Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS211139.roa
File: AS211139.roa (raw, json)
Hash identifier: t1Tb+MU7rLjETZbEKhXQ9MhBqq1BYWCR7/SMCbPX/t8=
Subject key identifier: 84:5D:0D:43:D6:DA:84:36:6F:FF:52:C2:2E:EF:2D:14:87:3B:88:01
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 6A002D2DB4F3F8CD5C5EAFB291E1315CD3F375B6
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS211139.roa
Signing time: Tue 05 Nov 2024 03:40:03 +0000
ROA not before: Tue 05 Nov 2024 03:35:03 +0000
ROA not after: Tue 04 Nov 2025 03:40:03 +0000
asID: 211139
IP address blocks: 2a06:a005:2c0::/44 maxlen: 48
2a06:a005:2d6::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 13 Dec 2024 02:56:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:00:2d:2d:b4:f3:f8:cd:5c:5e:af:b2:91:e1:31:5c:d3:f3:75:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Nov 5 03:35:03 2024 GMT
Not After : Nov 4 03:40:03 2025 GMT
Subject: CN=845D0D43D6DA84366FFF52C22EEF2D14873B8801
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:0b:b2:b9:3d:d2:8e:e0:c6:56:40:ef:57:e3:
27:09:19:03:f8:87:ea:28:38:01:0c:32:9c:7f:db:
43:1d:c1:82:2a:7a:fd:c6:b0:15:49:81:dc:63:5e:
60:f8:6d:c6:7e:50:1e:60:6e:c4:ed:31:e2:8d:4e:
16:15:87:85:7b:59:62:b9:b1:de:51:40:f9:43:8f:
66:4f:5e:59:42:cb:29:57:ac:67:69:71:ee:b9:22:
05:91:13:c3:ce:a2:25:5f:e5:6d:f7:31:09:8a:24:
66:46:ee:8f:bb:49:44:a9:70:8a:32:b3:f2:92:6d:
1d:39:dc:44:85:e2:35:d8:51:2f:03:c2:43:0b:19:
e9:49:e4:c5:46:df:5b:49:77:43:f6:c3:3d:1c:c9:
82:32:78:09:a9:86:e3:0b:2a:43:96:55:3a:41:c9:
a7:0c:ba:7a:6d:29:b8:6f:28:6f:32:33:92:ed:b6:
1c:d8:9b:2f:6e:67:99:11:8f:0b:c8:eb:73:40:ce:
0c:f4:2e:be:e3:53:46:6b:eb:86:94:34:a4:05:76:
3c:44:c1:2a:9e:1f:94:8c:0e:88:f9:7a:09:d3:b9:
78:8d:bf:1d:57:70:7d:f2:90:85:51:3f:97:6c:71:
89:43:5d:ed:94:b8:2f:93:a7:74:86:ae:ae:ef:ac:
60:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:5D:0D:43:D6:DA:84:36:6F:FF:52:C2:2E:EF:2D:14:87:3B:88:01
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS211139.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:2c0::/44
2a06:a005:2d6::/48
Signature Algorithm: sha256WithRSAEncryption
bc:3a:e6:df:db:76:61:44:db:04:5f:32:80:ae:1f:7a:62:2c:
67:48:f3:45:a9:f5:d9:6d:62:fc:97:2c:05:b8:61:d2:2a:a2:
67:b7:4b:61:0f:73:7a:66:ab:48:fc:05:5c:5d:cd:64:8f:80:
02:f3:da:68:9a:6b:98:d2:02:de:10:fb:47:9c:ce:f2:bc:a1:
88:5e:e6:76:ca:2b:e6:58:bf:f9:37:9a:2b:20:9a:95:76:ce:
e9:c5:f6:18:69:99:46:9b:f8:15:e2:d9:38:cf:99:bb:65:84:
be:77:7d:2f:f0:e3:3c:53:73:ff:4b:b6:93:16:49:6d:45:37:
f2:bd:78:9c:ff:72:90:fb:4b:9f:fb:1a:5c:38:ae:ac:90:04:
d2:e4:8a:f2:a0:a5:ee:ea:68:87:b8:3b:41:71:8d:04:d1:50:
96:44:de:13:73:95:db:fa:cb:4c:53:bf:5b:13:79:ae:19:f2:
2b:ec:7a:2f:2c:9b:a8:df:16:5c:5e:4a:66:44:57:de:65:fc:
87:71:23:14:c4:33:dd:ac:3b:ca:39:55:e9:a5:00:18:ac:52:
a8:15:3d:49:59:19:54:b9:96:69:57:dd:07:5b:36:7f:5d:7b:
74:cd:27:35:2b:8c:39:58:8c:ac:ef:4f:61:f2:86:28:7b:33:
32:22:0a:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:56:40 2025 by rpki-client