Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS211604.roa
File: AS211604.roa (raw, json)
Hash identifier: lz+CbawyELWbrnJ9ypoyRuAY4fWo/RYQAXZ+0Z4SRno=
Subject key identifier: DC:AC:61:72:5C:64:47:38:99:14:F9:F7:36:4D:EB:F6:66:C0:A1:BD
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 6C16A069F9502DD112B9F184655DA1D2009B8A8A
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS211604.roa
Signing time: Fri 13 Dec 2024 02:56:29 +0000
ROA not before: Fri 13 Dec 2024 02:51:29 +0000
ROA not after: Fri 12 Dec 2025 02:56:29 +0000
asID: 211604
IP address blocks: 2a06:a005:450::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 26 Mar 2025 22:14:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:16:a0:69:f9:50:2d:d1:12:b9:f1:84:65:5d:a1:d2:00:9b:8a:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Dec 13 02:51:29 2024 GMT
Not After : Dec 12 02:56:29 2025 GMT
Subject: CN=DCAC61725C6447389914F9F7364DEBF666C0A1BD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:93:09:40:c8:20:c4:7d:66:7e:01:74:2b:70:
9e:ec:71:36:cb:eb:f4:f6:94:9d:9b:7e:a0:9a:5c:
23:83:b7:7a:b8:7c:ed:e2:9d:c1:14:37:70:e6:06:
ff:c1:c0:e1:f1:b7:56:67:7e:00:93:d4:47:34:ed:
4b:6b:44:79:7d:00:99:de:b9:82:7c:4c:b1:f8:43:
b3:d1:26:99:66:23:22:89:b5:36:7d:2f:f4:af:dc:
2f:3f:3d:31:e7:c7:b1:a1:3b:55:26:ee:44:79:1a:
3c:75:a1:f9:b5:df:76:c0:f8:64:15:36:d5:5f:4d:
f2:9b:66:8e:e9:c8:ee:bd:15:e4:7e:4b:29:34:d5:
99:98:d6:be:ca:cf:42:1f:2b:82:07:60:98:ff:b7:
7f:c4:c7:47:48:42:46:ca:66:73:c7:76:32:1e:1c:
ca:70:45:3a:b5:59:33:7a:92:43:5f:4b:be:67:4a:
20:ec:26:3c:5c:58:c2:d5:40:76:c4:a4:76:e1:82:
d7:2a:48:eb:88:3c:35:5a:ba:6a:ee:96:70:82:61:
72:f0:3b:da:81:7e:c4:01:c8:41:97:37:61:30:d3:
d9:fa:17:84:e8:21:d7:a7:4e:9d:b0:40:0a:a0:3a:
db:60:0c:43:36:74:24:4c:1f:ec:d6:e1:fb:34:df:
52:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:AC:61:72:5C:64:47:38:99:14:F9:F7:36:4D:EB:F6:66:C0:A1:BD
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS211604.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:450::/48
Signature Algorithm: sha256WithRSAEncryption
bc:95:89:34:65:fa:04:19:0b:40:53:10:64:6c:a4:f9:82:af:
94:bb:bb:99:2f:20:5a:98:8b:35:bb:82:cf:3c:f2:a4:9a:36:
88:7f:3e:53:48:c1:36:3b:b4:07:0b:f9:f6:60:67:4a:46:56:
7d:b7:fe:c4:ec:ac:55:eb:e9:d8:95:46:6a:38:45:47:c7:1d:
d0:01:38:d6:eb:d9:93:6c:38:4c:30:91:4d:91:fc:05:90:d6:
7c:24:b2:fb:5f:d6:22:ce:56:3e:3e:e9:7b:0a:3b:78:69:53:
7d:07:61:5e:cc:89:f0:3b:8b:30:c1:9b:53:af:55:fc:f6:4e:
be:33:72:57:ce:d9:07:05:54:c0:17:95:76:0c:df:b9:50:0e:
1c:d9:a3:88:e2:02:e9:2f:d8:d1:72:71:84:1c:ae:19:24:65:
3e:a9:cd:97:f3:fa:64:5e:90:49:80:33:a6:14:22:a6:a0:26:
d4:51:61:1f:29:ee:74:ff:5e:0b:d0:fe:67:77:9c:fa:79:0e:
eb:8d:9f:75:8f:54:41:60:4e:f3:3c:3d:c7:df:e4:7e:3f:87:
65:71:f2:99:7f:ca:74:66:f4:02:fd:b7:9b:ed:48:b8:ba:00:
ca:5a:47:c8:ff:e1:6e:ea:17:00:31:64:c8:73:d5:76:e5:6e:
9a:58:19:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 14:28:52 2025 by rpki-client