Route Origin Authorization
$ rpki-client -vvf rpki-pp.com/repo/GOOFL/0/323630323a663833643a39303a3a2f34382d3438203d3e203437303635.roa
File: 323630323a663833643a39303a3a2f34382d3438203d3e203437303635.roa (raw, json)
Hash identifier: QNHf8yDF9a9U8XEDgEpQhHJIaTDb2TFXyYPRzrcBwu8=
Subject key identifier: 95:4B:7C:8C:C1:57:5D:7B:92:D0:07:EF:F7:3B:31:0B:FE:76:5D:4F
Certificate issuer: /CN=86de965d710aeee198142f460f82d31bc5a8aae2b2f48e0c5d
Certificate serial: 04CDC0544C1B2141F3F1242BB0A708182F35A725
Authority key identifier: D4:60:6A:E6:F1:88:38:E2:25:7D:55:AB:B5:00:63:6F:50:92:36:E3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7c9b1947-b813-43b3-9152-c4ccbff1cde7/86de965d710aeee198142f460f82d31bc5a8aae2b2f48e0c5d.cer
Subject info access: rsync://rpki-pp.com/repo/GOOFL/0/323630323a663833643a39303a3a2f34382d3438203d3e203437303635.roa
Signing time: Sat 28 Dec 2024 00:21:42 +0000
ROA not before: Sat 28 Dec 2024 00:16:42 +0000
ROA not after: Sat 27 Dec 2025 00:21:42 +0000
asID: 47065
IP address blocks: 2602:f83d:90::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 06 Feb 2025 17:45:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:cd:c0:54:4c:1b:21:41:f3:f1:24:2b:b0:a7:08:18:2f:35:a7:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86de965d710aeee198142f460f82d31bc5a8aae2b2f48e0c5d
Validity
Not Before: Dec 28 00:16:42 2024 GMT
Not After : Dec 27 00:21:42 2025 GMT
Subject: CN=954B7C8CC1575D7B92D007EFF73B310BFE765D4F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:11:35:31:bb:af:84:24:7d:e8:b2:49:0f:4d:
a9:1f:24:2f:b8:11:23:ce:c3:2b:e6:6e:3e:f4:32:
b6:ba:4e:5b:c0:56:93:0e:c4:91:eb:2c:aa:72:47:
1c:79:dc:90:d8:c7:81:ab:4a:52:83:dc:b2:09:bc:
6a:14:5e:93:a0:39:d5:d2:1d:68:99:03:d1:b0:9b:
77:6f:01:d5:e9:e4:34:09:ea:8a:a6:4a:99:f8:22:
84:29:42:9d:05:38:e0:27:87:e9:a4:43:a6:df:bf:
9b:a0:d5:a0:c5:65:99:d2:a0:6b:a4:7e:b9:9e:17:
7a:ec:2b:13:51:33:c7:d5:a4:db:ea:d6:a8:01:90:
3d:1c:b6:aa:42:1f:7f:35:a2:07:f4:6d:40:ee:5a:
38:9e:f6:42:d6:f6:1c:9a:c7:3f:dd:ab:e9:f1:71:
6b:22:0c:90:38:92:12:70:9e:f9:be:10:c1:b6:e7:
ef:e5:34:ff:a7:6e:6a:86:ee:ed:a5:35:60:8b:81:
5e:f4:3f:62:85:35:a3:f5:15:05:c0:aa:b4:cf:71:
8d:d6:87:1e:d1:57:f5:ef:22:64:1a:e5:f8:78:f2:
46:9b:52:4a:a8:ce:c6:0f:84:20:9c:0e:52:74:44:
cb:05:b5:a8:61:17:8e:27:b7:17:8b:02:62:82:ab:
f8:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:4B:7C:8C:C1:57:5D:7B:92:D0:07:EF:F7:3B:31:0B:FE:76:5D:4F
X509v3 Authority Key Identifier:
keyid:D4:60:6A:E6:F1:88:38:E2:25:7D:55:AB:B5:00:63:6F:50:92:36:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-pp.com/repo/GOOFL/0/D4606AE6F18838E2257D55ABB500636F509236E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7c9b1947-b813-43b3-9152-c4ccbff1cde7/86de965d710aeee198142f460f82d31bc5a8aae2b2f48e0c5d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-pp.com/repo/GOOFL/0/323630323a663833643a39303a3a2f34382d3438203d3e203437303635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:f83d:90::/48
Signature Algorithm: sha256WithRSAEncryption
99:9c:fd:52:94:b8:7a:0e:e3:6e:46:e8:4a:76:e6:7a:09:04:
d9:b4:78:04:16:5d:54:fa:b5:f4:3f:96:87:b2:01:51:a4:a7:
fe:d5:7a:d0:13:bd:c8:36:b7:77:c9:e7:34:46:6b:8b:53:59:
3a:c9:83:44:b9:07:20:a3:93:2e:83:3f:b2:80:74:6b:db:06:
f4:59:e3:26:38:1d:e2:88:a6:98:1f:c0:7f:99:45:48:61:80:
27:88:c5:d0:8a:9e:80:49:96:f6:3b:4e:0c:28:25:67:ad:d0:
2b:1b:f0:fc:0c:7a:b9:cf:44:80:71:f5:59:8e:5c:cb:b7:42:
c5:eb:19:df:c0:7d:a3:f6:f6:7e:05:9f:d1:b2:96:ca:01:2e:
e1:2f:19:65:41:40:85:de:61:5e:c7:29:67:ce:c7:7a:cc:b7:
9f:a0:4c:ee:05:ec:4a:2e:1b:16:a5:af:1a:25:99:cf:af:66:
ad:62:3d:31:d4:2d:81:7d:71:4e:9e:a7:62:f9:1e:ed:83:92:
be:9e:15:1a:e2:72:c0:75:f3:a1:c4:09:71:df:cc:f4:d5:ba:
9e:af:32:9e:9d:93:71:e8:d6:47:b5:8d:68:ce:ed:d3:2c:20:
e2:0b:9a:85:2d:a0:ef:55:c1:01:be:7c:23:ec:4a:ed:76:60:
45:d7:dc:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 03:54:04 2025 by rpki-client