Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS29802.roa
File: AS29802.roa (raw, json)
Hash identifier: wbUnyjEQCSmV7hnf9d5MI7tW6m9poGP7Mti13H3RREI=
Subject key identifier: 1B:D8:29:BD:12:D3:89:6B:72:AB:BF:33:6E:62:EB:D0:55:0E:2C:11
Certificate issuer: /CN=b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4
Certificate serial: 1AC54B4A3C303BFFFFC88A506B12AB35FFB1F5C7
Authority key identifier: A7:74:82:0B:3F:E2:B7:39:59:6F:4A:6B:F3:1F:BF:D2:6E:23:F2:BC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS29802.roa
Signing time: Thu 19 Dec 2024 07:35:15 +0000
ROA not before: Thu 19 Dec 2024 07:30:15 +0000
ROA not after: Thu 18 Dec 2025 07:35:15 +0000
asID: 29802
IP address blocks: 50.31.181.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 31 Dec 2024 12:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:c5:4b:4a:3c:30:3b:ff:ff:c8:8a:50:6b:12:ab:35:ff:b1:f5:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4
Validity
Not Before: Dec 19 07:30:15 2024 GMT
Not After : Dec 18 07:35:15 2025 GMT
Subject: CN=1BD829BD12D3896B72ABBF336E62EBD0550E2C11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:de:39:d2:03:35:d8:5d:65:7a:c7:ad:7b:58:
73:38:36:43:c1:b9:b6:bf:43:6d:2e:90:f2:05:52:
4f:12:78:32:2c:27:6b:ec:bf:22:01:ee:df:df:e2:
33:a1:d7:d6:33:39:01:f7:a2:aa:62:68:10:5c:b2:
78:21:92:5d:89:2a:e7:05:a5:de:ec:2f:85:3a:e1:
17:1d:07:1a:a0:cd:26:0b:54:5b:b4:a5:de:42:19:
d3:63:4a:8b:ee:62:a6:9a:08:8d:b9:c2:64:aa:3a:
02:40:93:23:d3:a9:04:69:ce:3e:4e:22:58:f6:11:
2e:b2:f2:22:7c:11:77:d7:d9:2f:69:c2:b5:11:af:
d4:0a:00:da:12:7a:09:1b:8d:b0:94:3b:54:f6:f5:
90:9b:fc:a9:07:56:8c:6a:e4:e1:77:8e:cc:34:0a:
16:03:62:04:78:19:bd:2d:fc:ff:47:f6:e1:86:5c:
a4:97:2a:4e:e3:dc:b4:d6:96:55:ba:8e:15:e1:3f:
30:7a:63:0e:8a:7b:11:c2:dc:f7:7c:1b:27:4a:64:
62:1a:78:e1:b1:f6:33:a2:39:88:31:f3:a0:6c:14:
30:1f:b1:6b:f8:7a:3e:9d:45:8b:ec:2e:e9:e7:86:
4f:ed:10:af:d6:28:60:77:52:30:85:76:db:1a:5d:
c3:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:D8:29:BD:12:D3:89:6B:72:AB:BF:33:6E:62:EB:D0:55:0E:2C:11
X509v3 Authority Key Identifier:
keyid:A7:74:82:0B:3F:E2:B7:39:59:6F:4A:6B:F3:1F:BF:D2:6E:23:F2:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS29802.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
50.31.181.0/24
Signature Algorithm: sha256WithRSAEncryption
08:1d:a3:5c:29:36:ab:b6:1c:fa:d9:89:ef:de:0e:ea:7c:50:
83:ee:5c:09:83:77:f1:6d:c9:a2:d9:3a:56:74:7d:60:09:0d:
