Route Origin Authorization
$ rpki-client -vvf rpki-pp.com/repo/GOOFL/0/323630323a663833643a38333a3a2f34382d3438203d3e203437303635.roa
File: 323630323a663833643a38333a3a2f34382d3438203d3e203437303635.roa (raw, json)
Hash identifier: 2w7PEKNklSDJsR9covwIQQku+SG6rO3dMeno0anUuHc=
Subject key identifier: A9:E9:20:62:EB:3E:5A:A6:29:08:B6:0C:7A:DD:34:07:1F:3C:B1:F7
Certificate issuer: /CN=86de965d710aeee198142f460f82d31bc5a8aae2b2f48e0c5d
Certificate serial: 20D47AFE636CB713EB408B79E7F3E5DA7B1D4516
Authority key identifier: D4:60:6A:E6:F1:88:38:E2:25:7D:55:AB:B5:00:63:6F:50:92:36:E3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7c9b1947-b813-43b3-9152-c4ccbff1cde7/86de965d710aeee198142f460f82d31bc5a8aae2b2f48e0c5d.cer
Subject info access: rsync://rpki-pp.com/repo/GOOFL/0/323630323a663833643a38333a3a2f34382d3438203d3e203437303635.roa
Signing time: Tue 31 Dec 2024 02:20:33 +0000
ROA not before: Tue 31 Dec 2024 02:15:33 +0000
ROA not after: Tue 30 Dec 2025 02:20:33 +0000
asID: 47065
IP address blocks: 2602:f83d:83::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 31 Dec 2024 02:20:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:d4:7a:fe:63:6c:b7:13:eb:40:8b:79:e7:f3:e5:da:7b:1d:45:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86de965d710aeee198142f460f82d31bc5a8aae2b2f48e0c5d
Validity
Not Before: Dec 31 02:15:33 2024 GMT
Not After : Dec 30 02:20:33 2025 GMT
Subject: CN=A9E92062EB3E5AA62908B60C7ADD34071F3CB1F7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b4:4a:14:cd:9a:87:66:36:07:ca:73:ef:47:
88:ea:31:3a:45:d9:f8:d8:30:5c:b3:96:bb:1a:7d:
7e:d1:89:3b:cf:df:5f:69:af:bd:73:e0:93:18:10:
d3:72:02:97:88:c9:2c:6a:84:5a:c7:b3:c7:84:87:
f6:77:7c:f0:2e:d8:96:cc:49:a3:e5:c7:cc:a7:4c:
d6:39:a5:2c:b0:6b:34:0c:37:22:91:40:4f:46:8a:
64:df:2e:5f:aa:4a:0f:28:7d:3e:bd:88:ae:4f:a4:
41:8d:ac:04:49:83:9e:62:e1:ca:01:1e:d8:7b:02:
45:e2:cf:d9:f8:b1:a2:86:a4:19:0c:c4:5d:f4:59:
64:19:ac:45:62:ee:84:66:66:6e:5e:db:bc:d0:10:
79:93:6a:86:bf:1b:6d:ed:51:90:21:00:86:b9:be:
a6:a4:ec:93:7b:31:25:96:5d:69:f1:2a:9c:d8:84:
cc:59:11:b0:7a:0b:4a:15:6c:40:c5:80:93:b5:79:
b7:87:5c:11:95:05:a6:62:35:2f:ec:84:d4:ba:0c:
15:e4:f4:7c:68:3e:55:46:f6:bb:57:4a:64:90:74:
bb:1e:74:3a:b3:95:f4:50:fe:e6:a4:85:ac:ed:b6:
37:e9:9b:42:b7:35:0b:26:7f:9b:5e:eb:ef:24:f8:
7c:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:E9:20:62:EB:3E:5A:A6:29:08:B6:0C:7A:DD:34:07:1F:3C:B1:F7
X509v3 Authority Key Identifier:
keyid:D4:60:6A:E6:F1:88:38:E2:25:7D:55:AB:B5:00:63:6F:50:92:36:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-pp.com/repo/GOOFL/0/D4606AE6F18838E2257D55ABB500636F509236E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7c9b1947-b813-43b3-9152-c4ccbff1cde7/86de965d710aeee198142f460f82d31bc5a8aae2b2f48e0c5d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-pp.com/repo/GOOFL/0/323630323a663833643a38333a3a2f34382d3438203d3e203437303635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:f83d:83::/48
Signature Algorithm: sha256WithRSAEncryption
4c:1c:94:cb:f1:d6:d8:b1:7e:a1:53:e0:54:5c:b8:b9:39:b0:
f0:fc:10:a9:92:e7:ef:a2:91:93:3c:0d:4b:e0:23:5d:f8:71:
46:09:4b:11:9f:46:8f:54:99:f7:bc:87:f5:13:ce:be:69:9c:
b4:6d:0b:ba:9d:c2:d0:66:7b:45:f6:7e:1f:c8:44:d6:f5:b5:
59:f5:cc:e7:37:70:0f:4b:23:d5:f3:e9:66:cf:62:e7:e9:d9:
4e:64:67:e0:31:2e:95:52:5b:87:9d:8d:4d:f3:e5:cf:2d:e9:
96:24:34:a1:61:4e:e4:0f:46:8f:36:5a:2f:81:7c:17:ae:8d:
e7:a5:f9:93:19:7c:0e:79:27:a7:42:26:e1:f1:d4:46:47:39:
fd:4c:a6:5b:5b:41:d1:be:0b:bc:fa:3b:2c:65:bc:7e:6c:69:
98:d7:4e:de:d4:d6:5c:82:02:0a:bf:73:b7:af:be:02:39:ef:
32:82:9b:25:93:40:f4:51:46:26:9e:83:2b:5d:a2:c7:82:97:
d4:47:d1:3c:dd:2d:42:ba:e5:ef:e9:9f:ab:f6:1a:1f:0b:93:
a6:84:ae:e4:88:e9:a5:7c:73:31:cf:e6:83:21:b3:be:be:1a:
e1:51:54:2f:0e:5e:00:95:85:32:9f:48:25:6c:bf:de:f4:77:
51:75:f0:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 03:49:07 2025 by rpki-client