Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS202199.roa
File: AS202199.roa (raw, json)
Hash identifier: YgK13SjI69KIO4cXiw0Ytl88OJVadXBKCy2/zbTA6ew=
Subject key identifier: D1:30:E0:FE:8A:AA:21:E4:E2:E0:39:2E:F6:B5:8B:4D:D3:86:4C:92
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 3D2BCBC67F8D3F70A3168862C6489E6BC00FDC3C
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS202199.roa
Signing time: Tue 05 Nov 2024 03:40:08 +0000
ROA not before: Tue 05 Nov 2024 03:35:08 +0000
ROA not after: Tue 04 Nov 2025 03:40:08 +0000
asID: 202199
IP address blocks: 2a06:a005:1161::/48 maxlen: 48
2a06:a005:1505::/48 maxlen: 48
2a06:a005:1640::/44 maxlen: 48
2a06:a005:1c7f::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 30 Nov 2024 07:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:2b:cb:c6:7f:8d:3f:70:a3:16:88:62:c6:48:9e:6b:c0:0f:dc:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Nov 5 03:35:08 2024 GMT
Not After : Nov 4 03:40:08 2025 GMT
Subject: CN=D130E0FE8AAA21E4E2E0392EF6B58B4DD3864C92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:8d:26:8e:ed:29:41:ad:db:9d:e4:70:c3:f9:
35:75:78:c5:4d:20:ad:85:35:43:db:e0:2b:da:e0:
00:e1:8b:b0:b7:1d:bc:a6:c3:7c:60:70:c8:f4:7f:
53:29:c8:33:1e:68:9d:df:0e:2b:be:c9:70:9e:90:
70:cf:b8:af:42:f7:a8:a7:50:b1:17:f4:88:46:92:
a9:6a:c1:10:a9:fc:d4:d4:c8:f3:a0:19:d5:20:05:
91:12:c3:fd:8a:ae:6b:d5:01:cc:46:22:51:d4:91:
23:22:d3:e5:6e:5f:b9:b6:22:65:30:67:bc:56:8e:
ae:79:36:81:0b:e1:2a:66:11:79:ee:eb:cc:df:9e:
35:54:88:c5:0e:93:69:ee:83:8e:a0:8e:3c:fa:63:
ba:a9:bd:b3:8a:fb:83:fe:46:77:5f:7a:cb:f6:14:
ec:aa:be:f7:0e:28:8f:d9:af:3f:ad:20:99:cd:83:
76:f6:89:35:8d:f5:65:b9:a1:10:f5:10:9e:75:6c:
00:dd:c8:ae:4a:ae:74:c2:b2:79:cd:ec:cf:65:bd:
be:b4:22:96:37:a2:60:b0:92:59:c7:ff:e1:b4:1e:
bf:04:57:0d:7e:86:9f:5b:10:01:35:c7:fd:64:0a:
26:ea:29:d0:61:56:f6:31:17:fe:8d:35:4a:d4:9e:
6b:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:30:E0:FE:8A:AA:21:E4:E2:E0:39:2E:F6:B5:8B:4D:D3:86:4C:92
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS202199.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1161::/48
2a06:a005:1505::/48
2a06:a005:1640::/44
2a06:a005:1c7f::/48
Signature Algorithm: sha256WithRSAEncryption
23:1f:b3:1d:03:d3:99:88:e2:0d:0f:5d:2a:07:95:43:05:a2:
25:97:0e:14:35:c0:32:dd:f1:11:15:d3:56:08:b0:5c:58:49:
98:d0:5e:a0:40:10:a2:04:fb:3f:0e:0c:53:43:93:dc:78:67:
59:12:4d:49:0e:ee:93:ca:4e:d2:99:e5:44:02:6d:b6:ad:c6:
ca:d5:4a:21:4b:14:42:22:bf:2d:16:6b:cf:40:f1:36:11:b5:
62:69:da:ae:66:1f:87:37:fe:5a:2f:05:73:30:33:06:bf:de:
ba:5a:8a:ea:4c:7f:b8:ff:81:21:03:2f:e0:ca:de:50:3b:f8:
ca:03:b3:30:ec:c2:6a:67:d7:36:fa:0f:aa:e2:5f:60:d6:b4:
0f:94:27:e8:0e:35:84:2f:b9:fd:5a:4b:7d:4b:a3:e9:df:02:
3c:af:24:ae:3d:41:86:e5:99:87:be:e5:fd:bb:b1:9c:e8:bb:
ec:2e:5e:0d:bd:b6:57:b7:cf:81:09:fa:fb:81:5d:5a:6c:ce:
47:15:e8:2e:f0:69:25:98:18:85:e1:35:bb:5c:3b:e6:9c:9c:
04:f4:d1:43:a9:f1:76:58:77:e0:91:1d:9c:04:29:51:7a:4e:
45:22:83:22:ec:ba:d2:72:8a:22:fc:0d:d3:6c:76:34:56:1c:
10:56:b6:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:47:01 2025 by rpki-client