Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS213707.roa
File: AS213707.roa (raw, json)
Hash identifier: CISic4HzXFSPsRPgZwCBMoibu0/PnsYllTibjSjzTT8=
Subject key identifier: 57:5D:C8:AD:08:79:95:72:EE:EA:97:62:F0:17:33:46:15:BF:73:75
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 78DD2E28568E40980DB61B0AE4010A573268A8E2
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS213707.roa
Signing time: Fri 04 Apr 2025 00:09:04 +0000
ROA not before: Fri 04 Apr 2025 00:04:04 +0000
ROA not after: Fri 03 Apr 2026 00:09:04 +0000
asID: 213707
IP address blocks: 202.50.53.0/24 maxlen: 24
2a06:9f40::/32 maxlen: 48
Validation: Failed, certificate revoked on Fri 04 Apr 2025 21:19:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:dd:2e:28:56:8e:40:98:0d:b6:1b:0a:e4:01:0a:57:32:68:a8:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Apr 4 00:04:04 2025 GMT
Not After : Apr 3 00:09:04 2026 GMT
Subject: CN=575DC8AD08799572EEEA9762F017334615BF7375
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:66:b8:54:96:90:a4:69:56:7d:cb:1c:b8:ee:
35:17:6a:a6:f0:29:42:4c:dd:60:34:df:94:ef:53:
93:d8:e8:c8:d3:2f:5a:be:b4:d7:27:ce:58:53:ac:
8c:86:bd:17:ed:3b:08:01:3c:fd:0b:7c:a3:d7:7f:
96:f9:08:86:5a:3f:1c:d0:2c:b3:3e:61:ce:7f:ec:
61:5a:77:e1:f4:b7:0e:fd:a6:20:0c:f9:23:47:06:
9f:6e:fc:92:65:23:6e:2f:3b:9c:4a:aa:8b:b7:2c:
eb:04:1b:fc:9d:ff:d9:16:6e:01:82:1d:08:b0:dc:
3c:45:71:53:75:12:62:65:4b:f8:b6:ec:05:77:7c:
81:7f:04:ac:73:89:f9:3a:1e:0e:e3:56:4f:ae:aa:
65:58:e0:b0:eb:11:7f:76:f9:e5:84:a0:21:5b:35:
80:de:33:19:f9:da:e1:9a:85:0d:8c:0c:b7:c5:00:
eb:69:55:28:6f:02:3f:1e:ff:1d:60:fb:68:85:96:
e4:c2:29:97:a7:6c:57:b3:5c:74:5d:1f:fd:30:5b:
e4:da:59:52:61:ad:fb:a4:1c:b6:a7:b4:92:fb:e4:
37:e0:32:4c:0d:1b:21:4c:b6:2f:90:67:9c:9b:7f:
5a:91:0c:6b:f3:24:f3:bc:02:35:46:99:36:5e:91:
ce:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:5D:C8:AD:08:79:95:72:EE:EA:97:62:F0:17:33:46:15:BF:73:75
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS213707.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.50.53.0/24
IPv6:
2a06:9f40::/32
Signature Algorithm: sha256WithRSAEncryption
67:04:47:0b:2f:0b:fe:5d:26:ea:77:64:c5:d8:08:fb:87:34:
ed:95:7f:da:ed:fe:7e:16:2c:38:25:fe:6f:22:ae:13:f8:f5:
d1:03:6f:28:04:43:47:29:11:53:66:e9:5a:a1:d7:10:27:f3:
98:08:9d:8f:52:c7:2e:fd:62:fd:23:c1:e4:02:8d:20:f8:dd:
70:e0:6c:3e:5d:fd:7d:f1:8c:1e:bf:75:7d:40:7e:96:97:a0:
4a:07:36:59:75:50:a4:f7:a7:d5:51:9f:74:45:dc:62:f8:2b:
5d:9a:65:11:60:73:09:8f:36:a6:b4:4e:c4:39:ee:d1:a5:fb:
8b:d5:30:f0:96:54:ff:a9:4b:1c:91:26:7d:ed:7f:77:7d:76:
5e:e3:06:b1:f3:81:f8:0f:72:95:0b:69:69:ea:96:40:3b:71:
8e:d8:b3:fc:da:f3:3f:54:97:67:68:4f:62:86:a6:bd:46:ad:
3b:07:31:5d:fa:a5:8d:39:08:79:51:ec:7d:34:1e:30:4a:a4:
04:3a:77:1c:5e:1c:66:99:2f:0c:fc:62:e7:d4:0d:1b:77:33:
82:e6:48:b9:25:41:79:40:6d:ba:dc:56:69:81:d2:8f:82:4a:
c5:2a:93:68:05:ff:92:c8:29:bd:31:15:24:a8:14:e2:b9:14:
7b:ef:f9:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 00:01:51 2025 by rpki-client