Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS205432.roa
File: AS205432.roa (raw, json)
Hash identifier: xg3Yc1dKdPsF2wT47O/0DWjU5O4NZrBk9K2YdqBRIfQ=
Subject key identifier: 49:BB:E6:DD:37:D7:25:C0:2B:A0:F5:70:96:4E:53:9E:8A:A8:21:1C
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 20806006EDF52A282BDA3BF4B04132D35CE352E1
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS205432.roa
Signing time: Tue 05 Nov 2024 03:40:06 +0000
ROA not before: Tue 05 Nov 2024 03:35:06 +0000
ROA not after: Tue 04 Nov 2025 03:40:06 +0000
asID: 205432
IP address blocks: 2a06:a005:1a::/47 maxlen: 48
2a06:a005:5e2::/48 maxlen: 48
2a06:a005:680::/44 maxlen: 48
2a06:a005:690::/44 maxlen: 48
2a06:a005:6a0::/44 maxlen: 48
2a06:a005:85c::/47 maxlen: 48
2a06:a005:9d0::/44 maxlen: 48
Validation: Failed, certificate revoked on Fri 13 Dec 2024 02:56:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:80:60:06:ed:f5:2a:28:2b:da:3b:f4:b0:41:32:d3:5c:e3:52:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Nov 5 03:35:06 2024 GMT
Not After : Nov 4 03:40:06 2025 GMT
Subject: CN=49BBE6DD37D725C02BA0F570964E539E8AA8211C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:73:b6:b4:a7:79:36:16:e0:fa:99:ad:a5:7a:
ac:9f:59:0c:55:ef:6f:97:36:34:71:ed:e8:d0:4d:
89:b2:d3:e8:e1:c7:76:33:7d:1b:2c:b4:28:c9:87:
40:f8:f8:9b:65:6f:4e:1c:3a:09:f0:04:54:6a:b6:
f8:9f:a2:f5:8b:34:ab:16:a2:85:af:d3:03:26:b5:
a9:ec:84:6c:97:9f:4a:af:c1:bd:f4:87:20:89:cf:
97:a4:0a:2b:bf:12:67:16:43:72:7a:00:b8:9e:70:
d8:3b:1c:a0:66:eb:43:52:60:a8:c5:97:b0:21:4a:
12:48:bf:0f:86:80:af:c4:b8:e7:ae:82:0a:1a:c7:
da:82:2b:3e:ce:78:ee:c9:24:03:b8:e1:a2:a8:32:
37:9e:02:31:d0:62:25:e5:c1:53:1b:31:b5:cb:b0:
b7:1f:d4:a9:4f:4e:ad:f7:b9:2f:2b:fa:6e:1c:bc:
df:63:2d:6c:c0:ed:c2:bb:52:a6:37:eb:9a:18:cb:
60:fe:a8:56:93:6e:fb:47:c4:cb:29:74:2d:7a:26:
bd:cc:4d:19:94:1b:f0:18:8b:22:57:db:c3:da:d9:
9b:3e:73:e2:e1:f5:46:dd:66:27:5a:b7:f2:18:40:
9a:5e:ea:84:35:c1:47:12:77:55:27:05:05:ab:c3:
88:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:BB:E6:DD:37:D7:25:C0:2B:A0:F5:70:96:4E:53:9E:8A:A8:21:1C
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS205432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1a::/47
2a06:a005:5e2::/48
2a06:a005:680::-2a06:a005:6af:ffff:ffff:ffff:ffff:ffff
2a06:a005:85c::/47
2a06:a005:9d0::/44
Signature Algorithm: sha256WithRSAEncryption
39:f2:c2:88:e9:ea:d4:0d:5d:d0:2c:af:75:53:53:78:9c:86:
99:13:17:f2:ec:4f:ae:aa:13:a2:cf:34:30:6a:b0:5c:b8:ca:
65:31:c8:30:df:f3:91:2d:c2:68:6f:6c:d2:82:3f:62:15:14:
34:25:7d:cd:58:47:e0:70:40:6d:5b:ad:d8:f6:3a:ac:74:a7:
68:d3:3d:1c:6a:0b:b0:38:c2:1f:62:d4:3d:b2:33:bc:e4:15:
71:6e:e0:94:ec:85:34:a9:83:85:e5:ae:9a:b1:bb:4d:0b:eb:
9a:f9:e1:ae:4f:c3:ca:2a:e5:df:9c:0d:80:79:43:35:a2:c6:
d9:a0:9a:50:b3:aa:9c:f1:c9:ff:26:a0:4b:0c:da:6b:9e:b4:
66:bb:5d:c3:9d:0e:90:1d:50:15:f6:39:4c:c9:94:8a:ce:07:
13:c2:14:e5:a3:4f:f0:6a:a8:b4:0c:21:ec:75:f6:fb:27:c7:
89:3b:2d:68:fc:ea:88:f1:21:9f:65:f5:48:d4:c8:2d:4b:7a:
d6:86:03:94:8f:b2:03:b4:04:ec:6d:4d:f0:6e:84:b3:07:c7:
aa:c9:36:1e:ce:d2:08:c2:c6:ae:c7:8f:60:60:ed:47:24:7d:
1f:d5:60:a6:26:57:a1:4d:a3:cd:ee:3d:9e:79:31:95:f6:d7:
61:a3:3c:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:14:47 2025 by rpki-client