Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS209554.roa
File: AS209554.roa (raw, json)
Hash identifier: gF2NZeM4tU9O/ZfMnYTaspmNs5w/LyA50nPaCUS8VI8=
Subject key identifier: 1F:67:25:0F:C1:21:33:FA:0A:DA:E4:A2:1C:82:63:D0:00:FB:38:CF
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 6862A897E7CE4F3F02D863A74C43C25C944B2551
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS209554.roa
Signing time: Tue 26 Nov 2024 16:40:12 +0000
ROA not before: Tue 26 Nov 2024 16:35:12 +0000
ROA not after: Tue 25 Nov 2025 16:40:12 +0000
asID: 209554
IP address blocks: 2a06:a005:b6e::/48 maxlen: 48
2a06:a005:1872::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 13 Dec 2024 02:56:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:62:a8:97:e7:ce:4f:3f:02:d8:63:a7:4c:43:c2:5c:94:4b:25:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Nov 26 16:35:12 2024 GMT
Not After : Nov 25 16:40:12 2025 GMT
Subject: CN=1F67250FC12133FA0ADAE4A21C8263D000FB38CF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f3:5c:68:b3:08:b1:5d:1e:f1:e2:24:c0:c2:
a2:78:0d:45:3d:31:84:14:32:c5:ad:ba:03:31:85:
1f:b1:25:93:29:e2:5e:a6:98:60:70:fe:9a:56:ea:
69:40:84:fa:32:26:fa:ae:1c:f0:d3:90:e9:dd:d0:
2d:b4:3b:d4:dd:2a:60:96:5a:e4:2e:43:26:34:7e:
0d:b0:dd:c2:3f:fd:ce:07:00:86:d6:0d:ad:93:d5:
27:df:5a:54:95:7c:51:58:88:68:5f:14:00:26:f4:
7d:bb:fe:0b:0f:51:60:7d:5c:9d:2e:4e:2e:24:6b:
2f:b5:29:7c:41:85:5d:0d:6b:b8:fa:84:23:db:70:
e0:8d:27:7f:ce:67:63:ce:fc:95:95:b9:35:b0:e3:
f9:eb:ba:fc:61:27:7e:19:f1:37:92:5e:94:fe:13:
a4:0f:8f:f2:72:b8:10:19:e4:59:c0:db:33:45:26:
3b:f7:6b:4d:93:42:99:ce:01:80:cd:d0:72:f6:26:
8a:9b:7a:3c:95:94:4b:45:f9:da:0f:b8:ca:4d:b4:
6f:ab:a0:5f:47:1d:ef:0b:04:0b:02:06:38:59:84:
8d:4d:e8:43:20:a5:50:5d:5b:0e:68:65:aa:bb:83:
66:c1:04:5a:cf:93:e6:57:4e:11:8b:5c:8c:9f:85:
a0:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:67:25:0F:C1:21:33:FA:0A:DA:E4:A2:1C:82:63:D0:00:FB:38:CF
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS209554.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:b6e::/48
2a06:a005:1872::/48
Signature Algorithm: sha256WithRSAEncryption
4d:89:42:f1:9f:28:be:95:07:70:23:87:10:7a:9b:fe:1d:57:
8e:2c:46:fd:00:df:22:c6:c6:39:50:6e:56:ee:51:5a:c5:c1:
e9:a8:23:a1:7e:72:92:d0:9a:cc:99:93:fc:d8:51:11:5c:a7:
72:b8:69:d2:ec:3e:94:2e:2c:d9:54:71:d5:2d:1d:d4:33:4e:
4e:66:0a:ad:1d:62:fc:b2:cb:72:a7:c8:a6:04:3f:33:65:df:
ae:6d:c1:40:c8:bc:aa:40:a1:d9:a6:cd:f6:2c:55:8f:64:4d:
26:8a:d5:54:e9:41:e9:27:73:2e:4e:02:8a:e7:94:6e:f3:ca:
3c:6b:e3:5f:ac:7f:fe:d1:37:53:08:d2:51:f7:37:cb:55:fd:
36:0c:7a:c3:37:1d:ca:09:97:50:b1:ce:8b:b4:0f:c5:9c:64:
03:43:2c:97:1a:58:a2:69:f3:ff:2a:1e:e8:18:67:3c:64:b3:
e5:af:fc:18:ab:b8:ce:15:92:4e:f4:02:59:ba:b5:aa:61:61:
4c:b2:39:29:47:af:9d:c7:b3:75:5a:9c:9c:52:70:65:7f:c2:
41:f6:d1:c8:70:72:ad:e0:17:5c:4a:c0:e3:07:53:bf:a0:cf:
e3:cb:80:f0:df:b4:9c:d3:fb:36:fe:89:26:f1:b1:8a:09:dd:
8c:56:66:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:04:19 2025 by rpki-client