Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS57860.roa
File: AS57860.roa (raw, json)
Hash identifier: MgyKy2q7tho4T0H6W3VvvVPqiKUuRLmdPknOlDsTae0=
Subject key identifier: 89:99:C4:0C:2F:5D:4C:E1:98:A2:74:8B:CA:A7:9E:79:16:8B:C0:6B
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 642825B2CB24B91693E935269BCE67F262722288
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS57860.roa
Signing time: Tue 05 Nov 2024 03:40:09 +0000
ROA not before: Tue 05 Nov 2024 03:35:09 +0000
ROA not after: Tue 04 Nov 2025 03:40:09 +0000
asID: 57860
IP address blocks: 2a06:a005:2d5::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 13 Dec 2024 02:56:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:28:25:b2:cb:24:b9:16:93:e9:35:26:9b:ce:67:f2:62:72:22:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Nov 5 03:35:09 2024 GMT
Not After : Nov 4 03:40:09 2025 GMT
Subject: CN=8999C40C2F5D4CE198A2748BCAA79E79168BC06B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:b2:f2:05:e5:c1:c9:0b:13:17:6e:aa:a1:6b:
a6:f2:c1:bd:f3:4d:3b:55:49:68:db:e3:55:ed:23:
e9:47:b9:f0:6c:85:42:46:de:90:e3:85:b5:5a:3d:
a3:30:2b:c0:9f:20:3b:e5:e4:06:c4:0f:83:30:66:
62:50:d4:d0:3b:bc:e5:03:0f:d1:15:34:39:3b:6f:
6f:09:8d:8b:09:21:24:37:9f:78:cf:8b:69:8d:11:
6d:5c:e3:01:4b:62:53:32:eb:20:6f:fb:9f:5a:9d:
b5:d4:60:e8:48:fa:87:80:86:0c:72:5e:4a:ea:d9:
cf:3e:c5:32:1b:35:3c:85:54:51:d2:2c:a1:73:16:
3a:c8:ce:ad:4b:c7:af:e0:bb:d1:ee:89:c1:92:e6:
ca:4c:30:ae:35:e2:44:ad:91:6d:48:0f:6d:d5:44:
13:a9:6d:bd:ff:65:78:df:03:34:56:a5:5b:b2:98:
22:c8:be:d1:fe:c3:22:18:84:9d:cb:80:4b:a5:2a:
e8:7c:50:2c:1b:2d:0b:0d:69:ba:04:87:f9:a6:86:
6b:3f:4e:3c:51:d6:8e:84:55:2d:a2:e5:41:e9:4b:
17:8e:69:46:7a:65:3a:36:0c:33:cd:02:db:e6:1a:
f1:52:01:0d:db:63:4d:1e:1f:da:67:1f:40:fb:a9:
b0:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:99:C4:0C:2F:5D:4C:E1:98:A2:74:8B:CA:A7:9E:79:16:8B:C0:6B
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS57860.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:2d5::/48
Signature Algorithm: sha256WithRSAEncryption
39:64:1a:6e:98:22:5e:18:48:37:f1:7e:f2:c7:a8:d2:34:e0:
4e:20:89:5f:ce:47:c8:a3:7b:2b:bc:df:f9:48:12:a8:cd:8a:
27:0f:3d:96:57:c5:de:9a:d6:fe:d0:e6:11:87:f6:ce:0a:a9:
33:ea:17:ef:65:37:22:b3:b4:36:76:67:3a:90:41:d6:e9:cf:
86:81:78:ea:bd:8f:5a:8a:ed:f1:b7:be:e3:9d:cc:a6:2f:86:
15:3f:51:6d:68:ea:57:78:d6:aa:e9:80:2a:4c:6a:70:94:ee:
d1:46:4f:68:cd:1a:a6:61:44:9c:66:a5:c8:14:34:5e:bc:6f:
96:96:a3:3a:02:7d:30:1a:e1:73:f4:c3:2c:16:f9:b5:1d:e8:
4e:ba:28:f7:91:07:68:44:84:4b:b3:16:b3:e5:f5:be:04:6e:
1c:4c:ab:91:2f:39:9c:58:e8:11:f1:99:ba:f6:e6:b3:4d:57:
e0:e5:9a:ae:a0:07:79:52:82:29:95:73:ea:ed:43:47:27:46:
b8:5c:0b:d1:ef:4f:fe:b6:ba:f3:85:9c:79:26:b1:84:69:cd:
63:cd:b7:1d:34:d8:23:3d:d6:0c:99:f9:5c:18:e5:a5:f2:6b:
fc:b0:7d:5d:b3:46:70:74:3e:27:95:e3:48:92:47:8f:4c:29:
3a:25:85:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:31:33 2025 by rpki-client