![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS271799.roa
File: AS271799.roa (raw, json)
Hash identifier: YFEbDANPYqSKs379zm3BZf7Nt+TCOzmvuuL0hzU0g1I=
Subject key identifier: C0:C6:29:5F:94:85:1C:71:B3:60:FD:FC:F5:77:D1:A5:75:C9:9D:39
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 7C200720239745A16C437F4EBB97ABB54594682A
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS271799.roa
Signing time: Wed 06 Nov 2024 21:40:12 +0000
ROA not before: Wed 06 Nov 2024 21:35:12 +0000
ROA not after: Wed 05 Nov 2025 21:40:12 +0000
asID: 271799
IP address blocks: 2a06:a005:ba2::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 13 Dec 2024 02:20:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:20:07:20:23:97:45:a1:6c:43:7f:4e:bb:97:ab:b5:45:94:68:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Nov 6 21:35:12 2024 GMT
Not After : Nov 5 21:40:12 2025 GMT
Subject: CN=C0C6295F94851C71B360FDFCF577D1A575C99D39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:3e:ab:40:a0:1a:2c:ce:01:68:3d:dc:0e:a1:
62:7d:49:11:78:43:11:9f:26:80:85:c6:2b:48:f4:
0e:42:f9:d6:01:cb:4a:16:56:d8:3f:62:47:ef:97:
37:1c:0d:01:14:21:8b:12:93:7f:c3:2e:a5:23:9c:
4d:7d:97:6e:8b:c1:91:04:72:da:f4:03:06:6d:9d:
8f:13:85:01:d7:03:8a:6c:ad:5b:9e:8a:65:f8:80:
27:65:c3:1f:a9:5a:af:d7:4f:8e:5d:64:2f:a7:ba:
47:35:bf:bf:f0:b7:5c:25:9f:39:26:5e:58:e4:a7:
f5:fb:e9:fc:d2:d9:05:16:f7:b5:7b:cc:fe:5a:ec:
cb:eb:bc:00:57:da:66:4b:0c:09:b3:cb:9f:ad:36:
59:fc:c8:ab:b1:1a:d0:03:13:68:3a:ec:6a:b0:81:
c3:d3:5c:93:89:16:43:73:76:f8:ac:53:44:85:03:
ff:17:56:04:a3:03:cc:49:40:63:ba:46:24:7f:f8:
c5:60:1c:1f:a5:5d:ca:cb:45:c2:0e:80:a8:7e:18:
91:54:67:e0:b0:12:20:8a:27:5a:59:52:49:0c:c5:
92:e6:52:e9:14:81:07:5e:4e:94:ba:b9:ae:9e:d2:
63:35:28:17:98:e1:d5:ee:df:65:21:5c:f0:bb:49:
95:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:C6:29:5F:94:85:1C:71:B3:60:FD:FC:F5:77:D1:A5:75:C9:9D:39
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS271799.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:ba2::/48
Signature Algorithm: sha256WithRSAEncryption
9a:51:35:b6:fe:40:58:d4:2a:49:96:e9:b9:51:ae:71:6f:2f:
0d:28:ef:54:8c:f9:e3:40:f1:a3:ef:6e:c2:73:ac:d4:1c:2b:
e8:14:bd:d5:dd:78:5a:a4:91:1c:ef:8a:85:45:a9:6f:25:bc:
21:24:3c:80:ba:9e:9d:ce:96:8c:8d:00:ae:99:b4:f1:a1:19:
