Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS210387.roa
File: AS210387.roa (raw, json)
Hash identifier: k76EtzPYy8VeMXpWkFEc9fBsmzC/VJpji2kdT1/NxQ8=
Subject key identifier: D7:85:78:27:D8:74:9F:68:E3:39:75:24:20:8D:E6:2F:F9:29:C7:FC
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 6F175438789EA460E26CB2C45BCCCB41B186FBF8
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS210387.roa
Signing time: Tue 05 Nov 2024 03:40:09 +0000
ROA not before: Tue 05 Nov 2024 03:35:09 +0000
ROA not after: Tue 04 Nov 2025 03:40:09 +0000
asID: 210387
IP address blocks: 2a06:a005:435::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 13 Dec 2024 02:56:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:17:54:38:78:9e:a4:60:e2:6c:b2:c4:5b:cc:cb:41:b1:86:fb:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Nov 5 03:35:09 2024 GMT
Not After : Nov 4 03:40:09 2025 GMT
Subject: CN=D7857827D8749F68E3397524208DE62FF929C7FC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:43:ca:2c:c8:0c:56:8d:eb:ff:f2:1d:e4:44:
fa:83:79:99:8a:70:33:ba:2a:5f:67:12:c1:2b:9f:
8e:16:cb:ce:f8:51:73:5e:1e:df:55:ca:d2:1b:51:
17:4c:db:11:0e:e0:ef:d0:c3:65:6a:cb:1a:cf:c2:
94:e8:ad:f7:59:d0:2f:8a:46:ec:d2:bc:d3:45:76:
af:a6:c3:2b:5f:3e:b2:7f:68:b7:0c:d3:48:40:dd:
36:58:19:b2:4f:3e:3a:30:a0:37:9d:83:fb:d6:95:
83:9d:2b:42:83:e6:42:07:95:bd:eb:1a:c2:10:52:
cb:62:46:63:77:19:b2:39:db:a0:bb:77:0c:14:10:
fa:92:81:8c:75:26:fb:46:cf:50:8d:df:ca:11:8e:
65:00:51:85:13:0a:c4:ca:7b:c5:b0:83:b3:dc:3d:
06:ac:2a:43:ab:33:97:fb:ec:d1:8e:43:80:e7:33:
7f:08:5d:c4:73:0e:c1:7b:a4:75:60:7c:2d:fb:c7:
4a:59:c9:c7:78:fd:03:0e:d2:e5:4c:1b:4e:ef:11:
38:6a:ce:ba:4a:e9:e4:de:2c:2b:64:47:93:7f:0a:
d9:92:03:de:45:d2:db:a8:1e:43:bb:62:59:5c:fa:
83:9c:cf:e2:dd:e1:40:0a:2f:d8:19:e0:d2:25:0e:
c9:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:85:78:27:D8:74:9F:68:E3:39:75:24:20:8D:E6:2F:F9:29:C7:FC
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS210387.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:435::/48
Signature Algorithm: sha256WithRSAEncryption
19:86:04:88:07:9e:97:be:37:10:a1:29:81:8f:04:a5:62:d6:
f6:5a:dd:df:26:7a:f6:49:1e:41:82:d5:87:74:76:5d:93:85:
ee:b1:ca:19:49:f6:87:ee:e0:1f:98:a6:9c:a7:e4:60:85:8d:
97:4a:d0:64:ad:ee:87:ca:ff:7c:c6:32:79:de:d5:89:b2:1b:
0f:89:c4:ad:49:f5:0b:1d:1d:39:72:c8:b3:b5:7f:01:03:30:
72:22:2b:d1:32:e1:b2:9b:69:72:a2:3a:d4:37:79:d7:54:86:
47:59:ee:eb:a4:61:8b:a8:e1:c6:72:6c:19:90:bb:ec:33:9b:
e9:93:06:44:1b:96:e7:8c:7d:b9:c1:8e:f3:7e:da:e4:c8:3e:
37:7b:3d:ad:c2:08:7d:8b:12:6d:6c:4b:5f:6b:19:be:22:8e:
91:e0:fc:8d:94:b4:8c:4f:93:7d:4a:2e:a0:91:aa:e3:9a:aa:
29:f5:c2:33:a1:d4:73:5f:4b:1b:ab:46:3f:47:cc:e6:07:f6:
87:0b:7e:13:5e:d5:08:50:fa:b7:09:74:29:7a:73:22:7a:b1:
09:f3:e4:c5:15:1e:32:37:d8:de:29:98:37:77:e4:56:0a:0b:
4b:5f:cc:91:80:3e:fe:c7:f2:55:dc:7c:97:ed:ff:43:2f:fd:
19:34:6f:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:49:04 2025 by rpki-client