Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS200732.roa
File: AS200732.roa (raw, json)
Hash identifier: PLX+EWCefLHkb9uGJinvewNOq6pYIMSUjffpI2hJkO0=
Subject key identifier: D9:C3:24:BE:2C:99:3A:9C:C5:F2:5C:56:9A:4C:78:77:AA:C4:64:C5
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 45ECB017BC3D2110570804029D1DBDF222F272BA
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS200732.roa
Signing time: Tue 05 Nov 2024 03:40:05 +0000
ROA not before: Tue 05 Nov 2024 03:35:05 +0000
ROA not after: Tue 04 Nov 2025 03:40:05 +0000
asID: 200732
IP address blocks: 2a06:a005:5bb::/48 maxlen: 48
2a06:a005:d26::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 13 Dec 2024 02:05:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:ec:b0:17:bc:3d:21:10:57:08:04:02:9d:1d:bd:f2:22:f2:72:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Nov 5 03:35:05 2024 GMT
Not After : Nov 4 03:40:05 2025 GMT
Subject: CN=D9C324BE2C993A9CC5F25C569A4C7877AAC464C5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:cb:70:85:6f:ce:fb:bf:bd:73:4d:cd:d1:a2:
51:84:ee:b5:c0:86:30:91:de:88:e6:2e:05:c4:9c:
0b:58:c6:89:4c:29:a1:65:0f:13:2d:5f:12:6d:72:
f5:a6:ef:1d:d4:6b:46:4b:52:44:7c:55:13:c2:f0:
96:12:71:5c:21:1c:55:62:61:f0:29:c8:54:f1:53:
66:62:07:3e:6b:8a:b5:2c:73:6b:89:9a:49:14:c2:
09:0e:05:ce:58:cd:0e:bc:17:c9:c9:b9:e5:b7:d4:
7e:a5:5b:8f:16:75:cd:33:19:97:c5:4b:32:08:03:
86:8d:69:fa:8a:30:bf:9a:54:5e:d1:2e:a5:33:2c:
d4:7f:4e:08:22:52:ac:1d:84:16:e0:b2:aa:c2:77:
fb:16:83:3c:f1:39:80:06:ae:3c:c8:a3:3d:38:b9:
d9:5f:0d:28:2b:c5:7e:b9:bf:da:a4:84:88:4e:07:
eb:73:3c:11:64:08:73:26:49:fe:f3:2a:3d:49:80:
0b:35:8c:e3:35:0c:1e:44:6a:07:77:e7:b8:64:f3:
4b:8a:0d:21:66:1f:18:b3:bb:a6:83:bf:fb:c7:1a:
a7:ed:c2:95:9e:4d:5f:31:1d:1e:f5:fc:31:fc:c3:
88:bf:bf:e7:83:0b:49:44:99:1d:ad:d3:df:e8:a1:
b6:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:C3:24:BE:2C:99:3A:9C:C5:F2:5C:56:9A:4C:78:77:AA:C4:64:C5
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS200732.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:5bb::/48
2a06:a005:d26::/48
Signature Algorithm: sha256WithRSAEncryption
c3:ae:3b:64:fd:f8:dd:72:bd:10:29:af:ec:83:0c:62:d0:1e:
ba:0a:b0:19:b8:a8:8f:99:22:76:df:1d:4c:de:e1:9f:98:1f:
38:8a:13:8b:7b:6a:4b:84:1b:a5:37:14:a6:59:d7:85:dd:68:
ef:45:87:f5:4e:90:7b:9d:51:a0:77:e6:6e:63:53:b8:4d:30:
a1:0d:83:9e:10:28:72:d5:e5:7b:01:45:23:23:1e:b0:b5:a6:
1f:f4:15:46:cc:da:d0:f5:8b:4a:14:bb:50:47:81:f2:b4:23:
4d:01:8e:30:af:0f:ca:82:59:93:8d:b4:35:f2:3e:e0:45:19:
c5:fa:8f:98:5a:91:0e:e5:fd:f4:6a:33:7a:d0:7b:07:cc:50:
9e:d2:6f:c5:62:7f:8a:2a:b8:e8:1f:2f:94:b7:38:51:c1:d5:
b7:0b:34:80:63:5e:95:bd:a9:fa:02:5a:cc:2f:7b:65:ad:ef:
a5:bb:e7:8d:f7:93:3f:ef:fb:a2:ab:5b:08:c8:d7:c7:32:c2:
64:e1:09:e0:a3:d3:6e:76:c6:b5:8c:be:70:23:f5:1c:3e:d1:
2b:28:b6:5e:8d:42:4c:e3:fe:c9:77:af:e4:5b:f4:2f:8d:8c:
0a:ce:ee:99:56:d2:9f:a4:78:d0:45:bc:a7:7b:55:f8:c9:30:
bc:68:00:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:07:31 2025 by rpki-client