Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS150221.roa
File: AS150221.roa (raw, json)
Hash identifier: YcLrWqD6xo3My3iK5caWbaR9X8cjm0TgxTw2YhYa4MU=
Subject key identifier: AB:23:26:1E:B6:E2:3A:2F:E7:5B:0F:AE:B2:D0:76:5A:69:3D:30:A6
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 19F59F1525CCB4CF452B990AA7B3F14BBC5D9F8C
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS150221.roa
Signing time: Thu 14 Nov 2024 02:40:12 +0000
ROA not before: Thu 14 Nov 2024 02:35:12 +0000
ROA not after: Thu 13 Nov 2025 02:40:12 +0000
asID: 150221
IP address blocks: 2a06:a005:b66::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 13 Dec 2024 02:56:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:f5:9f:15:25:cc:b4:cf:45:2b:99:0a:a7:b3:f1:4b:bc:5d:9f:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Nov 14 02:35:12 2024 GMT
Not After : Nov 13 02:40:12 2025 GMT
Subject: CN=AB23261EB6E23A2FE75B0FAEB2D0765A693D30A6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:7a:f1:67:ed:45:6a:d6:3a:26:98:21:a7:f3:
dc:eb:e4:9d:b8:48:15:87:5e:5b:3a:67:55:bf:d3:
af:23:44:30:3d:91:9c:4e:a9:e7:60:40:ea:6f:11:
53:00:83:e2:e3:15:15:aa:04:5f:e6:80:68:0f:5a:
ed:23:f5:a2:8c:a8:69:b0:48:21:73:d1:b8:a9:fe:
eb:80:97:d7:0d:04:55:36:b6:fa:1c:30:e0:63:0d:
0a:de:c4:24:4d:45:33:37:fb:7c:31:19:13:b9:f4:
81:b8:b7:d6:ed:e3:1c:8f:d1:d3:ba:b5:e4:e5:85:
93:52:e6:ee:0d:55:22:45:8c:a2:ef:dd:e6:c7:93:
52:6d:29:7a:5e:e4:e0:95:df:91:7f:79:ca:c3:32:
ce:4a:5e:8a:6e:5e:6f:31:75:c2:a1:41:18:56:6b:
7c:5a:25:3c:38:92:d6:ef:42:8a:46:2b:4f:48:1a:
55:24:11:29:53:70:cf:6e:3b:ef:16:72:18:7e:a9:
0f:08:f1:32:5d:8d:c5:85:bd:a8:1e:24:f8:70:aa:
c7:ff:ac:ed:14:d5:73:8f:ff:ba:99:24:5e:1f:6b:
d0:74:04:01:da:c5:34:2f:62:75:24:b2:fa:ed:51:
d9:f5:79:78:96:44:71:75:e2:50:2b:46:98:a1:97:
e8:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:23:26:1E:B6:E2:3A:2F:E7:5B:0F:AE:B2:D0:76:5A:69:3D:30:A6
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS150221.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:b66::/48
Signature Algorithm: sha256WithRSAEncryption
03:66:fd:1c:cf:ea:f7:81:b2:cc:28:18:da:cf:b1:1c:4c:e9:
5b:57:2e:cf:71:b8:e9:a4:0e:03:d0:46:e3:02:27:cb:f2:a0:
2e:c4:83:f8:53:de:5d:b3:cf:31:32:dd:0c:ce:81:b4:24:ae:
1b:ea:d3:a4:d9:01:52:7b:be:7a:56:ed:e9:2f:21:22:6d:11:
07:fa:f4:ea:48:00:a4:c0:4a:90:f9:54:90:2b:dd:ec:54:63:
d2:c7:41:e0:64:8a:8f:0f:2b:59:93:a3:a7:4c:87:ea:16:8d:
c1:4c:cd:13:ce:1a:8e:f4:a6:14:42:8d:36:44:30:17:f3:0e:
d6:15:04:46:24:c3:4b:45:18:2f:7d:73:03:1d:e0:36:37:cd:
2d:1d:3a:73:b9:52:ed:d7:f3:9c:1e:e6:83:4c:4c:1f:b1:f4:
7c:1b:b7:2f:70:ca:94:77:a5:66:2e:58:87:fa:b5:8e:56:12:
c1:f6:a1:06:57:30:5e:56:18:a5:b0:32:30:77:a2:6b:9b:89:
c8:02:a0:b4:0b:f7:75:ce:34:34:84:0b:de:c0:6b:76:dd:de:
5a:55:d4:53:8d:41:f9:9a:4a:a0:0b:6c:e5:35:f9:05:21:e0:
c7:38:28:ca:49:7d:c7:ea:3f:72:11:83:dd:37:a4:10:f8:0d:
07:7e:f7:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:29:38 2025 by rpki-client