Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS204992.roa
File: AS204992.roa (raw, json)
Hash identifier: Yn4gX51Zo0eeQ3Do/AxXUmGKC8wbp3Q5+ktBef2MilA=
Subject key identifier: F3:2E:1F:D6:B4:A8:EB:A5:23:29:3A:E4:79:D2:36:77:BF:05:D6:96
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 6035FB7A61F5808282DAB6A98280AA5D86568B87
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS204992.roa
Signing time: Tue 05 Nov 2024 03:40:09 +0000
ROA not before: Tue 05 Nov 2024 03:35:09 +0000
ROA not after: Tue 04 Nov 2025 03:40:09 +0000
asID: 204992
IP address blocks: 2a06:a005:5f3::/48 maxlen: 48
2a06:a005:a11::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 13 Dec 2024 02:56:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:35:fb:7a:61:f5:80:82:82:da:b6:a9:82:80:aa:5d:86:56:8b:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Nov 5 03:35:09 2024 GMT
Not After : Nov 4 03:40:09 2025 GMT
Subject: CN=F32E1FD6B4A8EBA523293AE479D23677BF05D696
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:52:1a:07:f1:c0:1c:3c:79:78:ce:08:34:f3:
39:74:2e:73:cf:fb:21:ea:a6:3f:be:ce:1a:ee:d0:
ab:c6:4f:11:04:bc:3b:8d:07:d6:79:a8:5b:cb:05:
d6:63:68:4a:b2:f1:6a:66:14:4a:33:c5:ca:9e:f1:
7f:10:92:d4:df:71:50:0f:d5:7e:f3:bf:be:66:cd:
6c:1d:73:53:d2:50:02:cc:e6:ec:67:c4:a2:4b:b7:
f2:cd:2b:39:f7:71:5a:c5:c4:24:13:d2:98:5d:b4:
17:6b:85:2f:78:8c:f2:52:ba:97:f4:b7:fe:7b:f4:
7c:14:c9:cc:fc:4e:0d:8e:94:69:0d:79:66:7c:0f:
4c:c8:e3:cb:76:46:06:1d:95:a6:ee:3a:06:e3:14:
37:d8:a2:d6:95:3f:dc:5b:b1:ec:66:c1:b9:50:f8:
0a:d5:b5:cc:c2:41:f4:53:c7:5e:34:31:d6:92:23:
3f:d0:33:eb:a5:9e:bd:e2:0d:27:94:01:06:37:e0:
36:78:7b:0f:52:15:dd:8c:ec:7f:1d:62:6e:11:ec:
83:c7:2f:73:21:12:d9:f7:f2:02:71:b5:25:fb:96:
73:f8:a2:fe:93:eb:45:17:ba:8e:87:57:99:44:af:
6b:35:e6:5e:ed:2a:d7:bf:11:8f:b1:01:6b:7f:ed:
68:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:2E:1F:D6:B4:A8:EB:A5:23:29:3A:E4:79:D2:36:77:BF:05:D6:96
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS204992.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:5f3::/48
2a06:a005:a11::/48
Signature Algorithm: sha256WithRSAEncryption
50:b9:f9:56:b9:44:cf:82:4d:ad:65:1e:7e:00:db:3f:8a:d6:
71:22:c0:0e:63:fb:c6:d9:93:df:fe:2a:d1:86:cf:e3:c3:32:
a0:43:b7:03:2e:d6:3e:2f:f8:02:93:8e:56:fd:b6:d1:c5:ee:
df:4f:57:8b:09:56:ca:c5:45:06:e5:9c:3b:6e:1e:57:46:72:
dc:2b:a7:5d:f2:49:8a:ea:79:ca:fd:4c:c2:05:ab:6b:55:61:
94:7d:7b:11:d1:b6:1c:e4:e1:34:c3:d3:6f:16:eb:65:14:a3:
f9:bb:0f:ea:2c:5d:64:2c:72:47:b5:9d:4a:96:c0:6c:63:71:
94:d7:6c:b5:6d:50:80:5b:b3:40:45:45:cf:b3:2a:c7:3b:45:
60:9b:45:da:aa:f0:09:56:0d:26:88:fb:82:a8:c1:f3:18:8e:
5c:10:04:b8:14:b6:5a:94:d2:be:67:e3:69:e3:24:30:a1:8d:
55:b6:5f:88:a7:8a:2e:25:ad:7c:ec:5e:f2:57:ff:46:48:c1:
d9:11:41:e4:fc:88:1d:26:7e:ae:05:db:33:0d:8e:81:de:3c:
bb:7c:a1:53:7d:35:94:e9:b5:6c:e0:a5:3b:90:e8:d5:b9:aa:
54:fc:dd:16:69:da:b0:33:0e:d2:de:07:b3:e9:9f:97:f5:26:
7e:fc:13:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:19:54 2025 by rpki-client