Route Origin Authorization
$ rpki-client -vvf rpki-pp.com/repo/GOOFL/0/323630323a663833643a38303a3a2f34382d3438203d3e203437303635.roa
File: 323630323a663833643a38303a3a2f34382d3438203d3e203437303635.roa (raw, json)
Hash identifier: q0/895alU1tAa+gdLmoVcDUoajG7UGZJxkLgY7+gmaE=
Subject key identifier: 42:2A:62:E3:04:71:00:AF:F7:24:5F:B8:0A:88:BC:8E:9E:47:69:59
Certificate issuer: /CN=86de965d710aeee198142f460f82d31bc5a8aae2b2f48e0c5d
Certificate serial: 0F7F8CE07123345D5459FD9CC008EA120EB5ACFD
Authority key identifier: D4:60:6A:E6:F1:88:38:E2:25:7D:55:AB:B5:00:63:6F:50:92:36:E3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7c9b1947-b813-43b3-9152-c4ccbff1cde7/86de965d710aeee198142f460f82d31bc5a8aae2b2f48e0c5d.cer
Subject info access: rsync://rpki-pp.com/repo/GOOFL/0/323630323a663833643a38303a3a2f34382d3438203d3e203437303635.roa
Signing time: Thu 02 Jan 2025 21:50:41 +0000
ROA not before: Thu 02 Jan 2025 21:45:41 +0000
ROA not after: Thu 01 Jan 2026 21:50:41 +0000
asID: 47065
IP address blocks: 2602:f83d:80::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 02 Jan 2025 21:50:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:7f:8c:e0:71:23:34:5d:54:59:fd:9c:c0:08:ea:12:0e:b5:ac:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86de965d710aeee198142f460f82d31bc5a8aae2b2f48e0c5d
Validity
Not Before: Jan 2 21:45:41 2025 GMT
Not After : Jan 1 21:50:41 2026 GMT
Subject: CN=422A62E3047100AFF7245FB80A88BC8E9E476959
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c2:0c:c2:36:19:5d:29:6b:bb:d9:20:af:78:
4c:15:40:fe:86:68:0c:32:c7:ef:23:26:97:b6:ca:
5d:a9:b0:a7:96:19:64:8c:62:8d:7b:3e:85:26:cd:
c2:60:c0:a1:91:b9:6e:e4:8a:b6:a6:2e:ff:13:17:
aa:1d:fc:c6:0b:ea:06:2c:53:41:11:00:dd:8c:c5:
7e:5d:6e:67:fd:33:7f:06:0d:88:9f:4a:8a:b2:9c:
57:05:ed:96:c8:8f:95:68:09:a0:fe:50:51:c6:33:
48:40:24:7a:11:1d:19:29:d9:dc:a8:ac:b6:fa:57:
03:a6:07:47:e2:0e:ab:3d:7b:d3:89:76:cd:e5:1e:
e5:3c:3f:40:c9:c6:bf:f5:91:51:ac:50:e1:9b:19:
81:a3:d3:4e:d0:74:a3:c9:01:4e:e5:83:e7:92:3d:
29:92:d6:3c:ef:35:d7:78:72:4c:0a:0b:80:4d:4e:
a4:94:23:43:0a:3a:b2:60:d7:c5:e5:44:c7:64:93:
d9:de:f9:d7:bf:0c:9b:ba:4f:41:a4:b2:f9:34:24:
d3:02:64:25:bc:d9:47:2b:5f:8d:b6:d0:40:b8:26:
74:11:0a:94:6c:73:db:41:21:f6:ef:39:e7:8c:f7:
a5:d8:24:84:06:20:88:86:85:87:2b:00:ff:a6:16:
3b:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:2A:62:E3:04:71:00:AF:F7:24:5F:B8:0A:88:BC:8E:9E:47:69:59
X509v3 Authority Key Identifier:
keyid:D4:60:6A:E6:F1:88:38:E2:25:7D:55:AB:B5:00:63:6F:50:92:36:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-pp.com/repo/GOOFL/0/D4606AE6F18838E2257D55ABB500636F509236E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7c9b1947-b813-43b3-9152-c4ccbff1cde7/86de965d710aeee198142f460f82d31bc5a8aae2b2f48e0c5d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-pp.com/repo/GOOFL/0/323630323a663833643a38303a3a2f34382d3438203d3e203437303635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:f83d:80::/48
