Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS211754.roa
File: AS211754.roa (raw, json)
Hash identifier: 8wsFIJ3e+qXfsA7mvmUmU/7XSePiyobigAlJdTVjrB4=
Subject key identifier: 9D:96:16:BB:F1:99:6D:86:B4:58:A2:BA:DE:76:F5:61:0F:93:11:8B
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 546922CFC2CD315546A1C5F8295F6ACA564390E0
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS211754.roa
Signing time: Tue 05 Nov 2024 03:40:02 +0000
ROA not before: Tue 05 Nov 2024 03:35:02 +0000
ROA not after: Tue 04 Nov 2025 03:40:02 +0000
asID: 211754
IP address blocks: 2a06:a005:c90::/44 maxlen: 48
2a06:a005:ca0::/44 maxlen: 48
2a06:a005:cb0::/44 maxlen: 48
Validation: Failed, certificate revoked on Fri 13 Dec 2024 02:56:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:69:22:cf:c2:cd:31:55:46:a1:c5:f8:29:5f:6a:ca:56:43:90:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Nov 5 03:35:02 2024 GMT
Not After : Nov 4 03:40:02 2025 GMT
Subject: CN=9D9616BBF1996D86B458A2BADE76F5610F93118B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:dd:99:cb:f2:5f:18:79:d9:7a:82:cf:32:ce:
da:ab:c1:41:92:32:59:51:81:e1:a5:6a:8d:3b:cf:
63:51:ba:58:56:69:85:52:d3:0d:c7:e5:c9:6a:75:
40:73:3b:48:9b:40:61:46:5d:cc:b4:7f:10:6e:d1:
25:82:3a:8a:2d:a4:a2:e6:b3:8f:2c:93:0f:bf:9a:
08:9e:32:74:af:0f:f7:6f:9a:d2:81:a3:b1:7b:8d:
9a:fd:79:e5:eb:79:9e:3a:f8:91:55:a3:b4:a6:55:
66:a1:f7:1a:27:f1:47:34:49:2f:23:c6:f2:78:d1:
e2:eb:ab:8c:82:a7:01:36:68:85:3e:54:04:39:4a:
29:f2:0c:4a:06:00:64:b8:1f:9f:04:f8:3d:9c:73:
a9:22:9d:00:60:5f:79:5d:4d:59:d6:2c:bb:7a:6c:
4e:da:f2:4b:3f:53:c9:a4:49:bc:6c:22:55:e5:c3:
52:3e:c4:5e:5a:bf:73:f1:39:ef:1a:44:c3:51:cd:
33:ef:b7:9f:d0:e8:de:00:d4:ef:65:a4:28:8f:33:
1a:d3:89:a5:b3:2e:97:03:b1:fa:52:6f:97:25:96:
74:b2:9a:e3:0d:25:e5:1a:52:ef:28:cf:5d:d0:ab:
37:32:9a:2c:8e:8f:2a:82:20:0e:d4:64:0a:7d:f5:
1c:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:96:16:BB:F1:99:6D:86:B4:58:A2:BA:DE:76:F5:61:0F:93:11:8B
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS211754.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:c90::-2a06:a005:cbf:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
c8:db:56:1f:85:01:49:f2:e1:f8:f4:83:52:d3:59:f1:f8:02:
03:1e:8d:65:c3:ef:b3:a3:fc:b6:32:85:98:80:14:dd:4f:2f:
63:69:38:06:9e:13:87:fd:d9:8c:e8:5f:51:2a:c4:46:24:a1:
97:94:29:d3:79:66:48:eb:9a:c5:8f:30:d3:ef:00:60:27:97:
1d:a8:b4:96:ee:3c:32:be:cb:2e:1e:58:bb:bd:df:e3:84:34:
a5:dc:ba:a1:6f:0b:1b:e6:d0:41:af:bd:78:7e:1f:8f:0a:be:
b3:4e:6d:32:cd:75:0b:7c:cd:81:f5:ee:08:c1:f8:1c:f4:14:
32:a0:b7:de:39:82:1f:f5:6f:88:4f:84:1f:98:8e:36:54:ee:
a8:26:8b:d7:b6:fe:47:2f:ae:e2:8b:4b:5b:81:bd:66:ee:6f:
e1:0c:c5:6a:6d:04:6a:b8:9f:14:20:48:57:ae:9d:33:89:58:
a7:a4:4f:60:ba:c9:45:1f:ad:3d:67:84:48:e3:37:88:d3:0e:
35:48:77:f6:72:9f:08:3e:41:1e:89:c2:9e:ed:a7:88:70:02:
c1:fc:be:a6:1b:8f:36:fc:c2:d5:fb:9d:7c:b8:d3:85:45:ee:
9d:ae:ed:24:86:3a:f2:6c:2b:62:a4:d5:92:d4:74:cd:99:e8:
69:5b:1a:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:27:09 2025 by rpki-client