08:d0:5e:0f:67:26:c7:a4:64:6a:32:4b:a0:11:98:dd:1e:b2:
42:e7:04:61:17:e3:20:3f:44:27:5c:8d:18:25:6c:97:36:af:
ca:a6:44:95:19:6e:3d:3d:8c:9f:64:1d:23:ff:25:d1:18:cf:
08:3e:66:83:97:75:c3:37:5b:ca:0a:a8:ab:d3:69:7a:f6:cf:
31:87:a8:f6:7f:82:bc:c9:42:d5:7b:57:73:7d:a3:09:87:34:
2a:20:91:dc:7d:36:ff:8d:16:70:0f:c6:ab:3e:ce:9f:c0:a5:
de:fa:d6:ac:9c:1e:c3:e3:f8:6d:20:47:cc:c3:08:2f:10:98:
8c:8f:fa:59:5c:2b:ca:0c:90:d7:95:5b:88:f7:0c:5b:a6:02:
8d:1e:14:42:f8:88:7e:c6:1a:16:24:a4:dd:cd:5a:4f:7c:e3:
c6:50:54:ff:a4:00:b6:87:0c:cf:4f:1a:4e:42:ec:aa:78:cc:
9b:97:5d:eb:3a:6f:54:df:ca:99:ff:70:c7:1d:98:1a:93:44:
2a:43:28:23:0e:3f:0b:2e:7a:91:2e:16:99:25:b8:90:dd:cf:
e2:19:c6:38
-----BEGIN CERTIFICATE-----
MIIFfjCCBGagAwIBAgIUGsVLSjwwO///yIpQaxKrNf+x9ccwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYjEwM2MzODI2ZTAwMDQ4NWRlNmI5NTg2NWRjMGIxMTlk
YTMzNTA4ZDdhOWY0YmY5ZTQwHhcNMjQxMjE5MDczMDE1WhcNMjUxMjE4MDczNTE1
WjAzMTEwLwYDVQQDEygxQkQ4MjlCRDEyRDM4OTZCNzJBQkJGMzM2RTYyRUJEMDU1
MEUyQzExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlN450gM12F1l
esete1hzODZDwbm2v0NtLpDyBVJPEngyLCdr7L8iAe7f3+IzodfWMzkB96KqYmgQ
XLJ4IZJdiSrnBaXe7C+FOuEXHQcaoM0mC1RbtKXeQhnTY0qL7mKmmgiNucJkqjoC
QJMj06kEac4+TiJY9hEusvIifBF319kvacK1Ea/UCgDaEnoJG42wlDtU9vWQm/yp
B1aMauThd47MNAoWA2IEeBm9Lfz/R/bhhlyklypO49y01pZVuo4V4T8wemMOinsR
wtz3fBsnSmRiGnjhsfYzojmIMfOgbBQwH7Fr+Ho+nUWL7C7p54ZP7RCv1ihgd1Iw
hXbbGl3DLQIDAQABo4ICfjCCAnowHQYDVR0OBBYEFBvYKb0S04lrcqu/M25i69BV
DiwRMB8GA1UdIwQYMBaAFKd0ggs/4rc5WW9Ka/Mfv9JuI/K8MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmOTJlZTRkODQwMTkzMzExY2E4YjM0NjJhLzAv
QTc3NDgyMEIzRkUyQjczOTU5NkY0QTZCRjMxRkJGRDI2RTIzRjJCQy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNjlmZDAxNTYtYmIxZi00OGI2LWJmMzItYzk0OTIy
ODZmMTk1LzI2YTVlMDhiLWE4ZWQtNGJhYi04YTMyLTUyNjAxY2E5M2VjYS9iMTAz
YzM4MjZlMDAwNDg1ZGU2Yjk1ODY1ZGMwYjExOWRhMzM1MDhkN2E5ZjRiZjllNC5j
ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTMzMTFjYThi
MzQ2MmEvMC9BUzI5ODAyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMh+1MA0GCSqGSIb3DQEBCwUAA4IB
AQAIHaNcKTarthz62Ynv3g7qfFCD7lwJg3fxbcmi2TpWdH1gCQ0I0F4PZybHpGRq
MkugEZjdHrJC5wRhF+MgP0QnXI0YJWyXNq/KpkSVGW49PYyfZB0j/yXRGM8IPmaD
l3XDN1vKCqir02l69s8xh6j2f4K8yULVe1dzfaMJhzQqIJHcfTb/jRZwD8arPs6f
wKXe+tasnB7D4/htIEfMwwgvEJiMj/pZXCvKDJDXlVuI9wxbpgKNHhRC+Ih+xhoW
JKTdzVpPfOPGUFT/pAC2hwzPTxpOQuyqeMybl13rOm9U38qZ/3DHHZgak0QqQygj
Dj8LLnqRLhaZJbiQ3c/iGcY4
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:50:12 2025 by rpki-client