Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS203174.roa
File: AS203174.roa (raw, json)
Hash identifier: blYMtk9OpCtlhSrY5xnRgHMuK7Dyv2z+yvOxYHWzb0Q=
Subject key identifier: C3:76:AE:B0:44:74:E2:DB:36:E7:E8:46:03:BA:EE:B9:A4:B6:1E:BF
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 3AFB6F1F32061E1BC9A611861D8332663DB19199
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS203174.roa
Signing time: Tue 05 Nov 2024 03:40:03 +0000
ROA not before: Tue 05 Nov 2024 03:35:03 +0000
ROA not after: Tue 04 Nov 2025 03:40:03 +0000
asID: 203174
IP address blocks: 2a06:a005:1900::/44 maxlen: 48
2a06:a005:1a10::/44 maxlen: 48
2a06:a005:1fb0::/44 maxlen: 48
Validation: Failed, certificate revoked on Fri 13 Dec 2024 02:56:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:fb:6f:1f:32:06:1e:1b:c9:a6:11:86:1d:83:32:66:3d:b1:91:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Nov 5 03:35:03 2024 GMT
Not After : Nov 4 03:40:03 2025 GMT
Subject: CN=C376AEB04474E2DB36E7E84603BAEEB9A4B61EBF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:3c:34:34:64:1e:7a:92:6c:86:1e:60:52:af:
0b:29:6f:1a:99:ff:7b:1c:6f:b1:fd:1c:ce:81:7c:
39:e0:45:fe:a3:9b:2d:af:ad:52:a4:8f:a4:c1:fa:
de:b6:cc:67:42:76:45:2c:22:13:56:a6:85:9f:a8:
d3:ff:c4:23:d3:57:07:92:29:57:97:95:28:2a:33:
f3:5e:b6:fc:e2:7f:64:e1:99:d9:ed:db:ca:c7:82:
54:31:c0:39:67:c8:e4:20:b4:c7:9b:9b:d6:5f:38:
77:98:75:c6:85:a4:93:cd:4d:fb:fe:11:c3:fb:86:
e6:8a:e9:e1:2f:0a:e3:35:78:ea:6b:92:c1:24:91:
51:7d:d7:bf:f5:26:e0:b6:78:5f:b7:d4:1a:f0:bf:
be:71:a9:62:4c:90:53:18:a0:63:3f:50:e3:e9:6e:
11:e4:4d:ac:c1:bf:51:6e:65:f4:70:6e:22:c6:5b:
40:b3:39:14:cf:77:03:15:57:d4:b9:ac:ad:3d:7e:
53:8c:48:56:4b:96:3d:be:4d:02:8d:a8:0f:1a:8a:
24:0d:36:b3:7d:d0:2e:f7:38:eb:53:96:e5:f0:ef:
f1:3a:b4:65:61:88:b1:bc:e8:19:94:f5:3b:64:ad:
9d:68:7b:aa:d6:02:07:5c:2a:60:5f:e1:1b:b7:32:
e1:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:76:AE:B0:44:74:E2:DB:36:E7:E8:46:03:BA:EE:B9:A4:B6:1E:BF
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS203174.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1900::/44
2a06:a005:1a10::/44
2a06:a005:1fb0::/44
Signature Algorithm: sha256WithRSAEncryption
16:b7:d4:b1:a8:3d:e8:24:76:30:10:5d:49:74:3f:96:e7:75:
f8:c2:45:ac:a3:5f:b5:29:5e:9c:1f:d4:f1:48:66:86:9e:87:
c3:b4:2d:4f:99:ff:38:46:cd:50:96:20:2b:36:56:cf:72:1e:
b4:7d:c2:ea:e9:11:55:30:ae:a2:37:64:19:c6:53:70:30:48:
0a:5d:b3:3e:2a:93:cf:e0:84:dc:16:e3:6c:5a:5d:4e:67:1b:
45:2b:3c:cc:98:10:7a:51:4d:e5:82:51:2c:0c:ac:35:af:ed:
5c:9f:a5:54:c1:28:49:7f:f8:cb:3b:95:14:09:75:b7:4d:c9:
99:ed:88:a4:8d:42:66:fc:13:ad:49:19:a9:6f:00:89:ad:d1:
7c:01:2f:a1:08:b3:6b:86:09:f7:65:42:f2:e8:3e:17:67:e5:
99:ec:8d:09:cf:e2:e4:8f:12:76:54:26:41:62:e7:95:68:fb:
8c:07:4d:8a:4e:d0:3c:6c:fa:aa:b0:98:f1:a6:82:e0:4a:d2:
d0:3a:2d:d2:ab:25:45:c0:61:23:d3:1f:90:0c:37:fe:04:dc:
07:ff:f0:98:e3:c3:a3:d9:9a:eb:57:7f:a0:41:df:ea:70:2e:
0b:20:d1:e4:41:9c:53:f2:48:01:cc:af:b5:3b:41:1a:4f:79:
18:0a:ee:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 01:42:20 2025 by rpki-client