![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS207427.roa
File: AS207427.roa (raw, json)
Hash identifier: qdYqHc7w9xrG+/MMPLXkTjSa/aO24GOroJtDbWKuUSs=
Subject key identifier: 81:26:5D:27:B8:5D:7D:C5:D0:C9:B5:C9:27:42:E9:D9:07:DB:9A:2B
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 2E8724837AAAA9AD7D36078B98795052809FAC90
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS207427.roa
Signing time: Tue 02 Jul 2024 01:39:57 +0000
ROA not before: Tue 02 Jul 2024 01:34:57 +0000
ROA not after: Tue 01 Jul 2025 01:39:57 +0000
asID: 207427
IP address blocks: 2a06:1284::/32 maxlen: 48
Validation: Failed, certificate revoked on Mon 23 Dec 2024 06:51:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:87:24:83:7a:aa:a9:ad:7d:36:07:8b:98:79:50:52:80:9f:ac:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Jul 2 01:34:57 2024 GMT
Not After : Jul 1 01:39:57 2025 GMT
Subject: CN=81265D27B85D7DC5D0C9B5C92742E9D907DB9A2B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f0:6f:c1:c4:57:dc:56:13:d0:40:98:9d:6b:
72:79:a3:a1:a3:aa:49:ea:d2:f6:25:d8:d1:70:7e:
1d:27:08:3c:cd:47:34:d4:6a:32:7b:6b:18:16:f8:
a8:1d:6b:40:0f:f0:a7:90:12:a7:5e:07:30:ae:fb:
41:d3:c8:5d:2b:99:59:ca:fd:1b:f8:d3:c3:3e:09:
8c:05:1b:fc:3c:98:cf:8c:43:4f:05:e5:f0:1c:48:
06:b2:45:97:45:8e:6f:b6:c7:c6:97:2f:b2:7b:72:
e7:49:57:ee:d9:b9:83:28:2a:3e:08:21:8f:ff:63:
75:f2:2c:cd:c4:18:90:7c:71:92:b9:6b:a3:9d:3a:
18:1d:11:a4:b5:e9:ed:a2:be:32:d2:67:d7:85:f8:
56:d0:21:24:9f:a0:77:56:96:a0:75:07:dc:33:0d:
0c:55:5a:91:8f:f7:1a:79:9f:81:81:da:73:6b:f2:
ab:b0:eb:07:61:c1:fe:c5:1c:7f:ad:2d:78:ed:c2:
ba:fa:17:a2:10:94:74:c8:2b:29:de:b8:19:9d:da:
eb:3b:a2:23:1b:0d:eb:09:c2:8b:ad:c7:88:d4:25:
30:37:11:2d:49:83:0c:ef:75:51:d8:52:6d:ac:d1:
33:11:80:c2:f8:52:c1:79:c3:66:5c:86:58:a7:d3:
9e:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:26:5D:27:B8:5D:7D:C5:D0:C9:B5:C9:27:42:E9:D9:07:DB:9A:2B
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS207427.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:1284::/32
Signature Algorithm: sha256WithRSAEncryption
1e:d3:3a:a2:ad:16:0e:3d:91:5d:f6:80:54:41:2e:a4:d8:1d:
60:e3:8e:79:87:91:82:de:cc:f8:dc:c3:0e:a9:b7:00:cc:03:
f0:82:18:a2:66:e8:fa:1a:33:f9:e1:1b:85:fc:16:81:a3:86:
91:6c:a3:6e:23:ea:d0:3e:3d:42:10:e9:36:e8:34:94:82:de:
94:e2:fd:aa:8a:af:54:34:d1:e1:56:59:31:5f:b3:00:ce:fe:
3a:03:fc:32:c1:2a:65:a9:5d:e3:6b:92:bb:ab:e7:9d:9f:a2:
8f:4a:33:ac:9f:26:05:3c:49:ef:f7:ea:65:9c:30:7f:e0:d1:
05:82:26:03:b1:f3:6e:4f:ec:bd:25:ed:f2:8c:53:1b:52:40:
9c:40:9a:56:1a:23:89:1a:20:4d:74:c3:0b:01:82:22:4c:37:
2f:0c:af:f5:f4:50:a9:3e:7b:2a:c3:f9:93:d2:b1:cc:cd:36:
77:5e:e8:8c:2b:ce:59:10:a4:91:69:fb:f2:d4:7b:a3:c3:28:
1b:7f:56:5a:6f:ae:6c:25:53:dd:66:90:43:86:0e:e3:c8:90:
a3:6c:16:41:2a:58:dd:43:17:33:fe:a3:48:57:e4:b9:d8:a5:
74:d3:05:0f:a0:40:16:b2:85:93:a9:c9:3b:54:a7:65:ad:16:
fc:86:e1:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:30:08 2025 by rpki-client