Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS201432.roa
File: AS201432.roa (raw, json)
Hash identifier: h+dFykt02y19GmZJroiEcyf5ED93dLHBhf8zU/cZ2BQ=
Subject key identifier: 23:FB:07:36:76:96:68:F0:0F:8E:F3:08:89:A4:00:91:6E:C7:7E:03
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 15CE96E664A8C2D12D9EE99D939DC62C02FCFA80
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS201432.roa
Signing time: Tue 05 Nov 2024 03:39:59 +0000
ROA not before: Tue 05 Nov 2024 03:34:59 +0000
ROA not after: Tue 04 Nov 2025 03:39:59 +0000
asID: 201432
IP address blocks: 2a06:a005:c40::/44 maxlen: 48
Validation: Failed, certificate revoked on Fri 13 Dec 2024 02:56:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:ce:96:e6:64:a8:c2:d1:2d:9e:e9:9d:93:9d:c6:2c:02:fc:fa:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Nov 5 03:34:59 2024 GMT
Not After : Nov 4 03:39:59 2025 GMT
Subject: CN=23FB0736769668F00F8EF30889A400916EC77E03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:1b:e9:03:12:25:95:23:c1:77:87:2b:49:f0:
25:58:3d:f8:bd:e4:3d:ae:02:6c:f5:7b:16:03:89:
f2:33:86:fd:b5:f4:e7:da:7a:c8:65:d1:3b:11:d6:
1e:b3:4c:c4:3f:02:38:87:0d:8b:e8:c7:85:88:ea:
0b:c9:17:d8:a5:16:a7:1e:40:49:13:6b:98:1d:30:
df:c1:2b:0a:54:92:d5:47:4e:16:27:91:ef:a8:73:
a4:c1:40:3d:81:55:3f:ba:c6:54:36:7e:cc:f2:28:
14:2d:ae:26:52:22:fa:e1:fa:8d:df:c0:a8:92:38:
70:d4:d0:15:3d:9e:af:42:c8:f4:52:99:36:84:20:
92:8a:e7:bf:4d:93:49:29:19:59:00:53:2e:4e:40:
17:70:5f:e3:ed:8d:10:e3:a0:37:6e:bd:47:b0:17:
3c:af:a7:58:b3:a4:ad:1d:79:41:44:42:35:70:b9:
7a:c0:92:58:a5:d1:44:d9:02:22:b9:b8:82:62:cc:
36:ab:d6:ce:f6:9f:e5:3d:c8:13:32:13:25:71:6d:
08:50:97:60:8e:7f:ef:a3:7c:9e:95:72:71:77:e8:
ad:97:1c:2d:9f:c0:dd:7d:5e:43:12:e4:0e:4f:b6:
40:37:81:0b:0d:8c:9c:e2:a2:55:ce:41:3e:71:e0:
76:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:FB:07:36:76:96:68:F0:0F:8E:F3:08:89:A4:00:91:6E:C7:7E:03
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS201432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:c40::/44
Signature Algorithm: sha256WithRSAEncryption
4f:69:5e:c9:ed:6b:94:63:f6:c1:fa:9d:f9:7a:77:80:d2:0a:
e3:c6:ee:27:18:38:4f:57:22:99:80:a8:16:ab:5d:9c:ee:71:
ca:f0:e1:37:10:b8:b7:6d:15:da:9d:b9:90:aa:de:8f:86:7f:
2d:d1:a9:91:72:56:56:23:32:bc:de:9c:44:e1:9c:9f:ad:19:
e4:af:60:b5:3a:b6:b5:1e:e3:48:5e:0f:69:18:c0:98:f7:d7:
58:ed:5d:bb:da:36:ec:df:04:d2:f8:0f:e5:1b:bf:34:9a:dc:
8a:d5:81:8d:2c:fc:cb:ed:28:6f:d9:0b:ae:18:a7:77:ed:92:
bc:75:7c:24:54:7e:6c:58:77:38:ef:4a:ab:85:d4:df:c5:f2:
8d:d4:0f:e5:f8:c0:81:a5:95:a1:1b:00:41:90:02:d3:65:bb:
3e:d2:02:0d:fa:c6:c3:51:2d:f7:3c:ab:3e:dd:15:6b:ee:d4:
53:54:49:33:c5:0a:08:f8:08:72:7f:90:8e:9e:16:2b:4b:68:
ac:13:2d:19:84:a7:74:f2:da:07:7f:88:26:b8:ae:0e:88:fa:
dd:1b:8f:58:df:23:ef:99:a4:c1:53:2e:0c:9c:17:c3:be:2e:
17:69:3e:14:19:d6:97:53:72:eb:52:30:32:2a:81:37:fa:a2:
22:0a:7d:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:34:40 2025 by rpki-client