Route Origin Authorization
$ rpki-client -vvf rpki-pp.com/repo/GOOFL/0/323630323a663833643a3a2f34302d3434203d3e203133353237.roa
File: 323630323a663833643a3a2f34302d3434203d3e203133353237.roa (raw, json)
Hash identifier: 9ktUWmuz6tWsHfkbXiouGDCElD89whegJ/z+8tQ0Ymg=
Subject key identifier: B7:26:FC:20:0D:1F:BC:F1:C6:19:2E:98:B0:5D:62:E8:0F:04:72:C2
Certificate issuer: /CN=86de965d710aeee198142f460f82d31bc5a8aae2b2f48e0c5d
Certificate serial: 29F9D54E45FD7FC4A032B4F7187DC701D8DAE60B
Authority key identifier: D4:60:6A:E6:F1:88:38:E2:25:7D:55:AB:B5:00:63:6F:50:92:36:E3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7c9b1947-b813-43b3-9152-c4ccbff1cde7/86de965d710aeee198142f460f82d31bc5a8aae2b2f48e0c5d.cer
Subject info access: rsync://rpki-pp.com/repo/GOOFL/0/323630323a663833643a3a2f34302d3434203d3e203133353237.roa
Signing time: Fri 14 Feb 2025 18:29:49 +0000
ROA not before: Fri 14 Feb 2025 18:24:49 +0000
ROA not after: Fri 13 Feb 2026 18:29:49 +0000
asID: 13527
IP address blocks: 2602:f83d::/40 maxlen: 44
Validation: Failed, certificate revoked on Tue 18 Feb 2025 16:37:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:f9:d5:4e:45:fd:7f:c4:a0:32:b4:f7:18:7d:c7:01:d8:da:e6:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86de965d710aeee198142f460f82d31bc5a8aae2b2f48e0c5d
Validity
Not Before: Feb 14 18:24:49 2025 GMT
Not After : Feb 13 18:29:49 2026 GMT
Subject: CN=B726FC200D1FBCF1C6192E98B05D62E80F0472C2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c3:4e:2e:a3:c9:e6:b3:07:4b:4b:76:40:68:
c4:42:c4:ab:1d:cc:c5:39:f5:5d:79:3f:60:9a:03:
0b:62:ed:29:7b:0b:ac:0c:03:de:7d:3d:68:60:98:
c5:7b:db:72:a2:76:37:7e:5b:4e:09:cb:13:61:84:
10:c1:cf:56:df:cd:33:86:83:aa:61:f1:d6:f5:04:
4c:d9:0f:96:b7:28:b0:bf:c7:12:29:d0:f5:be:56:
88:db:33:1b:d1:fe:78:db:b0:85:0f:33:d2:90:78:
1a:92:fb:33:3b:69:e0:cc:a7:8d:ff:0f:6b:23:49:
87:d5:07:1a:f6:12:39:16:90:0f:b3:05:82:4b:d7:
01:ae:cb:e7:d1:f4:35:99:12:fb:0d:7b:9c:db:73:
6a:2d:9c:08:6c:6c:c8:5e:a7:e6:07:ea:4f:d0:be:
1d:b0:e2:c9:06:d3:9b:52:7e:07:c1:59:ca:e3:26:
25:12:53:b7:dc:18:34:1a:15:31:c6:30:16:95:8d:
e9:35:59:a9:71:27:38:c6:a0:53:93:54:2b:34:91:
53:a6:88:37:04:26:bf:0c:ca:fb:c4:5e:8d:bb:64:
8b:95:f1:63:2c:35:f8:9e:73:17:a6:47:54:eb:15:
82:da:2d:d0:5c:f0:3b:e8:ab:ca:05:37:e5:b7:70:
33:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:26:FC:20:0D:1F:BC:F1:C6:19:2E:98:B0:5D:62:E8:0F:04:72:C2
X509v3 Authority Key Identifier:
keyid:D4:60:6A:E6:F1:88:38:E2:25:7D:55:AB:B5:00:63:6F:50:92:36:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-pp.com/repo/GOOFL/0/D4606AE6F18838E2257D55ABB500636F509236E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7c9b1947-b813-43b3-9152-c4ccbff1cde7/86de965d710aeee198142f460f82d31bc5a8aae2b2f48e0c5d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-pp.com/repo/GOOFL/0/323630323a663833643a3a2f34302d3434203d3e203133353237.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:f83d::/40
Signature Algorithm: sha256WithRSAEncryption
8a:bb:07:d4:ac:c1:1d:7f:99:2b:ef:e4:f3:17:b5:d0:25:81:
40:45:79:ad:2a:c9:bf:74:25:c2:b9:75:30:2e:ac:35:90:6c:
ac:eb:cd:e5:cc:3e:dc:d4:7c:46:17:b5:e8:9d:ad:8f:0c:08:
80:1f:d5:a8:ad:10:ce:7c:b7:43:75:db:69:16:9b:3b:d9:e3:
93:fd:21:69:59:78:bd:c6:63:72:97:88:ad:4b:b8:6a:47:ff:
5c:ad:72:30:11:68:13:30:c9:fa:8d:b3:58:f8:12:4f:f1:99:
00:00:ab:ec:ae:39:bc:35:c7:3d:b3:1d:a8:84:a5:03:b5:0a:
05:0d:fa:ca:5c:7b:f1:5f:ea:6a:d4:c0:eb:cc:ba:de:a8:31:
44:6b:3f:00:53:a6:eb:94:8e:bc:20:14:dc:ad:91:5c:46:4b:
78:1e:39:d4:7a:41:69:a2:86:69:d3:4c:fc:0f:cd:a5:6b:39:
9a:33:c4:42:63:a1:56:08:18:22:59:a8:3d:3d:9e:40:1f:72:
cc:98:0d:92:99:e1:b2:66:ed:11:43:02:9e:40:27:be:34:ce:
a6:a8:31:4a:75:3b:36:4e:e2:80:38:c9:ff:35:88:5e:32:8b:
0e:f0:4d:32:71:45:df:7d:5f:9d:6b:23:7e:36:ff:6b:83:63:
0f:b8:b2:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 04:37:15 2025 by rpki-client