![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS149795.roa
File: AS149795.roa (raw, json)
Hash identifier: 4ZuM4EKbcu3wMuEwUXSV/xsXLWEzUtT07HdFd1/3pa8=
Subject key identifier: 54:35:84:34:65:E1:FA:49:99:04:03:91:14:DC:07:3D:61:8B:E0:BF
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 37E2A813A3A3E77F0F7277160B3C3899DEECD013
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS149795.roa
Signing time: Tue 05 Nov 2024 03:40:04 +0000
ROA not before: Tue 05 Nov 2024 03:35:04 +0000
ROA not after: Tue 04 Nov 2025 03:40:04 +0000
asID: 149795
IP address blocks: 2a06:a005:6e0::/44 maxlen: 48
Validation: Failed, certificate revoked on Fri 13 Dec 2024 02:56:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:e2:a8:13:a3:a3:e7:7f:0f:72:77:16:0b:3c:38:99:de:ec:d0:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Nov 5 03:35:04 2024 GMT
Not After : Nov 4 03:40:04 2025 GMT
Subject: CN=5435843465E1FA499904039114DC073D618BE0BF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f3:35:05:ca:a0:5e:24:0c:f2:3b:ec:75:65:
7a:ed:06:64:75:1d:8c:0b:dd:68:c6:85:61:9b:fe:
71:53:07:ea:d1:3e:5e:85:0f:5f:1a:de:b1:a2:c1:
cf:3b:2d:1c:e0:0b:e3:af:8f:c7:07:15:3c:aa:ea:
57:af:0e:4a:ca:23:2c:d0:4c:94:d3:60:7d:ed:43:
b2:42:37:3a:d2:5a:bc:f6:92:99:3f:a5:2c:5e:49:
2a:1a:8e:0a:80:ad:3f:bd:af:6d:22:9b:73:50:be:
de:07:7a:fd:28:eb:4e:c1:d9:e3:e1:62:30:9e:f2:
5f:2e:e3:e2:e2:34:de:30:0e:e5:e6:76:56:cc:4f:
36:62:6c:5b:bf:41:39:26:c5:7f:5b:56:ac:92:ac:
4c:c9:2e:1d:65:dd:5e:9a:cb:fd:4c:72:25:6c:c6:
d1:bf:dc:41:69:5d:e1:99:6b:07:56:d0:8e:c4:d5:
2d:a6:b0:67:2a:9d:0a:dc:5d:be:a9:a7:a0:48:4a:
5e:f4:31:04:d0:cf:1b:f6:cb:22:35:b2:7e:84:3f:
eb:c0:95:47:e0:f5:2a:c3:0d:5f:4f:12:d4:34:55:
71:f6:ed:14:2e:46:67:e1:9e:5d:f5:75:11:f5:28:
dc:84:24:2b:9d:ea:21:f6:8c:cd:78:5e:9e:80:6f:
37:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:35:84:34:65:E1:FA:49:99:04:03:91:14:DC:07:3D:61:8B:E0:BF
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS149795.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:6e0::/44
Signature Algorithm: sha256WithRSAEncryption
45:3b:db:b6:d2:56:13:9a:33:ad:dd:e0:ce:59:d5:c5:ce:11:
fe:64:e5:84:d9:18:ad:7c:76:5d:e8:68:e8:6e:51:d8:0c:0a:
db:56:80:67:35:9b:fd:84:14:d3:bf:21:d1:a2:2c:b9:ee:22:
ea:06:73:3f:d1:51:50:3e:3f:97:78:59:4d:06:ed:fe:da:40:
