Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS202732.roa
File: AS202732.roa (raw, json)
Hash identifier: UyVmWqWsxzNLrgprKLph3xQOjeigf5CBKTSJRcu96ug=
Subject key identifier: 37:FC:00:A6:98:D2:FF:EC:EA:84:82:67:D0:8F:EE:4A:41:27:F9:FF
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 7DB3176D0D2BCB7206DB8A924278A306D304880D
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS202732.roa
Signing time: Wed 13 Nov 2024 00:40:12 +0000
ROA not before: Wed 13 Nov 2024 00:35:12 +0000
ROA not after: Wed 12 Nov 2025 00:40:12 +0000
asID: 202732
IP address blocks: 2a06:a005:b63::/48 maxlen: 48
2a06:a005:1163::/48 maxlen: 48
2a06:a005:1501::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 03 Dec 2024 07:51:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:b3:17:6d:0d:2b:cb:72:06:db:8a:92:42:78:a3:06:d3:04:88:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Nov 13 00:35:12 2024 GMT
Not After : Nov 12 00:40:12 2025 GMT
Subject: CN=37FC00A698D2FFECEA848267D08FEE4A4127F9FF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e6:c3:b6:da:ad:a4:3f:f9:c6:5f:6c:b6:61:
11:22:dd:ca:fe:31:57:9b:ec:34:06:49:86:0b:77:
2e:14:1d:b1:42:35:96:9f:7a:e7:2c:c4:22:ef:ab:
b7:fb:5b:01:ca:32:d0:d2:74:24:f1:0c:b3:d6:9c:
bf:2a:4a:70:e6:49:37:c1:89:4c:b4:42:b5:a9:43:
ba:bd:18:a1:e0:92:bd:9d:8e:4d:4c:3b:3d:a4:77:
ef:30:0b:19:a0:f9:2d:f2:7e:72:73:10:a7:8a:70:
31:25:9e:be:17:a7:17:3b:11:07:42:fb:15:02:2e:
ad:22:92:33:9d:ae:6d:b4:a6:61:c1:34:a2:bf:b9:
7c:83:cc:94:a5:45:33:0e:9f:f1:e4:91:77:ac:e9:
c1:ce:67:7f:4d:0a:e9:68:d6:e8:a1:9f:79:8c:67:
fc:62:83:a8:d5:c7:6f:6d:02:81:86:47:81:a8:16:
8c:b4:6d:ee:fa:26:2f:6b:1a:86:a8:98:6a:aa:ff:
f0:80:b4:9e:b8:7e:b0:b1:03:f0:a2:b7:f1:07:2d:
00:ee:63:9f:63:bb:7c:70:1f:79:79:1f:8e:f8:bb:
2d:af:48:20:4e:31:f7:97:11:59:b2:8a:21:df:f7:
b3:be:e7:d4:c6:ee:b5:92:0c:9c:83:64:b6:4a:ee:
0b:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:FC:00:A6:98:D2:FF:EC:EA:84:82:67:D0:8F:EE:4A:41:27:F9:FF
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS202732.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:b63::/48
2a06:a005:1163::/48
2a06:a005:1501::/48
Signature Algorithm: sha256WithRSAEncryption
39:6c:55:36:ad:55:8e:5f:57:96:73:a1:cc:23:e6:cc:55:e0:
16:08:f4:04:f9:80:66:d3:19:b3:7c:cb:a5:6f:8d:c8:7b:84:
33:ab:8f:56:3d:59:7e:11:f3:c3:36:9a:21:e7:05:ac:36:bc:
4a:e2:fa:d7:24:44:bd:70:ab:5e:b1:0e:10:ee:c2:63:b4:57:
