Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS204446.roa
File: AS204446.roa (raw, json)
Hash identifier: qTAyqrV877uxSSGP7PECq/cUFsNlAIctS8+orRHOuNs=
Subject key identifier: 96:3E:11:01:9D:63:F1:21:78:87:F5:AF:6A:81:49:A5:7C:2B:49:59
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 08EF4F113BC6729EF2C88462436C590912D51F4D
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS204446.roa
Signing time: Tue 05 Nov 2024 03:40:09 +0000
ROA not before: Tue 05 Nov 2024 03:35:09 +0000
ROA not after: Tue 04 Nov 2025 03:40:09 +0000
asID: 204446
IP address blocks: 2a06:a005:a20::/44 maxlen: 48
2a06:a005:1320::/44 maxlen: 48
2a06:a005:15d0::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 13 Dec 2024 02:56:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:ef:4f:11:3b:c6:72:9e:f2:c8:84:62:43:6c:59:09:12:d5:1f:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Nov 5 03:35:09 2024 GMT
Not After : Nov 4 03:40:09 2025 GMT
Subject: CN=963E11019D63F1217887F5AF6A8149A57C2B4959
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:c1:17:ee:ee:7d:04:27:b0:f0:61:84:68:fc:
14:be:28:f0:81:a7:64:9f:d1:17:0f:c6:50:db:a6:
61:1e:06:09:45:e5:c3:c2:a1:43:42:7b:95:17:d7:
2c:bc:02:c0:d3:22:cc:50:9b:f9:42:da:3c:52:9e:
f2:4f:dc:b4:dd:7b:1a:17:4c:04:3d:90:47:91:2f:
ad:1c:51:97:ff:44:f4:63:62:d3:bb:7c:fd:74:2c:
f6:97:75:48:16:42:56:3f:bb:11:b4:69:e4:7a:da:
35:2e:6a:78:02:08:3a:61:cf:40:bb:bb:52:12:42:
8c:a8:e0:41:e8:47:de:33:f2:a1:0f:cd:e0:42:26:
b3:2a:17:8e:fb:aa:3d:fd:07:aa:e7:16:a5:91:c7:
7e:09:b8:dd:7d:cd:f9:0f:95:e7:3d:75:24:45:61:
bd:49:46:f0:c2:cf:45:46:45:aa:95:1f:d4:6f:3c:
3c:eb:36:7e:62:3a:32:78:70:42:bc:f5:14:82:dc:
bf:9a:da:6c:e4:f8:d6:27:be:ae:2a:de:a8:65:47:
5f:b1:57:12:76:55:2a:6c:60:e2:c0:41:d2:4d:1e:
2d:39:b7:61:0a:85:98:97:96:77:38:75:2a:5a:b2:
0f:00:c2:89:7e:75:d0:2d:32:6e:b8:60:d7:27:70:
81:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:3E:11:01:9D:63:F1:21:78:87:F5:AF:6A:81:49:A5:7C:2B:49:59
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS204446.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:a20::/44
2a06:a005:1320::/44
2a06:a005:15d0::/48
Signature Algorithm: sha256WithRSAEncryption
50:1b:bc:89:ee:13:2d:44:23:56:94:48:99:fe:48:36:95:dd:
ac:56:29:6d:f3:4a:df:f0:ee:3c:52:cf:71:39:16:45:16:58:
82:96:80:03:76:dc:c7:67:be:1d:4f:c5:17:90:07:d3:77:e6:
ff:4c:a1:26:81:d0:39:c5:18:f0:bb:50:f3:73:95:bd:11:ac:
d7:f4:ff:8a:23:65:8e:2d:51:7d:a2:72:04:85:98:ef:6e:0a:
c2:f4:b6:c6:14:b3:83:61:6a:d1:9b:ea:e5:80:15:3e:7f:b1:
6c:81:e0:07:83:92:db:76:ed:fa:f5:44:a8:82:eb:58:b3:1a:
a8:39:cb:9f:58:4d:36:c2:ce:0b:a6:8f:a3:d4:7b:da:40:53:
81:d2:0d:0c:59:37:00:b7:24:ea:29:d6:9b:01:f1:7c:d9:54:
67:b0:60:d5:cc:32:64:37:a2:6d:55:08:d7:fe:5d:cd:42:b7:
e2:aa:68:40:9e:77:72:19:0a:0d:6c:1e:66:4c:ec:d5:1d:30:
f5:4e:2d:6c:19:54:02:a9:42:80:c0:5c:2a:7d:75:f6:93:64:
26:60:f8:81:04:43:b1:23:54:f7:85:de:a9:53:0d:4b:c7:43:
c9:44:ee:a4:87:f8:1e:ad:81:c7:3f:92:b2:31:fd:f3:c9:c2:
5c:cf:af:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 01:46:06 2025 by rpki-client