15:a6:6d:19:80:67:48:02:41:80:f7:8c:c5:37:98:af:a6:d1:
fc:01:eb:61:dc:8d:16:f4:e9:63:1d:08:bd:37:6d:16:36:63:
f0:68:1d:68:98:c4:9c:21:8b:d9:fe:c9:2d:ca:e7:9f:70:e4:
4b:02:da:45:5e:f8:30:53:ed:2d:29:81:2b:ac:08:e8:15:86:
97:ba:c1:e5:b9:d4:18:10:fd:f2:ba:84:75:56:23:fb:da:ed:
fd:33:29:63:37:96:91:d3:fe:6d:f6:f9:19:1a:ea:a0:3a:84:
02:59:8c:0f:91:13:9e:b1:cd:33:af:a1:3b:4d:79:59:90:7a:
31:df:47:4a:55:6a:65:94:54:22:59:ef:be:83:53:d1:e2:3b:
a0:71:69:12:67:ff:37:fa:bb:39:71:2a:36:52:75:44:db:3b:
8f:1c:b0:79:8a:63:68:c2:c0:7e:68:fa:43:6b:da:7e:0f:c0:
d3:4c:d1:71
-----BEGIN CERTIFICATE-----
MIIE6DCCA9CgAwIBAgIUN+KoE6Oj538PcncWCzw4md7s0BMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzk5NDM4ZjFiMTc2MmFlZWY4YTM1Y2Y0ZTZjYmFlOTc2
OTliZDAyMDAeFw0yNDExMDUwMzM1MDRaFw0yNTExMDQwMzQwMDRaMDMxMTAvBgNV
BAMTKDU0MzU4NDM0NjVFMUZBNDk5OTA0MDM5MTE0REMwNzNENjE4QkUwQkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCs8zUFyqBeJAzyO+x1ZXrtBmR1
HYwL3WjGhWGb/nFTB+rRPl6FD18a3rGiwc87LRzgC+Ovj8cHFTyq6levDkrKIyzQ
TJTTYH3tQ7JCNzrSWrz2kpk/pSxeSSoajgqArT+9r20im3NQvt4Hev0o607B2ePh
YjCe8l8u4+LiNN4wDuXmdlbMTzZibFu/QTkmxX9bVqySrEzJLh1l3V6ay/1MciVs
xtG/3EFpXeGZawdW0I7E1S2msGcqnQrcXb6pp6BISl70MQTQzxv2yyI1sn6EP+vA
lUfg9SrDDV9PEtQ0VXH27RQuRmfhnl31dRH1KNyEJCud6iH2jM14Xp6AbzcjAgMB
AAGjggHyMIIB7jAdBgNVHQ4EFgQUVDWENGXh+kmZBAORFNwHPWGL4L8wHwYDVR0j
BBgwFoAUeZQ48bF2Ku74o1z05suul2mb0CAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvMi83OTk0MzhGMUIx
NzYyQUVFRjhBMzVDRjRFNkNCQUU5NzY5OUJEMDIwLmNybDBkBggrBgEFBQcBAQRY
MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZVpRNDhiRjJLdTc0bzF6MDVzdXVsMm1iMENBLmNlcjBwBggrBgEF
BQcBCwRkMGIwYAYIKwYBBQUHMAuGVHJzeW5jOi8vcnBraS1ycHMuYXJpbi5uZXQv
cmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5MWJlM2Y5ZC8yL0FT
MTQ5Nzk1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEH
AQH/BBMwETAPBAIAAjAJAwcEKgagBQbgMA0GCSqGSIb3DQEBCwUAA4IBAQBFO9u2
0lYTmjOt3eDOWdXFzhH+ZOWE2RitfHZd6GjoblHYDArbVoBnNZv9hBTTvyHRoiy5
7iLqBnM/0VFQPj+XeFlNBu3+2kAVpm0ZgGdIAkGA94zFN5ivptH8Aeth3I0W9Olj
HQi9N20WNmPwaB1omMScIYvZ/sktyuefcORLAtpFXvgwU+0tKYErrAjoFYaXusHl
udQYEP3yuoR1ViP72u39MyljN5aR0/5t9vkZGuqgOoQCWYwPkROesc0zr6E7TXlZ
kHox30dKVWpllFQiWe++g1PR4jugcWkSZ/83+rs5cSo2UnVE2zuPHLB5imNowsB+
aPpDa9p+D8DTTNFx
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:14:47 2025 by rpki-client