:
74:64:3a:c2:a0:5e:7e:d6:cf:d5:3d:b5:35:f8:31:65:e5:b3:
ee:de:73:88:84:f2:0d:5d:1b:17:1c:9c:c2:cd:7f:64:44:e8:
a4:78:9a:55:79:8c:61:13:a2:7d:7d:98:3c:8f:3e:3f:ba:cf:
dc:f2:0f:10:07:95:56:49:5d:fa:a0:a4:4f:54:35:d5:b4:03:
eb:2d:32:8b:69:87:51:eb:53:51:aa:d6:57:e4:0e:cc:5e:75:
1c:98:9e:f5:8a:0d:f0:5d:91:40:eb:9c:bb:91:51:be:71:f2:
5d:22:fb:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:05:21 2025 by rpki-client