![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS207762.roa
File: AS207762.roa (raw, json)
Hash identifier: bM3jx+v5fRQmOdGhaDhkOYXt3jZQQgPlM9wn/uQrN58=
Subject key identifier: 34:C9:54:82:08:40:7E:83:3D:57:BA:AF:66:F0:AD:EC:AD:52:C6:31
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 2FA19B8415A2DC47C10081FBBCE5D50C985E99FD
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS207762.roa
Signing time: Tue 05 Nov 2024 03:40:04 +0000
ROA not before: Tue 05 Nov 2024 03:35:04 +0000
ROA not after: Tue 04 Nov 2025 03:40:04 +0000
asID: 207762
IP address blocks: 2a06:a005:a0c::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 13 Dec 2024 02:56:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:a1:9b:84:15:a2:dc:47:c1:00:81:fb:bc:e5:d5:0c:98:5e:99:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Nov 5 03:35:04 2024 GMT
Not After : Nov 4 03:40:04 2025 GMT
Subject: CN=34C9548208407E833D57BAAF66F0ADECAD52C631
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b5:78:ef:79:a3:63:a6:9d:cf:f8:18:63:ee:
dc:eb:97:1f:50:73:9a:47:b7:0f:b7:f2:ad:00:a4:
74:6f:6e:c5:4c:12:5c:51:1f:32:64:fb:6f:bb:11:
ea:b3:b5:ca:96:e1:4c:5a:7a:6d:16:c7:8c:f4:fd:
0a:ab:5a:40:3a:1e:9b:cd:0b:59:1b:f1:55:f6:16:
d5:f7:4a:7e:09:58:dc:e7:71:a1:b3:b0:01:52:93:
b3:b9:8b:6d:64:57:86:af:12:7d:e4:ce:b0:e4:e7:
6f:c8:12:93:68:14:88:69:13:c8:03:9b:67:ca:56:
78:6b:7e:da:e0:f1:fd:58:74:3a:c3:ce:4f:18:98:
15:80:51:0d:23:da:09:34:53:a6:a1:e0:68:81:fb:
45:bd:ca:84:fb:ca:6d:95:42:26:42:55:37:f7:5c:
5e:3a:e0:a8:b4:69:c8:d8:c3:f2:0a:2f:08:cd:04:
27:5d:35:1e:96:b8:da:7d:1d:1a:2e:16:81:1f:dc:
5c:b9:d0:83:a6:e2:42:c3:0a:b6:d0:4e:d3:ca:d5:
c2:b4:87:ae:c7:38:42:28:2e:6b:10:fc:3b:1b:53:
03:4b:76:67:34:4e:10:20:36:1a:2c:cd:ef:d1:9b:
18:67:5e:ea:c8:0b:64:5c:02:ed:73:6d:2d:70:03:
d3:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:C9:54:82:08:40:7E:83:3D:57:BA:AF:66:F0:AD:EC:AD:52:C6:31
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS207762.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:a0c::/48
Signature Algorithm: sha256WithRSAEncryption
3c:72:87:10:2f:b1:8b:8a:49:c9:3b:77:e1:d5:a4:b8:4b:ff:
9a:a6:3e:ff:7d:01:44:25:d4:b4:8c:7e:e8:52:74:69:8f:0e:
b1:37:79:13:1a:6e:35:2f:86:15:cd:51:15:a2:68:4b:23:17:
3d:88:bd:cc:39:46:6b:8c:8f:d2:f2:31:f2:34:84:2b:39:30:
75:09:2c:64:cb:3e:aa:b2:71:f7:01:b0:6d:e8:87:51:c1:fb:
99:06:8f:d4:c9:f2:d1:22:fc:fa:19:1b:4c:fd:9e:36:97:31:
38:48:a7:f3:90:29:40:84:40:cd:4d:a8:78:80:16:e0:80:0d:
0c:18:da:c5:6b:f0:f1:71:94:61:14:ac:11:bd:45:52:8d:8a:
60:78:d2:7a:cf:ed:59:38:18:84:cb:f7:d0:db:95:a9:ce:a2:
79:7f:16:8e:a9:c2:a0:21:1e:5a:6b:76:47:59:30:0d:15:c9:
59:47:e4:e0:06:a2:27:d0:89:4d:22:f7:97:f6:9c:aa:29:52:
19:95:fe:4f:5e:e9:a5:c4:76:0e:f6:bc:b4:14:c3:b6:0e:0b:
67:0f:ae:d9:3b:28:6d:fe:e7:d1:3c:5b:58:f2:ba:1d:68:af:
da:6d:6e:00:74:98:a0:7a:5c:0f:c9:d1:34:34:75:60:11:63:
cb:2d:ff:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:25:59 2025 by rpki-client