Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS203874.roa
File: AS203874.roa (raw, json)
Hash identifier: /ojJ/hSFL5kaSFAyUK/s3EVZgvPEN6rlRQIaAqa6PLw=
Subject key identifier: 10:01:4A:A2:B2:5B:85:D3:D3:F2:DD:F3:E5:6B:33:9A:DD:6E:0A:CD
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 09DDBDF884DBEA3060202EFACD8B24B5E3FE5DBC
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS203874.roa
Signing time: Sat 16 Nov 2024 08:40:12 +0000
ROA not before: Sat 16 Nov 2024 08:35:12 +0000
ROA not after: Sat 15 Nov 2025 08:40:12 +0000
asID: 203874
IP address blocks: 2a06:a005:d45::/48 maxlen: 48
2a06:a005:d46::/48 maxlen: 48
2a06:a005:d47::/48 maxlen: 48
2a06:a005:d48::/48 maxlen: 48
2a06:a005:d49::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 13 Dec 2024 02:56:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:dd:bd:f8:84:db:ea:30:60:20:2e:fa:cd:8b:24:b5:e3:fe:5d:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Nov 16 08:35:12 2024 GMT
Not After : Nov 15 08:40:12 2025 GMT
Subject: CN=10014AA2B25B85D3D3F2DDF3E56B339ADD6E0ACD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:67:35:e6:e2:a6:7e:47:75:c7:f4:e6:05:b7:
94:2e:69:22:87:86:ce:1b:25:d8:7d:5a:ae:91:32:
2f:3c:1c:9c:d1:e6:8b:d6:b5:81:a3:6f:10:63:f8:
e6:72:b5:e5:ba:01:c8:0f:c0:d5:0b:fc:2e:a3:18:
93:a3:4a:c0:cd:9a:ce:ed:56:ef:e0:69:ce:de:21:
9c:07:36:4a:32:15:96:68:fe:ed:b1:6d:cd:70:cb:
36:e6:71:11:4f:8c:13:8a:46:ed:cd:3f:0e:3f:9a:
f5:95:89:32:0a:08:cb:59:32:db:7d:09:ad:0e:4c:
c8:eb:6e:46:72:9d:1e:37:90:0b:60:d1:ac:22:c9:
dd:a4:82:3f:34:e7:5e:fd:e3:a1:0a:21:f3:27:95:
5d:e7:0e:84:ee:25:17:a5:69:15:b2:c7:84:23:54:
31:09:9f:1b:d1:df:f2:cc:1a:fc:23:c0:32:4e:54:
b0:3d:bd:86:ea:a6:74:2b:e0:c0:8f:57:e9:75:10:
03:67:df:95:c9:84:5e:dc:05:c0:f0:68:b3:74:36:
a7:76:27:d7:5c:3f:22:80:f7:59:f8:20:84:5a:0b:
f3:87:f6:58:1b:1e:8d:10:49:f7:d1:2d:0e:6f:c1:
33:6d:e5:6e:db:15:2c:aa:3e:07:42:53:4c:54:7a:
1e:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:01:4A:A2:B2:5B:85:D3:D3:F2:DD:F3:E5:6B:33:9A:DD:6E:0A:CD
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS203874.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:d45::-2a06:a005:d49:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
bc:88:c6:02:e6:8a:8b:71:e2:41:d0:72:01:c8:28:01:9a:90:
ff:18:58:44:ed:a0:12:44:fd:c2:9e:6a:fd:ce:51:7f:44:ea:
d6:78:e9:06:93:4d:77:3a:67:c9:41:39:c6:a9:d5:ed:20:81:
b3:55:06:fd:f3:22:6d:17:a2:e4:1e:94:b2:3b:26:23:fd:65:
dc:4c:d7:b1:07:92:68:cd:05:19:2b:c0:f1:e7:9d:70:70:c3:
8d:db:97:0d:4d:43:34:85:2e:87:be:f5:f2:74:70:42:33:ca:
27:74:10:bd:25:8f:74:c4:9b:ce:9d:e8:be:39:ff:19:ee:f4:
58:3b:85:4c:30:f8:b9:96:be:b5:3b:0c:3d:41:56:65:e0:d2:
42:d0:4e:a5:f0:3d:91:8b:61:90:1b:81:21:1a:e5:4a:cd:72:
c8:ec:2e:af:ca:df:ac:0e:de:6f:cf:c5:f5:51:da:40:49:3f:
44:5b:40:4f:15:c2:4c:41:02:00:51:83:ac:76:db:77:73:31:
cb:0f:f4:76:c0:7b:cb:e6:35:c6:91:b4:10:e5:cf:38:18:aa:
3e:cc:10:6c:01:1d:71:0a:3c:7b:ea:90:45:ed:a1:a7:c2:3d:
ea:38:f3:ab:7c:25:8a:32:ee:da:e1:53:20:89:2d:d4:b1:e7:
9c:6f:76:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:30:55 2025 by rpki-client