Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS201251.roa
File: AS201251.roa (raw, json)
Hash identifier: eLFBoBZXHcgHFEWGLCA0A6CV7SHpj0it8gH64aR+1pY=
Subject key identifier: 2F:BE:20:A2:D4:89:56:A0:DF:CA:53:C7:D2:53:CE:8E:A1:86:3C:48
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 037779809D80245412B73DEFFBAC6EE71DD0CC20
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS201251.roa
Signing time: Tue 05 Nov 2024 03:40:01 +0000
ROA not before: Tue 05 Nov 2024 03:35:01 +0000
ROA not after: Tue 04 Nov 2025 03:40:01 +0000
asID: 201251
IP address blocks: 2a06:a005:22b0::/44 maxlen: 48
Validation: Failed, certificate revoked on Fri 13 Dec 2024 02:56:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:77:79:80:9d:80:24:54:12:b7:3d:ef:fb:ac:6e:e7:1d:d0:cc:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Nov 5 03:35:01 2024 GMT
Not After : Nov 4 03:40:01 2025 GMT
Subject: CN=2FBE20A2D48956A0DFCA53C7D253CE8EA1863C48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:4e:de:80:20:4f:50:e4:ac:40:79:41:4a:84:
1b:1a:ef:b1:14:2c:48:d7:05:8a:ef:0b:49:ad:0d:
94:b8:de:84:31:3c:a1:9a:b2:3a:31:c0:3f:b5:bb:
f0:92:0c:97:2f:00:38:e8:8a:13:5e:a8:da:14:12:
c4:2d:08:70:5a:93:dd:f3:6a:1b:fe:77:50:44:20:
b2:fa:3f:7b:e3:72:d0:38:10:cd:ce:36:9c:b9:91:
4d:b5:b5:5f:ef:86:5c:f8:03:8d:9f:37:ec:cc:7e:
d6:5f:a3:18:34:8c:e0:fb:4c:06:62:f8:19:6d:46:
bb:0b:8b:57:98:ae:35:4e:01:14:b1:05:c3:90:e6:
71:e4:86:c2:03:5f:94:2a:81:45:42:dd:2e:7a:4a:
ab:a9:58:eb:e3:c5:fd:45:87:37:11:4d:e5:fd:54:
0f:72:6f:ed:b9:a7:13:0e:64:d9:3f:f8:ac:ef:b3:
4c:81:9d:6c:e4:b6:23:f7:a6:6d:9f:64:49:c4:eb:
24:d0:da:53:ab:e4:77:f2:2a:9c:7f:ce:46:fd:69:
02:4c:b3:37:6d:17:2c:f4:c9:bc:90:9f:ed:c6:97:
4e:7f:3d:c6:9c:c4:57:b7:f1:90:07:fd:89:14:13:
cf:87:2d:5b:5d:38:b7:82:e0:29:f2:9d:57:b8:59:
10:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:BE:20:A2:D4:89:56:A0:DF:CA:53:C7:D2:53:CE:8E:A1:86:3C:48
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS201251.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:22b0::/44
Signature Algorithm: sha256WithRSAEncryption
41:f9:23:06:93:e2:7a:56:06:fe:4f:d1:89:b2:19:c3:ec:66:
42:b3:8a:d9:8b:e8:50:89:de:5b:16:4d:18:76:e1:c0:2b:4a:
76:c3:19:84:bf:40:06:1c:4e:9b:59:f6:69:05:03:00:dd:39:
a9:d3:75:c6:a2:d6:7a:0f:ed:5e:a8:4a:4a:d8:1b:f9:3b:57:
e6:55:40:bb:a0:7d:65:8d:93:d8:59:19:4c:c6:98:dc:3d:8c:
d0:76:52:fd:d7:a7:37:e7:22:4a:7f:72:84:39:4b:38:21:d3:
14:32:6d:37:fc:31:59:f8:e8:b1:0f:e0:2a:09:73:2c:20:24:
a1:48:bd:b2:b7:5a:0f:bd:a6:10:21:d3:da:19:23:10:1f:d8:
e9:e3:95:de:e3:dd:66:71:7e:fb:83:cc:9b:e6:4c:f3:e3:93:
06:bf:1c:12:64:07:fc:06:cc:ad:50:d3:ef:80:e1:93:0d:23:
95:77:69:c8:ca:c7:4e:71:8b:4d:4d:f5:b6:ac:bf:ee:e8:fa:
cb:19:ae:54:18:64:f9:f7:fc:6b:08:b1:1c:38:27:dc:42:35:
52:9e:5f:6f:99:eb:ca:34:77:18:b5:38:8f:20:61:8a:c6:c7:
15:9d:44:ac:a1:23:20:d0:15:28:4a:7d:4c:51:07:38:00:ba:
54:a0:8f:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:29:44 2025 by rpki-client