Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS214773.roa
File: AS214773.roa (raw, json)
Hash identifier: Pru/w3hOVYmxzEGwKhLWZ0lkU1l3rpc6WJvk7knHVxE=
Subject key identifier: 98:D6:38:4E:F8:F2:2D:26:7A:D1:95:2E:44:C0:E6:D2:F6:6C:CC:DB
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 9F2EA77BF95FC6CB91B943EBA65DC10343E308
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS214773.roa
Signing time: Sat 10 Aug 2024 04:04:05 +0000
ROA not before: Sat 10 Aug 2024 03:59:05 +0000
ROA not after: Sat 09 Aug 2025 04:04:05 +0000
asID: 214773
IP address blocks: 2a06:9f43::/32 maxlen: 48
Validation: Failed, certificate revoked on Wed 25 Sep 2024 19:29:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
9f:2e:a7:7b:f9:5f:c6:cb:91:b9:43:eb:a6:5d:c1:03:43:e3:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Aug 10 03:59:05 2024 GMT
Not After : Aug 9 04:04:05 2025 GMT
Subject: CN=98D6384EF8F22D267AD1952E44C0E6D2F66CCCDB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c6:45:e0:41:82:ea:c0:26:d9:35:e0:79:f4:
71:7f:26:11:0d:55:43:9f:0e:49:33:9a:55:00:0f:
01:34:f5:3e:63:d3:36:6f:66:b2:2b:a5:9a:f0:bb:
86:24:bb:8b:d1:fd:7b:d0:65:f5:46:4d:ed:a4:c5:
4d:cc:23:c0:37:e7:a9:52:a2:32:fb:5e:73:26:03:
1b:75:d2:c7:47:75:0b:b0:05:9f:bd:18:b1:8e:d5:
56:49:15:7e:5e:41:92:0f:33:a8:52:e7:2d:cc:cb:
2a:3c:e9:05:54:6b:20:dd:31:de:5e:aa:ea:4a:4c:
fd:fe:b5:ee:ca:47:8c:ff:c6:5d:33:1f:73:2a:28:
b7:5c:6e:5c:61:7c:c4:66:fd:b8:76:4b:f6:d1:2d:
64:0a:73:80:73:92:77:2b:19:d7:c6:89:80:e3:dc:
20:a0:d2:77:81:9d:47:4a:8a:c3:1d:8e:a0:3c:1f:
67:49:6f:4f:46:7f:af:59:c0:d0:2e:63:08:84:c0:
c8:78:2e:bd:96:0d:43:41:a1:11:67:bc:2c:b7:9a:
2d:59:aa:e3:9e:44:e5:00:4e:cb:08:88:4a:3d:2c:
a9:a7:25:d3:b6:ee:47:c7:e7:ba:72:37:13:44:c5:
3c:20:9f:f6:c7:a8:fc:25:fc:af:65:9d:a3:eb:7b:
9f:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:D6:38:4E:F8:F2:2D:26:7A:D1:95:2E:44:C0:E6:D2:F6:6C:CC:DB
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS214773.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9f43::/32
Signature Algorithm: sha256WithRSAEncryption
82:97:15:ca:1d:46:c3:8c:eb:73:83:23:fc:dc:d1:f1:6d:d6:
09:40:24:f4:6d:ca:4f:fb:e8:4a:0b:b2:c7:5e:0e:98:b7:df:
98:dd:3b:88:df:64:40:39:13:b5:ee:40:69:b3:9f:6f:4a:8f:
0c:d7:9c:ea:bd:22:c0:c7:60:3a:30:2e:8f:e4:fe:f9:27:b3:
14:93:a1:75:05:38:f5:06:15:2b:93:3d:33:2d:64:95:f6:c9:
0a:77:85:2b:58:09:c9:d0:5b:92:88:d5:5b:81:da:2f:1b:e7:
f6:68:3a:e5:a5:46:46:4f:6e:32:41:54:75:5a:df:be:b2:a5:
a2:58:ea:ee:47:48:73:41:fb:07:37:67:98:53:5e:b6:d6:9c:
97:d1:7a:26:96:10:2f:a6:df:ee:37:4a:11:44:d2:1f:16:d8:
7d:01:3e:6c:ca:b9:95:d8:45:90:0e:88:95:8d:08:03:7c:a3:
97:20:2f:34:e0:ca:ba:12:b7:60:22:4d:36:a6:44:32:4a:ed:
ba:67:3e:65:c1:bd:c4:9e:44:5a:3c:2f:ce:79:d7:43:78:07:
8b:e9:4b:8c:89:ef:b9:15:c7:d8:0b:0e:bd:7e:97:64:ad:f5:
ad:1d:3b:98:f7:b3:18:8f:6b:16:7b:e5:6a:12:50:85:62:f5:
b4:00:94:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:31:34 2025 by rpki-client