93:98:b4:bb:25:81:aa:69:e5:d4:59:b1:c9:d4:aa:46:c0:e7:
7c:6c:ba:ee:e1:a9:cc:82:11:6a:93:6a:c7:02:aa:87:ec:a5:
e0:f8:bb:06:4d:d2:88:11:35:25:a0:97:0c:e5:a1:4d:e8:cb:
63:0d:73:b8:b2:b1:74:85:fe:bd:51:ca:65:2c:3a:26:f5:5f:
63:de:84:4f:c5:8f:7b:25:ce:bc:a9:23:be:c2:fb:a3:e2:b6:
ff:b9:4b:08:ce:96:41:b9:e6:39:0b:7a:88:e3:02:e7:ec:1f:
06:c4:7c:97:60:23:a4:e0:e5:f2:43:a4:8b:5f:61:51:d5:1b:
79:31:0d:90:c4:30:40:b9:21:03:45:35:44:24:1f:4a:d8:54:
c5:1e:e5:07:41:fa:81:d6:a8:32:c8:79:c6:e8:f7:b2:be:34:
57:dc:7d:d4:43:d9:59:c7:09:40:58:41:9a:4a:0c:5c:dc:00:
ee:61:cd:ec
-----BEGIN CERTIFICATE-----
MIIE+jCCA+KgAwIBAgIUfbMXbQ0ry3IG24qSQnijBtMEiA0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzk5NDM4ZjFiMTc2MmFlZWY4YTM1Y2Y0ZTZjYmFlOTc2
OTliZDAyMDAeFw0yNDExMTMwMDM1MTJaFw0yNTExMTIwMDQwMTJaMDMxMTAvBgNV
BAMTKDM3RkMwMEE2OThEMkZGRUNFQTg0ODI2N0QwOEZFRTRBNDEyN0Y5RkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCh5sO22q2kP/nGX2y2YREi3cr+
MVeb7DQGSYYLdy4UHbFCNZafeucsxCLvq7f7WwHKMtDSdCTxDLPWnL8qSnDmSTfB
iUy0QrWpQ7q9GKHgkr2djk1MOz2kd+8wCxmg+S3yfnJzEKeKcDElnr4Xpxc7EQdC
+xUCLq0ikjOdrm20pmHBNKK/uXyDzJSlRTMOn/HkkXes6cHOZ39NCulo1uihn3mM
Z/xig6jVx29tAoGGR4GoFoy0be76Ji9rGoaomGqq//CAtJ64frCxA/Cit/EHLQDu
Y59ju3xwH3l5H474uy2vSCBOMfeXEVmyiiHf97O+59TG7rWSDJyDZLZK7gtFAgMB
AAGjggIEMIICADAdBgNVHQ4EFgQUN/wAppjS/+zqhIJn0I/uSkEn+f8wHwYDVR0j
BBgwFoAUeZQ48bF2Ku74o1z05suul2mb0CAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvMi83OTk0MzhGMUIx
NzYyQUVFRjhBMzVDRjRFNkNCQUU5NzY5OUJEMDIwLmNybDBkBggrBgEFBQcBAQRY
MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZVpRNDhiRjJLdTc0bzF6MDVzdXVsMm1iMENBLmNlcjBwBggrBgEF
BQcBCwRkMGIwYAYIKwYBBQUHMAuGVHJzeW5jOi8vcnBraS1ycHMuYXJpbi5uZXQv
cmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5MWJlM2Y5ZC8yL0FT
MjAyNzMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH
AQH/BCUwIzAhBAIAAjAbAwcAKgagBQtjAwcAKgagBRFjAwcAKgagBRUBMA0GCSqG
SIb3DQEBCwUAA4IBAQA5bFU2rVWOX1eWc6HMI+bMVeAWCPQE+YBm0xmzfMulb43I
e4Qzq49WPVl+EfPDNpoh5wWsNrxK4vrXJES9cKtesQ4Q7sJjtFeTmLS7JYGqaeXU
WbHJ1KpGwOd8bLru4anMghFqk2rHAqqH7KXg+LsGTdKIETUloJcM5aFN6MtjDXO4
srF0hf69UcplLDom9V9j3oRPxY97Jc68qSO+wvuj4rb/uUsIzpZBueY5C3qI4wLn
7B8GxHyXYCOk4OXyQ6SLX2FR1Rt5MQ2QxDBAuSEDRTVEJB9K2FTFHuUHQfqB1qgy
yHnG6PeyvjRX3H3UQ9lZxwlAWEGaSgxc3ADuYc3s
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:14:55 2025 by rpki-client