![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS209933.roa
File: AS209933.roa (raw, json)
Hash identifier: qEYiIB96fZhg1FhNrC2jGcFGQup+QnNpXKIiJwBt+Zs=
Subject key identifier: ED:13:E7:65:C7:AF:00:EE:8E:21:0F:6F:50:EE:C8:83:50:F3:2D:60
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 6463156031E18FCCB6772B352192856C636C1CE4
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS209933.roa
Signing time: Tue 05 Nov 2024 03:40:00 +0000
ROA not before: Tue 05 Nov 2024 03:35:00 +0000
ROA not after: Tue 04 Nov 2025 03:40:00 +0000
asID: 209933
IP address blocks: 2a06:a005:1164::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 13 Dec 2024 02:56:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:63:15:60:31:e1:8f:cc:b6:77:2b:35:21:92:85:6c:63:6c:1c:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Nov 5 03:35:00 2024 GMT
Not After : Nov 4 03:40:00 2025 GMT
Subject: CN=ED13E765C7AF00EE8E210F6F50EEC88350F32D60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f0:5f:cc:ea:86:a4:cf:07:a1:f3:85:2b:71:
65:fe:c7:81:9e:ee:16:b4:f0:05:d5:43:ce:9d:72:
5d:d5:91:aa:c0:90:b8:6e:d9:a0:89:31:1c:f0:1e:
12:d1:94:29:c6:7f:df:48:b3:27:49:18:2b:6a:f7:
1b:30:5a:e1:06:a9:ac:0b:b6:55:95:91:20:6c:57:
ea:41:44:96:d2:f6:24:6f:ab:0e:02:bd:00:c9:40:
7e:84:11:7b:aa:19:b1:8d:aa:1f:09:d1:4a:fe:35:
db:41:17:b4:44:34:3d:9d:6f:82:1a:99:77:13:fa:
44:aa:5b:d1:76:72:8b:32:72:cd:d1:b1:ae:89:24:
df:ce:14:49:75:b9:5f:79:ed:e4:7a:c5:98:e9:a1:
13:2e:50:f5:10:bc:d7:a3:9a:63:f5:50:a8:59:3a:
d1:67:f7:5c:c5:a2:ea:9c:9e:30:75:da:83:80:83:
66:54:11:fe:2f:2f:5b:a7:6e:04:1b:76:2d:11:8e:
2c:f3:a2:7f:ba:6c:17:61:29:e6:d1:2f:d5:93:4d:
1c:df:da:6c:75:55:53:63:50:70:49:13:ba:4e:9e:
8e:4e:44:70:b7:fc:5a:14:8a:09:cc:cb:2f:f0:e3:
4b:ab:3d:93:d7:35:ce:06:cf:b7:d5:16:aa:18:88:
99:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:13:E7:65:C7:AF:00:EE:8E:21:0F:6F:50:EE:C8:83:50:F3:2D:60
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS209933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1164::/48
Signature Algorithm: sha256WithRSAEncryption
6b:f4:eb:38:4b:65:95:c1:25:83:c4:13:b5:86:c0:02:9f:7e:
c1:85:66:a7:2b:9a:c2:0c:08:2a:62:1a:8c:8f:a6:6f:51:88:
82:92:98:df:9a:51:a8:b1:d0:6d:00:b4:e0:6d:fd:e5:3e:ff:
2a:2b:b8:66:53:f7:1d:05:55:86:7e:9f:b9:28:c6:46:72:73:
c5:70:ab:cb:61:b8:cf:a3:81:28:85:59:2a:f1:dc:be:b0:74:
b0:a2:2c:20:fd:01:ec:88:38:0b:66:72:08:61:d0:39:65:43:
ae:79:37:7d:e6:82:f7:46:d2:bf:b7:2a:a6:a4:d3:50:ec:a2:
05:ee:f7:85:e4:40:fa:03:79:75:c2:2e:6c:d6:2d:b9:73:ef:
85:18:f2:b0:94:1d:76:82:f3:6d:cf:98:f8:f2:37:b7:00:e9:
f8:7d:8a:57:75:85:a1:d5:a8:30:ec:3a:5f:36:94:a3:74:70:
cf:ce:f5:b6:29:66:c8:ab:35:17:9e:41:d3:47:06:03:44:dd:
33:65:13:34:9f:2c:81:6f:26:a9:43:f5:8f:26:5a:1e:45:b8:
90:34:66:82:1b:07:29:72:20:39:82:56:60:25:d4:99:b3:40:
57:fe:ff:0a:ea:58:8a:fd:44:b2:d8:51:96:5e:f1:be:b9:27:
77:04:36:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:12:49 2025 by rpki-client