Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS210013.roa
File: AS210013.roa (raw, json)
Hash identifier: Jcwx3rBddT2rPtGV/9hp20kL5QanTK81b+Wwi+HkCa4=
Subject key identifier: 75:1E:A3:E5:08:63:A9:F5:63:12:38:97:41:36:91:9F:97:B9:87:FC
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 4A51D8A8A760DA99DAAF2CFEE75CED409F7DD03A
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS210013.roa
Signing time: Sat 30 Nov 2024 04:40:12 +0000
ROA not before: Sat 30 Nov 2024 04:35:12 +0000
ROA not after: Sat 29 Nov 2025 04:40:12 +0000
asID: 210013
IP address blocks: 2a06:a005:490::/44 maxlen: 48
2a06:a005:1460::/44 maxlen: 48
2a06:a005:1510::/44 maxlen: 48
Validation: Failed, certificate revoked on Fri 13 Dec 2024 02:56:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:51:d8:a8:a7:60:da:99:da:af:2c:fe:e7:5c:ed:40:9f:7d:d0:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Nov 30 04:35:12 2024 GMT
Not After : Nov 29 04:40:12 2025 GMT
Subject: CN=751EA3E50863A9F5631238974136919F97B987FC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f6:36:27:3b:51:26:26:f6:4a:34:fc:20:bd:
51:7b:a5:5b:45:84:97:a0:11:8c:e3:ea:40:4e:4a:
c5:3c:47:48:c9:15:df:6f:71:94:92:7b:d5:96:f0:
19:22:fa:0b:b7:1a:1f:6e:df:73:48:8c:a3:53:25:
1e:84:36:9f:97:e9:db:08:44:78:5e:b0:d5:2f:f0:
0a:e1:77:23:e1:5b:45:03:ad:b7:84:14:2c:4a:3b:
0b:06:4a:8b:3b:70:f7:83:ed:7e:60:a9:9b:9b:a9:
9e:ae:cd:8e:f6:5b:05:7f:da:f7:24:64:6d:55:27:
6e:e2:fc:08:30:5f:5f:0d:7f:65:7c:30:1b:37:83:
73:e3:2c:92:7c:e3:bd:9c:34:8b:f2:2c:38:b3:29:
0d:2f:e0:d1:06:f8:c8:6b:54:40:7c:ab:01:97:fc:
cf:dd:6e:86:7b:a8:fa:83:62:e9:40:be:af:07:f7:
b7:a2:a0:11:c0:de:fd:39:ab:52:89:8b:4f:f4:0b:
cf:bb:a1:49:8c:3f:2f:09:6d:7b:65:79:64:32:27:
9d:f5:b9:61:49:10:59:67:2a:7c:15:7b:bb:f8:9e:
e7:10:a5:ea:20:4d:60:11:f1:6d:39:1a:75:8c:3e:
58:5b:1a:85:33:35:b4:06:83:af:4f:68:80:e6:d4:
5f:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:1E:A3:E5:08:63:A9:F5:63:12:38:97:41:36:91:9F:97:B9:87:FC
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS210013.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:490::/44
2a06:a005:1460::/44
2a06:a005:1510::/44
Signature Algorithm: sha256WithRSAEncryption
13:3c:00:7c:13:26:26:0b:13:39:e0:4c:4f:53:09:63:99:a5:
53:13:01:9f:6e:9d:0a:ba:db:1d:27:bc:46:bd:83:e8:ae:64:
6e:46:b0:77:4c:0d:f8:97:13:3f:53:74:86:52:66:72:5f:36:
8b:3a:94:78:62:15:18:d7:1e:86:67:85:3d:e7:f8:eb:86:86:
ef:90:63:0d:7e:62:1b:b3:03:92:0a:ca:1d:e7:1e:d2:a4:fe:
1c:1e:b2:04:2b:5e:f7:b0:2a:6e:90:50:3e:a0:69:d2:c2:18:
06:7f:6c:27:c5:3e:f1:db:1c:7d:cd:ed:1e:97:f1:69:bf:06:
5f:61:2c:44:8d:95:df:b6:a8:ce:2c:56:17:6e:71:82:5c:59:
5e:15:8d:51:52:2a:fe:ad:b7:91:85:0a:06:50:03:4f:78:9d:
b8:f3:0e:79:ec:4e:6b:c1:91:a5:a6:7e:c3:a2:5c:2f:da:8f:
21:a7:ef:f3:62:81:2f:82:45:b5:a2:1a:9c:4b:29:f2:48:84:
90:83:03:bc:4e:a0:f4:0c:7a:6e:f9:b8:76:b0:52:0c:01:74:
6e:e6:c7:b1:c5:be:95:41:c9:61:b4:36:19:86:a7:f5:96:d8:
cc:3c:b8:71:98:b4:16:f2:67:64:50:eb:d1:9b:bd:44:d6:83:
97:14:30:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 05:16:52 2025 by rpki-client