Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS213862.roa
File: AS213862.roa (raw, json)
Hash identifier: 7V1tSEkT3/TtIyktVB8RbMK8PEjt4B01gaM7dRrIeKY=
Subject key identifier: B5:BE:F2:C5:C0:59:55:2A:DB:19:FF:A9:A6:E8:10:98:E6:29:9E:C0
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 39139BA3135B5029A1E14E5176238010A929A528
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS213862.roa
Signing time: Sat 14 Dec 2024 02:29:44 +0000
ROA not before: Sat 14 Dec 2024 02:24:44 +0000
ROA not after: Sat 13 Dec 2025 02:29:44 +0000
asID: 213862
IP address blocks: 81.31.209.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 14 Dec 2024 16:34:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:13:9b:a3:13:5b:50:29:a1:e1:4e:51:76:23:80:10:a9:29:a5:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Dec 14 02:24:44 2024 GMT
Not After : Dec 13 02:29:44 2025 GMT
Subject: CN=B5BEF2C5C059552ADB19FFA9A6E81098E6299EC0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:65:2e:10:ea:86:d5:1e:cc:bd:e1:e4:2d:cf:
bf:29:6f:96:60:0d:8b:16:46:79:6a:79:11:23:15:
d0:f2:01:25:f9:77:22:63:cf:49:af:fc:2e:00:d9:
b0:f8:3a:27:f6:21:a7:d2:c5:f0:c6:fd:3e:e6:0f:
ca:c8:b7:a4:f0:4a:bc:a8:ad:1f:de:10:b4:d1:e2:
b2:3f:99:6d:15:35:c7:bd:1f:6d:46:70:94:a9:63:
c8:ea:46:f8:8a:00:fe:53:72:b7:5d:69:78:15:ce:
12:3a:86:eb:8a:b2:2e:4c:e6:ed:9f:db:cf:b8:e9:
13:68:77:42:eb:fd:5d:61:a9:84:12:46:6d:81:a8:
51:09:94:81:ba:26:db:04:26:e6:ea:a7:56:78:82:
96:d0:99:08:7c:7d:31:62:46:32:f5:a0:84:c6:55:
cd:bc:b1:7e:45:1a:90:e8:f1:43:db:4f:e1:dc:7f:
b3:39:c2:24:0e:72:4b:d2:e0:0c:ed:0b:f3:97:e1:
73:bd:15:37:86:7c:25:8b:f5:40:1a:2f:26:71:1b:
3a:07:92:5b:d6:bb:bc:36:7c:d4:c9:e6:d9:42:a4:
0a:a3:26:ec:4e:e0:7f:91:ed:71:b1:bd:0e:6a:a0:
a6:c0:5d:67:40:cd:49:fe:73:73:71:87:77:98:49:
91:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:BE:F2:C5:C0:59:55:2A:DB:19:FF:A9:A6:E8:10:98:E6:29:9E:C0
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS213862.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.31.209.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:d5:95:7e:cf:4d:44:05:05:e8:36:96:6f:fb:95:04:5c:6b:
77:cc:ac:6a:8d:2f:5f:75:8c:85:59:fe:0a:ed:60:52:c4:af:
c6:87:b9:d1:6c:a4:50:51:b8:e0:d4:f7:da:3f:89:84:88:3f:
d5:72:50:a3:a0:4e:dd:d1:b2:6d:6c:04:e1:cc:51:84:ee:fc:
89:35:83:b5:70:d5:12:54:a0:50:56:98:98:c5:02:42:02:60:
af:ff:4e:cd:c7:d9:d1:e6:e9:9f:61:52:c7:43:96:9b:16:7f:
ce:a0:65:36:8c:7c:53:98:44:4b:ff:8a:76:61:c6:fa:75:c9:
2d:f9:6d:d9:fb:43:01:27:bb:a8:9f:07:7f:63:ec:67:dd:e5:
de:1b:c4:cd:55:95:40:fd:77:c3:c3:bc:66:0a:e0:a9:4a:d1:
4f:a0:ba:28:63:3f:a3:b1:52:2d:18:9c:ca:03:f8:f8:b0:24:
b0:dd:55:9c:dc:2a:10:d2:38:c4:2a:2a:a0:9a:92:8f:b8:ae:
3a:c2:aa:63:cd:df:10:24:58:47:b4:5c:77:1a:91:59:1f:2c:
ea:4d:39:a8:87:62:25:ac:3f:e6:95:07:63:90:63:0a:10:b4:
7d:a2:85:f2:e9:45:48:04:bb:3c:4a:6c:59:1b:20:34:38:92:
a5:bd:e9:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 05:15:53 2025 by rpki-client