![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS174.roa
File: AS174.roa (raw, json)
Hash identifier: sWwZQqO9q2MjO+5kaD2yM7oQSFxs6TsqxfPBtMDz7IM=
Subject key identifier: D0:22:62:82:39:11:FA:C1:0F:1D:7A:F2:E3:12:FD:EB:6E:F8:83:9C
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 2B86E7DAF97AE8F8BB4D125DD19BECC2C4ADB433
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS174.roa
Signing time: Thu 27 Jun 2024 20:40:11 +0000
ROA not before: Thu 27 Jun 2024 20:35:11 +0000
ROA not after: Thu 26 Jun 2025 20:40:11 +0000
asID: 174
IP address blocks: 2a09:54c0::/32 maxlen: 48
2a0a:6046::/32 maxlen: 48
Validation: Failed, certificate revoked on Sun 04 Aug 2024 19:39:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:86:e7:da:f9:7a:e8:f8:bb:4d:12:5d:d1:9b:ec:c2:c4:ad:b4:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Jun 27 20:35:11 2024 GMT
Not After : Jun 26 20:40:11 2025 GMT
Subject: CN=D02262823911FAC10F1D7AF2E312FDEB6EF8839C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:d8:26:ef:56:0a:e0:ec:14:e4:4a:d8:16:b7:
f1:ba:34:cd:36:94:0a:64:3b:7b:ec:f2:16:e7:33:
3b:14:60:94:ee:43:06:9e:72:b4:87:d0:90:0e:c6:
f0:63:99:e1:a5:3a:23:17:16:77:50:72:11:15:d7:
ba:64:c1:dd:6b:11:c7:db:c0:32:02:ee:c1:75:a3:
71:20:4a:23:bf:81:94:ed:ea:9b:23:80:e3:70:e4:
e5:5b:62:1d:37:9c:ff:d3:7c:7a:37:2b:f6:63:28:
a3:0f:8a:1c:ea:53:80:51:26:df:21:b9:e4:51:22:
4e:f2:15:04:32:1b:d4:26:6c:05:e4:42:04:bd:d2:
5a:26:f6:53:2e:d2:3b:d6:e8:c0:b3:4f:42:47:0d:
68:c8:14:59:c0:30:f3:2a:70:9e:c5:df:1e:23:f0:
b8:2d:0c:4d:b1:29:98:6c:d9:0b:d4:56:eb:fd:29:
56:a2:c9:43:31:1b:6c:a7:25:2a:cd:ae:67:14:e5:
96:9e:29:f2:ed:42:7e:77:12:f5:54:09:83:b4:65:
cd:4c:c1:77:f8:49:d2:e5:1d:12:e1:50:55:8c:f1:
8e:19:f1:22:68:20:3b:0e:20:3c:97:a8:c9:32:3e:
5c:c8:21:16:b3:59:7c:cb:dc:e2:7e:e6:20:7e:1e:
69:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:22:62:82:39:11:FA:C1:0F:1D:7A:F2:E3:12:FD:EB:6E:F8:83:9C
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS174.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:54c0::/32
2a0a:6046::/32
Signature Algorithm: sha256WithRSAEncryption
19:87:7c:2e:9c:24:a5:38:15:15:ee:21:cd:4d:72:83:df:91:
a6:10:ee:65:7c:db:5b:78:a8:b9:8d:5a:15:70:69:da:86:f2:
65:a4:f8:9b:86:56:e7:e7:db:81:da:83:f2:fe:d2:75:6c:07:
86:ca:a4:37:d0:ba:e7:79:aa:c9:94:e0:7c:2d:2b:10:9c:41:
74:fc:7e:fc:a9:60:f1:53:44:bb:9d:de:c8:de:37:3b:26:50:
39:12:a6:c9:73:4b:be:47:d9:05:45:b1:33:9c:39:c5:e6:43:
87:44:b2:66:e0:f7:e2:1d:71:6f:fe:76:98:36:b9:15:d7:5e:
6c:fd:b6:a1:3e:d3:37:03:c1:59:0b:b1:a8:29:7c:af:9b:86:
7c:c2:de:a8:09:f0:03:f6:15:6f:b4:7c:ec:92:97:b2:e6:b7:
b3:42:7b:2f:cc:5e:63:6a:43:86:96:c0:20:7c:ac:e9:f8:34:
f1:0e:52:2b:38:90:41:82:9b:b8:36:a4:ba:b2:a1:f6:92:08:
d4:c9:5d:4b:1d:a1:07:91:7b:04:33:cf:d2:a9:b4:1e:fa:90:
20:a2:d4:22:1a:c8:d2:91:b7:df:21:25:40:20:60:b9:97:8b:
99:75:17:0a:0a:20:41:6d:8f:ec:52:0f:d5:81:ed:60:be:24:
f4:a7:55:b3
-----BEGIN CERTIFICATE-----
MIIE6jCCA9KgAwIBAgIUK4bn2vl66Pi7TRJd0ZvswsSttDMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzk5NDM4ZjFiMTc2MmFlZWY4YTM1Y2Y0ZTZjYmFlOTc2
OTliZDAyMDAeFw0yNDA2MjcyMDM1MTFaFw0yNTA2MjYyMDQwMTFaMDMxMTAvBgNV
BAMTKEQwMjI2MjgyMzkxMUZBQzEwRjFEN0FGMkUzMTJGREVCNkVGODgzOUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCf2CbvVgrg7BTkStgWt/G6NM02
lApkO3vs8hbnMzsUYJTuQwaecrSH0JAOxvBjmeGlOiMXFndQchEV17pkwd1rEcfb
wDIC7sF1o3EgSiO/gZTt6psjgONw5OVbYh03nP/TfHo3K/ZjKKMPihzqU4BRJt8h
ueRRIk7yFQQyG9QmbAXkQgS90lom9lMu0jvW6MCzT0JHDWjIFFnAMPMqcJ7F3x4j
8LgtDE2xKZhs2QvUVuv9KVaiyUMxG2ynJSrNrmcU5ZaeKfLtQn53EvVUCYO0Zc1M
wXf4SdLlHRLhUFWM8Y4Z8SJoIDsOIDyXqMkyPlzIIRazWXzL3OJ+5iB+HmmRAgMB
AAGjggH0MIIB8DAdBgNVHQ4EFgQU0CJigjkR+sEPHXry4xL96274g5wwHwYDVR0j
BBgwFoAUeZQ48bF2Ku74o1z05suul2mb0CAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvMi83OTk0MzhGMUIx
NzYyQUVFRjhBMzVDRjRFNkNCQUU5NzY5OUJEMDIwLmNybDBkBggrBgEFBQcBAQRY
MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZVpRNDhiRjJLdTc0bzF6MDVzdXVsMm1iMENBLmNlcjBtBggrBgEF
BQcBCwRhMF8wXQYIKwYBBQUHMAuGUXJzeW5jOi8vcnBraS1ycHMuYXJpbi5uZXQv
cmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5MWJlM2Y5ZC8yL0FT
MTc0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/
BBgwFjAUBAIAAjAOAwUAKglUwAMFACoKYEYwDQYJKoZIhvcNAQELBQADggEBABmH
fC6cJKU4FRXuIc1NcoPfkaYQ7mV821t4qLmNWhVwadqG8mWk+JuGVufn24Hag/L+
0nVsB4bKpDfQuud5qsmU4HwtKxCcQXT8fvypYPFTRLud3sjeNzsmUDkSpslzS75H
2QVFsTOcOcXmQ4dEsmbg9+IdcW/+dpg2uRXXXmz9tqE+0zcDwVkLsagpfK+bhnzC
3qgJ8AP2FW+0fOySl7Lmt7NCey/MXmNqQ4aWwCB8rOn4NPEOUis4kEGCm7g2pLqy
ofaSCNTJXUsdoQeRewQzz9KptB76kCCi1CIayNKRt98hJUAgYLmXi5l1FwoKIEFt
j+xSD9WB7WC+JPSnVbM=
-----END CERTIFICATE-----
Generated at Sun Aug 4 22:04:16 2024 by rpki-client on console-ams.rpki-client.org