Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS201097.roa
File: AS201097.roa (raw, json)
Hash identifier: QbNzH+3jF52A9jlHrOoidJzhyKGkHtXO1ARBZpCiSx4=
Subject key identifier: 23:9D:71:43:FC:0C:83:A4:40:B5:1D:17:18:D2:29:9B:B8:27:86:48
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 06A3D350019AA5E33D00C9E8D951B4172CC4DD0D
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS201097.roa
Signing time: Tue 05 Nov 2024 03:40:05 +0000
ROA not before: Tue 05 Nov 2024 03:35:05 +0000
ROA not after: Tue 04 Nov 2025 03:40:05 +0000
asID: 201097
IP address blocks: 2a06:a005:29f0::/44 maxlen: 48
Validation: Failed, certificate revoked on Fri 13 Dec 2024 02:56:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:a3:d3:50:01:9a:a5:e3:3d:00:c9:e8:d9:51:b4:17:2c:c4:dd:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Nov 5 03:35:05 2024 GMT
Not After : Nov 4 03:40:05 2025 GMT
Subject: CN=239D7143FC0C83A440B51D1718D2299BB8278648
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:f7:f9:7b:35:58:97:7b:da:e2:09:e7:55:f4:
5a:47:70:11:46:25:9c:0d:eb:74:27:2f:dc:35:f9:
ca:f3:46:38:e1:64:19:1d:be:f8:d1:de:f0:ef:be:
7f:a0:f6:64:20:b5:78:d9:88:e8:a7:6c:1a:35:eb:
16:11:1f:96:01:e7:1a:a8:f6:bf:73:9b:89:93:36:
90:e6:65:10:bb:31:4e:f6:cd:d3:6e:2a:eb:68:34:
aa:6c:93:43:1c:77:1c:99:8c:4e:71:d5:c9:ea:29:
3e:26:d8:b1:99:1b:f3:a3:1f:47:ca:6e:97:6a:dc:
d4:bc:09:e8:f8:bd:8f:b9:d8:2a:e8:80:05:b0:55:
4a:d6:69:7c:72:80:47:71:ee:29:b0:8f:c0:93:b8:
f2:81:22:5f:a6:ba:0b:57:6a:b9:b1:08:9f:05:16:
8b:72:2d:cb:b3:65:16:fc:59:fa:91:0c:c5:4d:c0:
82:7a:41:0a:8d:4d:10:61:c0:a0:a0:e5:a7:40:f3:
83:3b:6d:17:18:8d:0a:7a:21:7d:81:b1:e3:00:79:
a6:5e:e1:11:f9:f8:cf:1d:78:e3:e8:26:ff:0e:48:
d2:a7:3b:17:37:7e:3f:c7:7a:3b:4b:9e:2d:cd:29:
93:01:3e:46:f0:74:1f:c0:c4:b1:2e:be:7c:b5:80:
0e:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:9D:71:43:FC:0C:83:A4:40:B5:1D:17:18:D2:29:9B:B8:27:86:48
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS201097.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:29f0::/44
Signature Algorithm: sha256WithRSAEncryption
c0:bb:4c:51:55:6c:f4:2f:47:14:16:5f:1a:a8:03:7f:75:a1:
6b:5a:1a:7b:a6:2c:a4:a6:96:f7:24:f7:06:86:20:78:9c:19:
84:89:17:8f:8e:87:1f:77:91:c1:61:ae:ab:8e:d6:97:1f:0c:
4f:c6:55:b1:ec:f8:ae:9a:f2:71:f9:09:89:d1:43:c8:25:9b:
02:8a:8b:3f:42:e8:58:7d:4f:75:e7:b6:99:b5:cd:57:99:d3:
fd:b8:3d:33:db:88:40:16:24:d9:b4:59:cd:ee:32:09:12:56:
11:2b:13:ca:71:a8:1e:61:34:a7:6f:b3:6d:1d:53:94:e1:03:
04:ee:66:98:21:56:c0:27:9d:da:28:ae:e4:a6:be:78:13:ac:
47:02:d4:bf:14:44:aa:85:58:3e:94:dd:14:bf:46:87:50:52:
27:fd:28:d5:b4:75:30:ff:65:89:77:b1:fe:ca:fe:a5:28:10:
fa:6f:a9:98:92:cc:04:c7:37:47:4f:52:98:ce:9b:50:e7:53:
f8:ef:bb:31:42:a9:45:4b:db:bd:dd:3c:1e:17:39:29:79:3c:
8c:8b:5a:07:b0:45:46:80:be:7a:88:4e:1f:d1:0c:67:5d:3e:
9e:e2:dc:ef:83:57:26:49:3a:c3:9f:1c:ed:18:50:52:bb:0d:
12:90:94:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 05:14:19 2025 by rpki-client