Signature Algorithm: sha256WithRSAEncryption
35:b9:77:84:b7:59:ae:e3:eb:f6:11:00:63:94:54:33:58:4d:
bb:e3:a8:e6:af:e3:14:9d:9b:49:5c:5a:95:9e:59:b5:b5:bc:
f6:91:01:78:04:8a:d5:35:7c:25:86:d0:90:25:72:08:b9:fd:
61:8d:04:c5:3b:4b:8d:ab:77:19:30:67:ca:72:e2:5b:92:b1:
0c:65:f1:a2:17:cc:4b:b2:a8:af:71:66:b9:f2:1b:4d:2a:15:
65:58:57:05:74:61:65:d0:db:7c:27:b1:bd:09:47:c3:20:05:
13:19:d4:0a:cf:c8:92:0b:1c:40:73:6f:fa:9f:ee:7e:da:d6:
c4:64:05:be:bc:5d:52:e5:8c:43:ed:bb:0a:06:81:51:b8:7e:
84:22:67:0b:fb:e5:01:3a:e0:89:ea:db:9c:7a:3d:3b:0d:11:
63:c3:9b:93:f9:c2:db:4f:fd:f9:7c:7f:3d:a0:a8:d8:42:18:
4a:b5:5d:95:49:9a:85:0e:d3:61:18:7c:28:c8:da:ed:94:ac:
bc:9f:6f:a3:18:d7:78:d4:c4:16:4d:4d:89:ff:f9:54:9b:da:
f7:67:45:b9:21:4c:e7:be:ef:78:bb:20:c5:91:54:e6:1d:69:
d0:f1:a5:8d:38:1b:1e:7f:7b:ef:6b:61:b1:94:da:9b:6f:d1:
c5:4d:55:5f
-----BEGIN CERTIFICATE-----
MIIFZTCCBE2gAwIBAgIUD3+M4HEjNF1UWf2cwAjqEg61rP0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyODZkZTk2NWQ3MTBhZWVlMTk4MTQyZjQ2MGY4MmQzMWJj
NWE4YWFlMmIyZjQ4ZTBjNWQwHhcNMjUwMTAyMjE0NTQxWhcNMjYwMTAxMjE1MDQx
WjAzMTEwLwYDVQQDEyg0MjJBNjJFMzA0NzEwMEFGRjcyNDVGQjgwQTg4QkM4RTlF
NDc2OTU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxcIMwjYZXSlr
u9kgr3hMFUD+hmgMMsfvIyaXtspdqbCnlhlkjGKNez6FJs3CYMChkblu5Iq2pi7/
ExeqHfzGC+oGLFNBEQDdjMV+XW5n/TN/Bg2In0qKspxXBe2WyI+VaAmg/lBRxjNI
QCR6ER0ZKdncqKy2+lcDpgdH4g6rPXvTiXbN5R7lPD9Ayca/9ZFRrFDhmxmBo9NO
0HSjyQFO5YPnkj0pktY87zXXeHJMCguATU6klCNDCjqyYNfF5UTHZJPZ3vnXvwyb
uk9BpLL5NCTTAmQlvNlHK1+NttBAuCZ0EQqUbHPbQSH27znnjPel2CSEBiCIhoWH
KwD/phY7awIDAQABo4ICZTCCAmEwHQYDVR0OBBYEFEIqYuMEcQCv9yRfuAqIvI6e
R2lZMB8GA1UdIwQYMBaAFNRgaubxiDjiJX1Vq7UAY29QkjbjMA4GA1UdDwEB/wQE
AwIHgDBeBgNVHR8EVzBVMFOgUaBPhk1yc3luYzovL3Jwa2ktcHAuY29tL3JlcG8v
R09PRkwvMC9ENDYwNkFFNkYxODgzOEUyMjU3RDU1QUJCNTAwNjM2RjUwOTIzNkUz
LmNybDCB8wYIKwYBBQUHAQEEgeYwgeMwgeAGCCsGAQUFBzAChoHTcnN5bmM6Ly9y
cGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4
MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1iYjFmLTQ4YjYtYmYz
Mi1jOTQ5MjI4NmYxOTUvN2M5YjE5NDctYjgxMy00M2IzLTkxNTItYzRjY2JmZjFj
ZGU3Lzg2ZGU5NjVkNzEwYWVlZTE5ODE0MmY0NjBmODJkMzFiYzVhOGFhZTJiMmY0
OGUwYzVkLmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuGX3JzeW5jOi8v
cnBraS1wcC5jb20vcmVwby9HT09GTC8wLzMyMzYzMDMyM2E2NjM4MzM2NDNhMzgz
MDNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDM0MzczMDM2MzUucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAm
Avg9AIAwDQYJKoZIhvcNAQELBQADggEBADW5d4S3Wa7j6/YRAGOUVDNYTbvjqOav
4xSdm0lcWpWeWbW1vPaRAXgEitU1fCWG0JAlcgi5/WGNBMU7S42rdxkwZ8py4luS
sQxl8aIXzEuyqK9xZrnyG00qFWVYVwV0YWXQ23wnsb0JR8MgBRMZ1ArPyJILHEBz
b/qf7n7a1sRkBb68XVLljEPtuwoGgVG4foQiZwv75QE64Inq25x6PTsNEWPDm5P5
wttP/fl8fz2gqNhCGEq1XZVJmoUO02EYfCjI2u2UrLyfb6MY13jUxBZNTYn/+VSb
2vdnRbkhTOe+73i7IMWRVOYdadDxpY04Gx5/e+9rYbGU2ptv0cVNVV8=
-----END CERTIFICATE-----
Generated at Thu Apr 10 03:51:36 2025 by rpki-client