Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS204333.roa
File: AS204333.roa (raw, json)
Hash identifier: lPEu0SLdHSMrP/wPeSwjQn52eQyPL8QWnJuPUnFDv1c=
Subject key identifier: C6:15:52:09:91:03:1F:E9:CE:81:06:AA:C2:48:42:76:A6:CD:0B:59
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 1FF7351933DA0F93A87E5683758A3D4F720584CF
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS204333.roa
Signing time: Tue 05 Nov 2024 03:40:03 +0000
ROA not before: Tue 05 Nov 2024 03:35:03 +0000
ROA not after: Tue 04 Nov 2025 03:40:03 +0000
asID: 204333
IP address blocks: 2a06:a005:d21::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 13 Dec 2024 02:56:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:f7:35:19:33:da:0f:93:a8:7e:56:83:75:8a:3d:4f:72:05:84:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Nov 5 03:35:03 2024 GMT
Not After : Nov 4 03:40:03 2025 GMT
Subject: CN=C615520991031FE9CE8106AAC2484276A6CD0B59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:27:ec:09:1c:60:f9:88:4a:47:ab:eb:ab:47:
55:74:96:05:75:95:a3:92:78:7a:ea:59:4a:be:67:
b0:1d:e9:98:4f:bb:46:9d:6a:f6:3a:fc:a1:95:c9:
a0:5e:69:29:ef:49:a7:b0:8c:16:da:70:6b:d2:f2:
41:d6:e5:a5:d4:7b:20:16:44:b4:50:b7:43:74:3c:
4a:6c:fd:ae:84:95:e9:45:b7:34:4d:49:75:f6:7f:
bb:e8:fe:1d:ac:97:eb:e4:2f:07:c4:ce:67:ca:5e:
ef:dc:d1:aa:41:49:27:d7:ce:c4:9c:65:a7:4f:3b:
0a:e1:f5:9c:ba:21:8a:13:0f:e5:95:46:85:a3:07:
14:af:bf:13:a7:73:36:c5:c8:b6:4b:3d:2c:e8:68:
b9:87:31:5f:37:2f:6f:12:40:7b:c9:e8:c0:db:08:
62:cb:22:07:e7:a4:4d:f4:e5:81:e3:e3:35:27:7d:
ad:be:8b:ca:82:33:15:48:d3:52:7a:ed:9e:6d:64:
30:4c:35:18:20:57:76:84:aa:42:d5:6b:38:28:69:
d5:f5:f4:03:0a:15:5a:64:85:6f:06:71:02:42:44:
fb:a7:3f:67:52:4d:e9:d2:f2:36:6a:0a:e7:0a:36:
ac:b7:4d:3b:6d:0f:7a:f0:5a:33:dd:37:9b:d4:9a:
72:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:15:52:09:91:03:1F:E9:CE:81:06:AA:C2:48:42:76:A6:CD:0B:59
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS204333.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:d21::/48
Signature Algorithm: sha256WithRSAEncryption
9f:03:fb:92:f8:a0:0c:15:9e:9c:5d:a1:81:12:a2:a9:f8:1e:
4c:7f:93:17:5c:9f:ba:5b:cb:16:a5:83:c7:43:77:d7:dc:f1:
4e:e1:ce:b4:c6:4e:29:1d:6a:00:d4:c0:78:7b:9c:2d:dd:b8:
58:6b:82:c0:16:56:c4:b4:7b:34:c0:47:04:2d:eb:d5:dc:9c:
e2:5f:16:dd:33:c2:e4:f7:34:f7:d3:a1:95:fe:eb:be:ce:c4:
ba:d2:3d:56:2c:88:d9:66:db:69:d3:42:c1:bc:a3:ba:44:d7:
8c:22:52:f3:1d:40:4d:02:d6:dd:d2:f0:0e:50:1c:bd:ec:a7:
24:e5:2c:1c:a1:c5:54:c3:89:80:d8:dc:f6:71:86:75:ce:21:
0e:99:37:02:0f:a5:33:93:a8:ec:14:a6:78:ac:77:1b:e2:c2:
1d:90:d5:e5:b3:ad:d6:15:7c:41:93:92:2b:a5:3f:22:dd:4a:
78:64:ee:fa:a7:7d:61:f0:a3:7f:f5:c4:69:17:18:eb:7e:45:
0b:03:f5:54:6c:b8:0a:71:92:ba:44:c3:89:90:4b:c0:84:84:
41:fb:1a:b3:de:b4:e5:58:6b:6f:b1:51:6b:81:05:06:cc:51:
f5:19:b8:5f:d9:0c:28:ca:2f:36:80:be:fd:9d:25:7a:e9:70:
fe:46:52:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:08:54 2025 by rpki-client