68:d7:59:c4:46:d9:c5:44:77:11:8f:97:5f:f6:83:0c:bd:10:
4f:c6:52:98:6b:fe:5e:e8:f2:b9:40:c5:f7:3c:f1:89:5a:97:
42:f0:be:3f:2b:08:83:c7:94:06:cb:fc:df:6a:d7:a7:2b:29:
c8:59:00:94:02:42:36:10:04:13:46:8f:d3:41:6d:93:21:8b:
74:e4:a3:cf:be:15:40:81:0c:2d:aa:a4:7e:09:43:f8:cd:49:
60:2b:1b:93:8a:0c:c1:49:37:5c:c5:60:8b:bf:f9:bb:80:4a:
f0:00:49:24:a5:84:1b:28:68:55:99:d0:ca:94:ed:fa:32:ea:
92:38:c4:6f:54:f9:91:50:dd:6c:1c:7f:56:5a:aa:77:53:91:
0f:de:2f:07:6f:16:b7:32:7a:b1:6b:93:f7:cf:ab:2e:4b:80:
43:dc:7c:f8:28:f7:a2:6d:c3:85:b5:e2:c8:3a:a3:13:d0:41:
c5:76:15:5c
-----BEGIN CERTIFICATE-----
MIIE6DCCA9CgAwIBAgIUfCAHICOXRaFsQ39Ou5ertUWUaCowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzk5NDM4ZjFiMTc2MmFlZWY4YTM1Y2Y0ZTZjYmFlOTc2
OTliZDAyMDAeFw0yNDExMDYyMTM1MTJaFw0yNTExMDUyMTQwMTJaMDMxMTAvBgNV
BAMTKEMwQzYyOTVGOTQ4NTFDNzFCMzYwRkRGQ0Y1NzdEMUE1NzVDOTlEMzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7PqtAoBoszgFoPdwOoWJ9SRF4
QxGfJoCFxitI9A5C+dYBy0oWVtg/YkfvlzccDQEUIYsSk3/DLqUjnE19l26LwZEE
ctr0AwZtnY8ThQHXA4psrVueimX4gCdlwx+pWq/XT45dZC+nukc1v7/wt1wlnzkm
Xljkp/X76fzS2QUW97V7zP5a7MvrvABX2mZLDAmzy5+tNln8yKuxGtADE2g67Gqw
gcPTXJOJFkNzdvisU0SFA/8XVgSjA8xJQGO6RiR/+MVgHB+lXcrLRcIOgKh+GJFU
Z+CwEiCKJ1pZUkkMxZLmUukUgQdeTpS6ua6e0mM1KBeY4dXu32UhXPC7SZXTAgMB
AAGjggHyMIIB7jAdBgNVHQ4EFgQUwMYpX5SFHHGzYP389XfRpXXJnTkwHwYDVR0j
BBgwFoAUeZQ48bF2Ku74o1z05suul2mb0CAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvMi83OTk0MzhGMUIx
NzYyQUVFRjhBMzVDRjRFNkNCQUU5NzY5OUJEMDIwLmNybDBkBggrBgEFBQcBAQRY
MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZVpRNDhiRjJLdTc0bzF6MDVzdXVsMm1iMENBLmNlcjBwBggrBgEF
BQcBCwRkMGIwYAYIKwYBBQUHMAuGVHJzeW5jOi8vcnBraS1ycHMuYXJpbi5uZXQv
cmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5MWJlM2Y5ZC8yL0FT
MjcxNzk5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEH
AQH/BBMwETAPBAIAAjAJAwcAKgagBQuiMA0GCSqGSIb3DQEBCwUAA4IBAQCaUTW2
/kBY1CpJlum5Ua5xby8NKO9UjPnjQPGj727Cc6zUHCvoFL3V3XhapJEc74qFRalv
JbwhJDyAup6dzpaMjQCumbTxoRlo11nERtnFRHcRj5df9oMMvRBPxlKYa/5e6PK5
QMX3PPGJWpdC8L4/KwiDx5QGy/zfatenKynIWQCUAkI2EAQTRo/TQW2TIYt05KPP
vhVAgQwtqqR+CUP4zUlgKxuTigzBSTdcxWCLv/m7gErwAEkkpYQbKGhVmdDKlO36
MuqSOMRvVPmRUN1sHH9WWqp3U5EP3i8Hbxa3Mnqxa5P3z6suS4BD3Hz4KPeibcOF
teLIOqMT0EHFdhVc
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:13:04 2025 by rpki-client