Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS210925.roa
File: AS210925.roa (raw, json)
Hash identifier: SQO32NORGPjxe0klLzjT4hpuENMQwhRMVYcE0Q2yAg4=
Subject key identifier: FD:06:8A:92:12:53:91:FC:67:FF:0B:80:3A:45:84:73:29:52:8F:79
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 74B4AB7E9CD22F1BC91172DC300506CEFB7088BB
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS210925.roa
Signing time: Fri 22 Nov 2024 15:40:12 +0000
ROA not before: Fri 22 Nov 2024 15:35:12 +0000
ROA not after: Fri 21 Nov 2025 15:40:12 +0000
asID: 210925
IP address blocks: 2a06:a005:14::/48 maxlen: 48
2a06:a005:15::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 13 Dec 2024 02:56:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:b4:ab:7e:9c:d2:2f:1b:c9:11:72:dc:30:05:06:ce:fb:70:88:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Nov 22 15:35:12 2024 GMT
Not After : Nov 21 15:40:12 2025 GMT
Subject: CN=FD068A92125391FC67FF0B803A45847329528F79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:3f:fa:10:e2:fb:6b:96:c7:2b:5d:72:8c:e2:
e4:2c:57:05:aa:05:46:7d:50:f5:01:93:a4:66:99:
a8:dc:d9:b9:12:74:49:b1:0e:5c:b8:d3:83:10:00:
3e:d5:72:0b:0e:76:0f:e3:a8:d2:36:f0:4f:89:49:
cc:03:72:7c:dd:87:3c:7e:33:a7:c2:e8:2b:97:96:
a3:49:48:8a:f7:4d:70:1d:bd:f6:17:2a:0f:b1:b8:
42:b5:e1:1a:60:ed:e9:09:67:5e:1c:39:10:fa:ce:
7f:34:9f:e1:36:88:2d:61:e2:4e:35:32:79:ad:aa:
ee:0f:b4:fa:b6:cd:3f:98:ce:4a:b0:3c:65:c3:3f:
40:a3:6b:cd:7b:67:dc:8f:4e:24:35:b2:be:1c:55:
da:91:37:a3:0a:11:a5:96:35:88:04:96:07:12:3c:
09:dc:a7:f8:1d:e0:29:57:6c:b5:4f:02:a4:91:bb:
7f:00:8f:43:5f:5b:dc:82:a6:0c:67:a3:b3:f1:a5:
e8:ae:c8:df:fd:a4:e3:21:30:05:44:c4:77:59:87:
b0:92:bd:f4:1e:be:9e:3a:32:ed:ea:1d:ac:8a:1c:
90:01:25:40:e7:91:90:66:07:9a:32:01:66:6c:91:
01:2d:91:c4:8b:83:24:31:eb:dc:7d:26:95:fb:18:
e3:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:06:8A:92:12:53:91:FC:67:FF:0B:80:3A:45:84:73:29:52:8F:79
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS210925.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:14::/47
Signature Algorithm: sha256WithRSAEncryption
05:c2:c9:ee:c9:10:f6:f9:40:8a:96:59:9b:bb:78:f3:42:c9:
65:db:97:1f:e0:35:25:b0:80:34:38:1a:cb:b5:58:43:46:34:
dc:8a:89:1e:30:ca:94:dc:a7:b5:aa:48:d3:01:35:8b:63:3d:
e8:2e:37:f4:d2:d4:34:95:5f:8f:6a:86:c5:14:30:7d:eb:63:
