Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS215649.roa
File: AS215649.roa (raw, json)
Hash identifier: wphrciAVsClKxdt+oVshvWvkSkMt4tC8AQaY8VdC/Yg=
Subject key identifier: BB:97:8A:3C:A1:A5:97:2C:16:57:BF:C9:CC:FF:16:DA:AC:1C:FB:08
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 2258DEE36C62DB5D4DBC281AAACF540A9C52901A
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS215649.roa
Signing time: Wed 07 Feb 2024 23:54:00 +0000
ROA not before: Wed 07 Feb 2024 23:49:00 +0000
ROA not after: Wed 05 Feb 2025 23:54:00 +0000
asID: 215649
IP address blocks: 2a06:a002::/32 maxlen: 48
Validation: Failed, certificate revoked on Thu 11 Apr 2024 02:03:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:58:de:e3:6c:62:db:5d:4d:bc:28:1a:aa:cf:54:0a:9c:52:90:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Feb 7 23:49:00 2024 GMT
Not After : Feb 5 23:54:00 2025 GMT
Subject: CN=BB978A3CA1A5972C1657BFC9CCFF16DAAC1CFB08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:c0:0a:e9:70:6f:5e:d5:64:5c:53:d5:07:e3:
f4:53:4b:2c:d2:fe:cd:6e:b2:d8:d8:f3:74:36:31:
07:be:73:5f:4c:fd:43:8d:b0:0d:6a:76:50:37:a2:
ea:01:19:81:58:3d:d8:91:34:1b:b0:33:e7:28:78:
5a:60:8e:54:db:20:ab:f4:fd:6c:e9:c9:91:e0:4e:
13:8d:54:dd:57:75:15:17:ca:be:31:60:12:fb:ee:
5c:4c:d5:7e:05:b1:39:0e:1d:b9:3c:d7:df:df:a8:
73:4e:20:3a:79:61:0b:9b:8d:ba:57:fa:28:d7:ea:
77:68:fb:cf:42:ba:18:72:97:39:10:86:1d:0b:b3:
02:6c:f2:5d:86:01:8f:d5:3c:1c:05:2c:d2:99:68:
0d:ad:ba:8c:e8:92:be:04:21:ee:70:71:2a:f5:56:
35:ec:d9:ef:3e:e8:3a:db:72:d2:e5:06:ff:ea:ae:
9f:89:bd:5f:a0:e9:80:41:ed:8c:dc:18:44:ec:47:
b1:e8:6a:06:51:2f:f5:6e:2d:53:54:21:00:48:aa:
b4:3f:2c:a5:5d:22:92:e2:51:99:eb:9f:76:04:fd:
41:30:b5:e2:b8:a3:2b:97:c9:7f:fb:f9:3b:cb:6f:
58:38:1f:0f:a8:c7:00:75:09:e1:32:90:be:1c:e7:
45:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:97:8A:3C:A1:A5:97:2C:16:57:BF:C9:CC:FF:16:DA:AC:1C:FB:08
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS215649.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a002::/32
Signature Algorithm: sha256WithRSAEncryption
74:da:14:4b:59:a6:0a:ab:ae:d6:23:cb:20:cb:7f:1e:4f:d9:
76:70:9b:d4:e3:bf:e8:5a:bb:3d:21:b7:da:00:99:52:ac:3f:
30:cc:09:e5:c8:06:71:29:ca:97:09:9c:5a:58:f0:6a:13:0c:
e0:74:21:f0:8c:f9:ed:4a:b8:b1:e1:8d:15:f9:39:8d:2c:be:
d8:f1:5a:85:70:d2:11:5a:41:e9:ce:27:35:47:e5:5b:84:aa:
55:6f:7d:47:c6:b4:1b:12:c4:c1:d9:64:c3:18:9e:bf:fc:e4:
b7:aa:89:03:90:4d:42:79:de:aa:7f:a8:21:66:61:0e:f0:7d:
aa:64:2b:f5:e0:6c:7f:07:ab:9f:ce:65:26:84:98:fd:d7:73:
8d:b9:34:65:55:9f:dc:3e:4e:25:15:24:72:61:ba:5c:00:0f:
f3:53:51:35:c0:09:6c:98:55:25:b3:60:4a:e5:25:80:e8:38:
87:78:f6:ec:ec:72:8a:d7:80:a6:67:61:0f:87:69:d5:6f:13:
90:37:c2:c6:c6:9e:83:11:c0:22:64:ab:d0:1f:73:0c:23:bb:
4e:fe:ac:b7:66:0c:b2:cf:6c:cf:71:29:73:b5:c1:32:57:2b:
02:2b:5c:8b:20:5f:fd:0a:b1:8c:2c:96:54:11:8d:48:ae:ef:
41:6e:21:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 11 04:51:20 2024 by rpki-client on console-fra.rpki-client.org