![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS204186.roa
File: AS204186.roa (raw, json)
Hash identifier: O2Zit661/v6QvY8ZM3aEj8pcr5Qv8+REgACNaaWnfEc=
Subject key identifier: 34:2D:C7:71:DC:30:56:28:59:67:D8:AA:46:66:93:79:16:2C:F7:BB
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 67EF63732C53DC06117C7EC6E102B9DE3276FB08
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS204186.roa
Signing time: Tue 05 Nov 2024 03:40:05 +0000
ROA not before: Tue 05 Nov 2024 03:35:05 +0000
ROA not after: Tue 04 Nov 2025 03:40:05 +0000
asID: 204186
IP address blocks: 2a06:a005:150c::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 13 Dec 2024 02:56:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:ef:63:73:2c:53:dc:06:11:7c:7e:c6:e1:02:b9:de:32:76:fb:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Nov 5 03:35:05 2024 GMT
Not After : Nov 4 03:40:05 2025 GMT
Subject: CN=342DC771DC3056285967D8AA46669379162CF7BB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:10:93:a4:34:25:1d:18:1c:95:7b:aa:26:45:
a2:78:0e:c7:fe:d9:40:75:85:ea:f8:23:7e:22:32:
d5:03:bc:50:9d:32:34:2e:09:29:65:50:38:d5:05:
12:14:78:d2:6c:66:b0:02:ad:67:f9:76:a6:bd:05:
d1:20:ca:3c:98:50:16:2d:6f:12:db:57:fe:cd:5f:
41:40:da:e3:97:a7:12:81:2c:55:69:03:43:dd:ef:
d4:a9:b4:7b:4d:a6:c1:c3:bb:01:07:b7:ad:6e:f2:
6c:ec:61:55:1b:3b:93:f1:dd:4b:d7:61:15:53:3a:
ac:b2:f9:8c:33:ad:01:90:2c:a0:c1:ee:2f:b7:96:
3b:19:fb:e2:2a:df:e2:f9:00:cc:f1:db:d1:23:5b:
b7:00:53:47:ae:38:1d:8e:f5:cb:fa:d9:c7:cc:11:
1e:91:cd:f6:f8:e4:5d:13:ba:a4:24:5f:76:8c:39:
67:a0:30:da:9a:5b:ee:e7:b1:07:3c:22:7e:b9:e3:
fc:bd:11:14:c3:48:fe:2b:4b:27:12:cc:6c:75:83:
f7:84:7d:b2:0f:ab:82:5b:74:22:9e:09:c2:3c:42:
e8:d9:44:80:e2:c6:c5:5f:1e:89:f8:b9:7e:c5:32:
e2:a5:91:0b:3c:62:a5:1a:c4:8a:f5:dd:08:56:16:
c8:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:2D:C7:71:DC:30:56:28:59:67:D8:AA:46:66:93:79:16:2C:F7:BB
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS204186.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:150c::/48
Signature Algorithm: sha256WithRSAEncryption
a3:20:0a:21:fb:0c:24:40:48:2d:26:0b:fe:b2:14:b1:bb:27:
e4:6e:96:87:d3:4d:34:5d:54:c3:46:96:b2:9f:e6:f0:d0:89:
ce:64:f4:c7:96:ef:8d:97:45:d0:e1:4a:7e:2d:b6:89:f4:fa:
dd:fd:42:ff:ee:d7:4e:21:3b:57:e9:75:a5:29:98:c8:ce:4b:
a7:bf:d5:06:6a:73:d7:9c:1b:e8:e8:79:c0:47:77:40:eb:4e:
01:d8:c5:43:df:e3:04:54:c3:ca:05:ab:85:3d:09:0f:4a:8a:
29:4e:87:99:f5:3e:82:84:70:c6:78:fc:ef:f6:cc:b7:c1:e2:
48:ca:b3:2d:a5:d4:3d:84:5a:48:ce:6b:cc:df:40:3f:01:68:
b1:1b:03:08:00:52:e7:6e:53:cf:e2:f0:9b:3a:74:c6:56:77:
65:cd:f1:a7:dc:28:41:3c:45:cc:29:fe:ba:38:bb:a9:24:47:
9a:9b:8a:9f:65:3a:39:a6:1c:08:41:bb:3b:3c:e9:21:3a:0e:
10:d1:ee:91:3e:85:86:c7:39:f2:ae:d9:8c:c4:98:2e:5c:d7:
ba:35:93:27:55:7d:bb:26:1e:1f:4a:94:cd:5e:93:eb:c7:cd:
a1:1a:58:70:1a:54:f6:d6:4b:33:2b:dc:f9:71:31:30:66:46:
d6:84:47:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:20:14 2025 by rpki-client