f2:bf:6a:61:fd:86:a5:24:da:42:cb:85:b7:50:54:86:a8:8e:
ed:05:33:81:7c:70:a1:58:87:85:cd:be:0c:96:1c:85:36:a7:
42:af:98:ca:70:29:5b:75:1b:fb:cf:bc:e1:49:30:15:a7:ec:
f5:7e:d6:0d:8b:70:d1:f1:5e:61:08:7c:08:ec:ed:d5:20:8f:
4f:7f:45:b5:82:fb:29:87:0f:c1:d6:02:5f:09:23:01:c9:a0:
a4:40:a7:17:a6:d3:78:8f:13:56:e1:0d:dd:bf:9d:f1:80:38:
66:bb:3b:6d:e5:72:20:55:e1:78:71:fb:7f:db:80:79:f0:d1:
4f:02:fb:99:39:d7:93:87:4d:07:19:11:9e:26:d2:76:c1:2c:
01:10:42:34:fd:b0:29:68:29:06:3f:f2:58:2b:d2:4a:df:d6:
e7:d7:55:1e:36:1f:4d:5d:8f:70:7f:e9:37:02:6d:54:b3:b1:
a7:78:dd:ef
-----BEGIN CERTIFICATE-----
MIIE6DCCA9CgAwIBAgIUdLSrfpzSLxvJEXLcMAUGzvtwiLswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzk5NDM4ZjFiMTc2MmFlZWY4YTM1Y2Y0ZTZjYmFlOTc2
OTliZDAyMDAeFw0yNDExMjIxNTM1MTJaFw0yNTExMjExNTQwMTJaMDMxMTAvBgNV
BAMTKEZEMDY4QTkyMTI1MzkxRkM2N0ZGMEI4MDNBNDU4NDczMjk1MjhGNzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaP/oQ4vtrlscrXXKM4uQsVwWq
BUZ9UPUBk6Rmmajc2bkSdEmxDly404MQAD7VcgsOdg/jqNI28E+JScwDcnzdhzx+
M6fC6CuXlqNJSIr3TXAdvfYXKg+xuEK14Rpg7ekJZ14cORD6zn80n+E2iC1h4k41
Mnmtqu4PtPq2zT+YzkqwPGXDP0Cja817Z9yPTiQ1sr4cVdqRN6MKEaWWNYgElgcS
PAncp/gd4ClXbLVPAqSRu38Aj0NfW9yCpgxno7PxpeiuyN/9pOMhMAVExHdZh7CS
vfQevp46Mu3qHayKHJABJUDnkZBmB5oyAWZskQEtkcSLgyQx69x9JpX7GON1AgMB
AAGjggHyMIIB7jAdBgNVHQ4EFgQU/QaKkhJTkfxn/wuAOkWEcylSj3kwHwYDVR0j
BBgwFoAUeZQ48bF2Ku74o1z05suul2mb0CAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvMi83OTk0MzhGMUIx
NzYyQUVFRjhBMzVDRjRFNkNCQUU5NzY5OUJEMDIwLmNybDBkBggrBgEFBQcBAQRY
MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZVpRNDhiRjJLdTc0bzF6MDVzdXVsMm1iMENBLmNlcjBwBggrBgEF
BQcBCwRkMGIwYAYIKwYBBQUHMAuGVHJzeW5jOi8vcnBraS1ycHMuYXJpbi5uZXQv
cmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5MWJlM2Y5ZC8yL0FT
MjEwOTI1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEH
AQH/BBMwETAPBAIAAjAJAwcBKgagBQAUMA0GCSqGSIb3DQEBCwUAA4IBAQAFwsnu
yRD2+UCKllmbu3jzQsll25cf4DUlsIA0OBrLtVhDRjTciokeMMqU3Ke1qkjTATWL
Yz3oLjf00tQ0lV+PaobFFDB962Pyv2ph/YalJNpCy4W3UFSGqI7tBTOBfHChWIeF
zb4MlhyFNqdCr5jKcClbdRv7z7zhSTAVp+z1ftYNi3DR8V5hCHwI7O3VII9Pf0W1
gvsphw/B1gJfCSMByaCkQKcXptN4jxNW4Q3dv53xgDhmuztt5XIgVeF4cft/24B5
8NFPAvuZOdeTh00HGRGeJtJ2wSwBEEI0/bApaCkGP/JYK9JK39bn11UeNh9NXY9w
f+k3Am1Us7GneN3v
-----END CERTIFICATE-----
Generated at Sat Apr 12 05:14:19 2025 by rpki-client