Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8ea98bae018ec180acc111a2/0/323630323a663937653a3a2f34302d3430203d3e203131333538.roa
File: 323630323a663937653a3a2f34302d3430203d3e203131333538.roa (raw, json)
Hash identifier: tYB9HCLZhZlRSXnY0zR+COH6VsHOOBioadniQy2mZgE=
Subject key identifier: E7:11:D8:B7:71:C5:BA:E4:3A:B2:B2:18:87:4E:54:8F:98:03:16:CD
Certificate issuer: /CN=ba21647aac78a3704dabe69d74570cb11566afd1b7dbdd388a
Certificate serial: 0743B10485940A6CFD54AD40D0F0A92FF3BAA245
Authority key identifier: 47:9F:29:66:0F:9E:05:B3:E7:2E:0C:85:B1:58:C5:87:0A:E0:E9:5B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2cd85896-beca-4cc9-8e09-9367b0ea9ea4/ba21647aac78a3704dabe69d74570cb11566afd1b7dbdd388a.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8ea98bae018ec180acc111a2/0/323630323a663937653a3a2f34302d3430203d3e203131333538.roa
Signing time: Tue 09 Apr 2024 06:19:17 +0000
ROA not before: Tue 09 Apr 2024 06:14:17 +0000
ROA not after: Tue 08 Apr 2025 06:19:17 +0000
asID: 11358
IP address blocks: 2602:f97e::/40 maxlen: 40
Validation: Failed, certificate revoked on Tue 28 May 2024 06:13:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:43:b1:04:85:94:0a:6c:fd:54:ad:40:d0:f0:a9:2f:f3:ba:a2:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba21647aac78a3704dabe69d74570cb11566afd1b7dbdd388a
Validity
Not Before: Apr 9 06:14:17 2024 GMT
Not After : Apr 8 06:19:17 2025 GMT
Subject: CN=E711D8B771C5BAE43AB2B218874E548F980316CD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:35:17:f7:b7:87:50:a8:bd:48:f3:10:9b:48:
ad:0d:2e:ec:9d:a6:bf:73:51:84:a7:ca:2c:ec:2f:
f9:13:33:73:24:08:4c:f6:1e:04:d1:1d:9d:19:ad:
97:e1:77:fc:d2:da:37:b7:fd:eb:20:d0:08:a7:e0:
97:75:00:66:4c:63:b8:54:e6:0f:a5:47:f5:8e:4a:
d1:d3:12:5d:80:f0:22:e1:4f:ac:b2:42:29:ca:c5:
8c:76:76:e2:0d:52:c6:0c:79:f4:cd:46:56:6c:62:
1a:97:cd:7d:66:8b:44:7f:41:c2:77:8c:e0:54:87:
a6:55:39:52:29:7b:aa:b6:61:19:6e:fe:f5:13:07:
50:4e:11:81:5d:48:dd:19:00:9e:66:16:c7:6a:82:
e6:67:a5:8e:04:52:1c:9c:1e:bb:f4:03:7b:8e:5b:
55:27:b2:52:7f:50:e7:b8:7c:be:ba:31:cd:67:40:
cc:e5:96:20:fd:aa:36:e6:11:cb:4b:5b:89:a7:05:
88:a2:f6:e0:f3:17:9b:7e:e4:3f:7d:ad:08:f7:d4:
de:07:01:5a:a2:a4:fe:a6:0f:6b:05:7e:9a:92:a1:
15:e0:cd:5b:ef:f3:b8:f3:fb:e1:96:b6:a4:e1:92:
50:67:7f:06:fe:dc:d9:ac:f1:cf:64:71:cb:48:6c:
d3:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:11:D8:B7:71:C5:BA:E4:3A:B2:B2:18:87:4E:54:8F:98:03:16:CD
X509v3 Authority Key Identifier:
keyid:47:9F:29:66:0F:9E:05:B3:E7:2E:0C:85:B1:58:C5:87:0A:E0:E9:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf8ea98bae018ec180acc111a2/0/479F29660F9E05B3E72E0C85B158C5870AE0E95B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2cd85896-beca-4cc9-8e09-9367b0ea9ea4/ba21647aac78a3704dabe69d74570cb11566afd1b7dbdd388a.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8ea98bae018ec180acc111a2/0/323630323a663937653a3a2f34302d3430203d3e203131333538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:f97e::/40
Signature Algorithm: sha256WithRSAEncryption
2a:32:55:be:4b:71:08:de:d1:1f:d5:6c:43:eb:d1:80:c1:b1:
21:68:49:71:8a:8d:17:07:07:d1:ed:b6:0b:a5:34:52:dd:bc:
ea:2b:ed:d2:39:3b:fa:d4:eb:40:0a:60:4c:f7:7b:02:98:bf:
bc:a4:0a:9b:74:67:93:72:c6:94:da:55:7f:89:2e:2b:67:a6:
fd:54:bd:8f:87:76:5a:12:9c:26:2a:4b:19:f6:ab:74:4e:98:
5b:0b:10:7d:33:74:6f:21:37:df:73:f5:21:b2:28:32:3e:e9:
5d:c4:57:ee:23:40:45:c6:f0:10:31:76:22:ae:6a:87:0b:cc:
91:37:15:49:d8:db:8b:76:5a:d4:42:c7:c6:95:75:7e:fc:cb:
e3:17:a0:50:f4:86:9f:89:d9:f0:c3:4f:57:20:2e:ea:07:88:
d1:2e:c2:e7:80:d3:78:6c:fb:fe:2f:cf:ce:84:b3:b1:57:63:
63:a4:1e:88:1a:95:d0:02:c2:31:98:50:00:ee:15:ad:9c:4c:
a6:57:e0:c4:c7:0a:21:09:53:c9:05:43:22:6b:f4:3a:90:73:
b5:9a:f5:c6:fb:af:54:c2:13:9c:45:16:ae:d9:a6:f8:95:e6:
6b:14:cb:a1:be:56:95:88:50:48:b9:c1:a5:21:86:ec:68:8b:
e3:a2:2e:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 28 10:47:21 2024 by rpki-client on console-ams.rpki-client.org