Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS202400.roa
File: AS202400.roa (raw, json)
Hash identifier: BgDzgYPOD08Ez9UWLzQbiiJCipBSnLw+7xB4y3iZH4A=
Subject key identifier: 9E:99:03:25:08:09:90:7A:75:B6:CB:7F:4E:33:75:DB:ED:2E:CE:3A
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 18B9855221621696B01FC8D01FC353948296245C
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS202400.roa
Signing time: Thu 28 Nov 2024 05:40:12 +0000
ROA not before: Thu 28 Nov 2024 05:35:12 +0000
ROA not after: Thu 27 Nov 2025 05:40:12 +0000
asID: 202400
IP address blocks: 2a06:a005:5a4::/48 maxlen: 48
2a06:a005:15d4::/46 maxlen: 48
2a06:a005:2c40::/44 maxlen: 48
Validation: Failed, certificate revoked on Fri 13 Dec 2024 02:56:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:b9:85:52:21:62:16:96:b0:1f:c8:d0:1f:c3:53:94:82:96:24:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Nov 28 05:35:12 2024 GMT
Not After : Nov 27 05:40:12 2025 GMT
Subject: CN=9E9903250809907A75B6CB7F4E3375DBED2ECE3A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:54:5b:9f:e6:3b:46:38:5a:87:08:d2:a0:dd:
c0:8c:bb:36:13:25:e8:93:82:a6:ef:dd:e3:a4:6a:
25:0a:a8:0b:31:a6:d2:a8:e5:9b:be:46:4e:52:8f:
d4:1a:93:71:d4:e0:e0:54:61:c1:fc:e1:48:c5:bf:
62:20:21:80:14:f1:81:13:50:9b:50:98:fd:ec:37:
66:5a:14:65:e2:2c:13:4a:9d:8c:85:61:a2:9e:b4:
71:fd:21:9f:eb:88:29:78:0b:e6:d9:de:06:d4:9a:
3d:27:cd:5f:e2:ea:62:64:3b:5a:ff:ac:ed:5e:bc:
0f:d7:86:06:2e:ca:6d:20:d5:d3:2c:b8:d3:a0:8d:
22:5b:51:b3:11:cd:60:c1:4e:9d:62:72:44:d3:0a:
cd:cb:e1:b3:50:ec:ec:70:3c:7a:26:4d:f2:19:40:
93:cd:14:8c:01:86:7a:db:d1:a5:6b:b0:04:9c:b3:
5e:21:0e:08:48:67:15:ac:a1:ff:8d:c7:75:a0:b1:
d2:86:53:76:f8:4f:4a:2d:87:2a:53:05:0b:bb:1a:
03:f5:88:5f:3e:39:87:9b:6a:05:02:cf:d3:fe:bb:
d3:04:84:a6:01:e5:39:9d:d8:82:15:35:75:52:ff:
f7:fa:56:96:d7:79:f9:e1:d9:a0:1f:7c:65:0a:67:
19:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:99:03:25:08:09:90:7A:75:B6:CB:7F:4E:33:75:DB:ED:2E:CE:3A
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS202400.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:5a4::/48
2a06:a005:15d4::/46
2a06:a005:2c40::/44
Signature Algorithm: sha256WithRSAEncryption
c0:0a:3f:dc:2e:a4:b6:7e:14:cb:45:d1:24:73:4d:94:d5:99:
94:10:96:10:91:87:85:2a:6d:8f:cd:a4:e1:e1:6f:d7:07:54:
d6:e0:f1:88:31:34:c3:86:ee:a8:63:5c:ac:7a:13:cc:38:13:
2c:95:be:24:fe:50:bf:8f:13:7b:82:83:c8:ff:3b:2d:4e:03:
d3:35:cb:13:cb:06:12:0c:84:de:3c:11:d0:33:55:d3:f5:46:
c8:ea:b2:a8:de:66:46:83:d6:53:91:15:d4:cd:86:20:2f:ab:
49:30:c1:1e:b7:43:bd:57:15:21:6c:54:8e:de:78:d4:a3:87:
f2:e7:c2:01:6d:8d:5b:33:b9:3b:2d:9e:2f:53:fc:ae:cf:0c:
17:be:8a:d4:c7:5a:be:3d:eb:ca:49:4e:a8:89:b3:0a:92:7e:
86:1c:9e:ed:f6:0c:f4:d7:81:ed:05:f1:54:a7:42:3e:ee:f6:
59:4d:be:d4:61:d4:82:eb:7e:29:6c:67:c8:e7:78:27:f3:4b:
4e:a3:4e:70:d4:4f:ea:6b:1f:cd:85:58:16:34:53:9c:0a:dd:
6f:06:99:52:7d:2d:0e:5a:72:e6:01:49:6c:62:0a:72:0a:eb:
87:d0:b3:b3:c7:ff:44:15:6b:d6:0e:0a:5b:4a:26:8c:af:e9:
6e:b9:0f:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 05:13:25 2025 by rpki-client