![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS202518.roa
File: AS202518.roa (raw, json)
Hash identifier: Y9OiWQ9l13aSt6U9+spzxtfQRnrv8m9B86G2/Dkb7tQ=
Subject key identifier: B4:9E:20:DF:30:26:8A:B5:4E:8A:CE:0F:DA:79:54:60:06:8C:76:99
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 590EFD623D524D283D5BA5FA20DA4F27629C3859
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS202518.roa
Signing time: Tue 05 Nov 2024 03:40:02 +0000
ROA not before: Tue 05 Nov 2024 03:35:02 +0000
ROA not after: Tue 04 Nov 2025 03:40:02 +0000
asID: 202518
IP address blocks: 2a06:a005:1504::/48 maxlen: 48
2a06:a005:1d50::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 13 Dec 2024 02:56:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:0e:fd:62:3d:52:4d:28:3d:5b:a5:fa:20:da:4f:27:62:9c:38:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Nov 5 03:35:02 2024 GMT
Not After : Nov 4 03:40:02 2025 GMT
Subject: CN=B49E20DF30268AB54E8ACE0FDA795460068C7699
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:6d:c6:1b:3f:10:af:4c:18:91:4b:e6:23:8a:
f2:32:25:b1:e0:25:08:48:24:95:d0:67:1a:74:41:
63:e0:c4:55:db:18:14:7a:f2:71:9c:9e:bf:26:fe:
1c:21:31:02:85:09:3e:5d:9b:cc:0b:72:b5:fd:59:
c1:d0:80:84:a2:fc:96:d6:f5:45:a5:25:f6:7e:69:
7d:ca:52:6e:ca:c4:28:ec:68:06:a3:54:ac:7c:69:
2f:65:d2:5f:74:d9:70:ce:e4:9a:fa:bd:af:6c:07:
b9:dc:7e:e3:96:53:a4:71:21:f6:77:49:90:2a:3d:
2d:e3:20:5a:10:05:48:ac:a5:e6:19:6b:fc:7f:ed:
1e:72:6e:ac:0d:23:12:fb:6c:c2:09:e8:cd:43:1c:
43:2f:6e:ca:71:90:2c:b3:bd:41:f9:dd:4c:de:f4:
a9:24:9b:60:9a:61:cf:90:8e:af:98:1e:e3:44:f0:
2a:2a:a7:74:2f:a0:a4:c3:82:e4:03:20:67:53:a5:
54:ff:3d:a5:3e:1d:da:ac:24:b8:52:0e:3a:49:4a:
f8:66:32:17:80:b2:c5:73:62:68:75:8f:9a:7e:22:
d3:d6:69:c1:21:25:d6:73:35:d9:85:f4:7b:bf:99:
12:d4:87:1e:06:11:c5:6f:8b:2a:a4:8c:74:fa:25:
c7:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:9E:20:DF:30:26:8A:B5:4E:8A:CE:0F:DA:79:54:60:06:8C:76:99
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS202518.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1504::/48
2a06:a005:1d50::/48
Signature Algorithm: sha256WithRSAEncryption
38:2f:a7:a7:ad:ed:1e:2b:27:fc:34:de:3e:80:be:85:be:97:
9d:15:b9:41:65:e4:99:03:37:d1:b1:46:03:c4:4b:7c:df:e1:
76:eb:30:a9:e8:b0:e7:9a:b8:3c:e4:f0:56:61:3e:24:e4:fd:
8d:92:06:dc:85:26:83:e0:cd:30:f9:59:5a:e1:49:3e:b4:ec:
f0:f7:9d:a7:ee:bb:2d:96:0c:9c:01:2a:28:3e:54:43:91:38:
5d:31:cc:0d:07:8f:49:2b:bd:4c:69:4d:c3:27:30:f2:73:19:
a0:4f:6b:8b:6e:c1:3b:9a:da:63:68:e4:49:1f:52:d5:59:c1:
9f:09:7e:61:d0:bb:cc:a9:a3:52:e7:7c:10:a5:6f:e3:67:c0:
4f:41:bb:0c:d2:7b:c0:62:15:8a:18:56:74:6f:c3:43:4a:3f:
65:32:aa:14:5b:90:50:7c:f6:4d:36:3f:5c:b0:4b:1b:77:29:
2c:f1:10:8d:fd:30:31:b6:df:23:31:f4:d1:e3:9e:6d:f7:4b:
b8:1a:b2:43:4c:af:90:51:c5:f1:42:d5:84:1f:97:1e:62:2a:
1c:c5:c7:ac:c0:16:3e:2e:73:0a:82:13:9e:d1:83:15:b5:7e:
ee:b4:bf:ba:a3:72:ab:46:80:f6:a8:81:c8:21:db:31:75:db:
b3:23:e6:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:05:29 2025 by rpki-client