![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS211390.roa
File: AS211390.roa (raw, json)
Hash identifier: VL3yc+JoAGgSE74ITcgfLyTadX82/QHxZkLgiquVwWU=
Subject key identifier: 6D:37:B0:7C:64:BF:D5:8B:B1:F9:5B:CA:50:39:D7:F9:20:D8:7B:DE
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 57E2F6376F6D76FD4CB34D36243A7387BE898ACA
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS211390.roa
Signing time: Tue 05 Nov 2024 03:40:07 +0000
ROA not before: Tue 05 Nov 2024 03:35:07 +0000
ROA not after: Tue 04 Nov 2025 03:40:07 +0000
asID: 211390
IP address blocks: 2a06:a005:45e::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 13 Dec 2024 02:56:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:e2:f6:37:6f:6d:76:fd:4c:b3:4d:36:24:3a:73:87:be:89:8a:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Nov 5 03:35:07 2024 GMT
Not After : Nov 4 03:40:07 2025 GMT
Subject: CN=6D37B07C64BFD58BB1F95BCA5039D7F920D87BDE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:11:60:cd:5a:2e:54:fa:94:ef:4e:d9:5b:7a:
98:4e:2c:3e:10:b7:a9:5d:88:f1:09:ca:19:4d:93:
4f:a2:8d:24:03:b9:54:83:bb:ae:7e:43:58:c6:15:
3b:45:c2:3c:e7:cf:c7:8e:6b:a6:97:c8:74:ff:1d:
62:70:29:6d:c2:10:40:2a:b5:57:e5:31:ee:49:55:
5b:ac:78:67:01:e2:67:ad:c3:74:3f:aa:a7:f1:13:
e7:f4:b2:a4:bd:e7:a9:71:3c:ca:2b:36:71:a7:05:
e7:c6:77:6f:c4:2f:23:63:a9:48:55:75:e9:df:bc:
a2:46:4e:35:f0:a7:1c:6b:d5:d5:7d:a9:e4:12:19:
eb:6c:02:e5:53:6b:f9:31:87:04:94:bd:b4:36:78:
b6:81:15:72:ae:d8:2b:59:ba:06:ca:78:69:f9:38:
15:52:d0:28:69:39:22:af:eb:aa:3c:82:e9:8a:c3:
71:93:f4:7a:2b:4f:76:35:f3:0b:b9:6d:75:eb:c8:
4f:be:79:7d:8b:92:59:bd:51:64:86:97:8a:b5:cd:
88:cf:b1:1d:67:71:7e:95:7e:8c:24:26:f4:3e:37:
56:ad:05:51:ad:e1:2d:2d:cb:e3:81:d0:4f:75:53:
56:c7:00:09:d8:14:70:1b:f6:bf:ea:07:8d:b2:12:
c2:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:37:B0:7C:64:BF:D5:8B:B1:F9:5B:CA:50:39:D7:F9:20:D8:7B:DE
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS211390.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:45e::/48
Signature Algorithm: sha256WithRSAEncryption
2c:7b:86:37:0e:10:34:aa:41:d5:88:77:31:fd:6b:85:b5:e2:
fe:9c:e2:38:d3:77:a2:2d:3f:86:c1:a4:a8:8e:00:f5:c4:35:
c4:96:f2:67:8f:97:42:ea:25:33:dd:88:7a:e0:01:c9:76:72:
48:4b:f0:61:5c:51:94:6b:6f:60:23:a4:be:36:b4:b3:91:95:
44:e9:65:25:ca:c2:58:2d:f1:eb:9a:48:32:89:a5:93:9e:71:
88:54:9a:cf:13:ac:5f:89:9e:50:95:70:c4:4d:5a:b8:52:c4:
15:cf:9e:5b:cf:e6:3d:c3:2f:06:35:45:d8:7f:42:78:aa:2d:
8f:6e:dc:7c:cd:db:41:3a:16:5f:34:69:c1:9b:d9:cd:98:6b:
02:4c:27:04:76:6d:85:0d:20:a0:e4:9b:3b:87:9c:99:d5:4b:
9a:fb:bd:1c:91:ae:7b:9c:85:3d:4d:bd:0c:b8:ec:49:d4:d8:
fd:a4:e6:30:07:f1:27:77:08:13:0a:c2:cb:f3:f0:12:58:6d:
74:3f:85:1a:fc:aa:b3:8c:6a:b0:d6:a8:8f:1b:19:96:1d:4c:
51:e6:bf:75:f3:54:f8:c3:e1:9b:c3:b3:84:1a:e0:f0:39:90:
29:18:26:ce:f0:4c:66:aa:19:f3:2b:ca:a3:f8:42:24:93:56:
54:55:9e:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:07:50 2025 by rpki-client