![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS210370.roa
File: AS210370.roa (raw, json)
Hash identifier: 5uk8cHgnK8w+bp1PSDRpr5ay0F5bOmIzx/AMspMxy7c=
Subject key identifier: 43:81:56:73:1A:B6:2B:8C:BB:63:F9:FD:8E:12:C5:94:45:F7:81:B6
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 689E89A4CBF3755223DDDB1E72728632A306F8C2
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS210370.roa
Signing time: Tue 05 Nov 2024 03:40:04 +0000
ROA not before: Tue 05 Nov 2024 03:35:04 +0000
ROA not after: Tue 04 Nov 2025 03:40:04 +0000
asID: 210370
IP address blocks: 2a06:a005:4::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 13 Dec 2024 02:56:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:9e:89:a4:cb:f3:75:52:23:dd:db:1e:72:72:86:32:a3:06:f8:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Nov 5 03:35:04 2024 GMT
Not After : Nov 4 03:40:04 2025 GMT
Subject: CN=438156731AB62B8CBB63F9FD8E12C59445F781B6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:74:79:23:ae:ad:9d:22:a2:f3:fb:8c:44:8e:
89:78:ea:54:10:a2:3d:38:e3:df:77:d0:59:aa:02:
19:f5:95:06:d9:a9:6f:de:7e:4f:17:fe:18:13:c8:
9a:aa:2a:35:3a:e2:63:26:ca:74:f3:81:08:b0:21:
66:ee:07:5c:a6:78:7e:8a:3a:b7:0c:9c:12:aa:98:
e0:08:27:30:9e:5d:35:8c:90:e5:b1:87:16:5f:ff:
10:15:fe:ce:45:01:26:8d:f9:6c:41:c6:71:c5:df:
67:61:13:94:e5:67:b7:48:60:5e:11:cf:59:4d:1e:
0c:81:ad:8d:cc:e5:a4:d8:19:48:c5:db:ed:56:23:
c4:2b:de:b4:1c:65:97:b1:09:93:e2:c2:57:88:04:
9f:a0:66:a2:e1:0e:97:d6:66:47:62:0d:20:da:fe:
f1:25:5b:27:82:02:e5:d5:82:bb:05:e9:e6:9a:87:
e6:64:1b:16:b3:ef:be:09:73:8d:0c:24:bc:78:fe:
ed:dd:1d:d5:31:8b:eb:5b:aa:8f:39:a8:68:7b:19:
1e:d7:89:fb:ef:e8:88:8b:29:22:81:e5:ad:8e:31:
9c:60:b3:f9:e7:e8:c6:ff:12:e5:ba:d5:ce:86:c2:
59:ea:2c:e3:11:1d:d4:6b:61:36:23:ec:ad:6c:ac:
f1:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:81:56:73:1A:B6:2B:8C:BB:63:F9:FD:8E:12:C5:94:45:F7:81:B6
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS210370.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:4::/48
Signature Algorithm: sha256WithRSAEncryption
12:ee:be:d5:62:7e:56:7c:5a:88:e8:58:94:ba:f0:c8:21:eb:
63:36:ec:4b:f9:55:ab:13:fe:60:60:b2:f6:ab:2b:51:e5:e7:
6a:08:3b:34:f4:e8:49:dc:c8:61:08:67:d8:6f:82:8e:f5:5f:
0b:03:aa:0e:3d:6b:bf:19:ed:a7:93:bb:c8:5f:d8:c7:63:81:
f9:cf:c2:fd:b3:38:82:01:b5:c3:20:cf:80:12:a5:40:82:12:
e8:2f:34:a6:fc:47:47:41:2f:43:5c:41:11:ef:1a:4b:80:5c:
e8:6b:c5:30:4a:dd:4e:2d:be:2d:31:2d:f0:e7:4d:03:c5:cd:
d9:3a:fe:ef:dd:04:95:a7:13:6c:08:8c:c9:bb:80:cd:a8:ce:
4a:70:99:ce:8c:23:6e:f4:d2:09:94:66:60:5e:f7:05:4e:30:
b4:b5:20:f8:4c:86:9c:d5:3b:92:21:9c:92:d0:2f:48:72:cd:
21:b3:7d:20:e0:0a:38:0f:7a:42:e1:c8:25:f5:c6:86:37:19:
c5:40:29:41:38:a4:85:9f:bf:0f:cc:3a:ba:2f:09:b4:e4:34:
35:1c:71:84:7c:1b:29:3e:85:fe:ce:8e:ab:46:b3:95:b1:cc:
21:2d:32:34:97:f5:db:6e:0e:34:e1:24:c9:86:a2:01:a6:6f:
49:27:9c:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:27:09 2025 by rpki-client