Route Origin Authorization
$ rpki-client -vvf rpki-pp.com/repo/GOOFL/0/323630323a663833643a3a2f34302d3438203d3e203133353237.roa
File: 323630323a663833643a3a2f34302d3438203d3e203133353237.roa (raw, json)
Hash identifier: Ho+FpYTgRL/JYMzic6wk4bhlX1FhvFRwTsi5nJFjNts=
Subject key identifier: 2D:C9:74:A4:34:19:B1:7D:AD:F7:11:5A:A6:88:2F:4E:41:DD:7B:2B
Certificate issuer: /CN=86de965d710aeee198142f460f82d31bc5a8aae2b2f48e0c5d
Certificate serial: 698CE1BD2A8023ABD4A138781AACFBFF9384769A
Authority key identifier: D4:60:6A:E6:F1:88:38:E2:25:7D:55:AB:B5:00:63:6F:50:92:36:E3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7c9b1947-b813-43b3-9152-c4ccbff1cde7/86de965d710aeee198142f460f82d31bc5a8aae2b2f48e0c5d.cer
Subject info access: rsync://rpki-pp.com/repo/GOOFL/0/323630323a663833643a3a2f34302d3438203d3e203133353237.roa
Signing time: Fri 14 Feb 2025 02:00:04 +0000
ROA not before: Fri 14 Feb 2025 01:55:04 +0000
ROA not after: Fri 13 Feb 2026 02:00:04 +0000
asID: 13527
IP address blocks: 2602:f83d::/40 maxlen: 48
Validation: Failed, certificate revoked on Fri 14 Feb 2025 18:29:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:8c:e1:bd:2a:80:23:ab:d4:a1:38:78:1a:ac:fb:ff:93:84:76:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86de965d710aeee198142f460f82d31bc5a8aae2b2f48e0c5d
Validity
Not Before: Feb 14 01:55:04 2025 GMT
Not After : Feb 13 02:00:04 2026 GMT
Subject: CN=2DC974A43419B17DADF7115AA6882F4E41DD7B2B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a6:d5:7c:c8:74:0f:f5:74:c5:8a:23:7d:15:
99:b4:d1:00:50:84:c0:97:1b:2b:91:31:c3:97:63:
0d:10:e7:59:8a:be:d8:ab:4f:02:4f:ab:fc:01:51:
42:3a:d8:ff:bc:05:0e:8f:e8:4c:11:2e:4a:21:00:
4d:3f:dc:53:c7:95:bf:0d:eb:d6:e7:e8:97:89:51:
6e:43:0f:45:ba:41:3b:2b:3b:d6:dc:b8:86:7e:90:
25:d8:ca:8e:df:d5:e6:2f:c9:f2:8a:e5:f8:b0:01:
fc:db:c5:fe:b5:f3:fe:0f:33:17:a2:33:f8:e8:77:
a4:d6:29:c8:14:4d:77:7e:db:47:9c:8d:c0:2d:95:
2c:34:91:5b:0d:c1:73:ab:16:ce:c9:db:eb:14:eb:
38:2f:b4:b5:1e:bb:1b:3b:42:32:e2:5a:5c:3e:62:
8e:70:77:e6:6a:6e:6b:32:f8:19:36:47:26:1e:1c:
8e:a5:ab:6e:15:ac:0c:7b:a7:c7:69:42:1c:68:e1:
fe:81:0e:bc:55:d3:dd:c6:5c:ab:dd:8b:fb:ec:86:
b1:49:97:f0:fa:01:cf:c9:b3:b4:c5:a5:4c:8d:17:
50:4f:8d:0b:d7:d9:c5:51:ee:49:df:01:c4:16:14:
a9:e6:54:a8:df:37:6b:91:64:c7:df:d4:85:f1:d9:
fb:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:C9:74:A4:34:19:B1:7D:AD:F7:11:5A:A6:88:2F:4E:41:DD:7B:2B
X509v3 Authority Key Identifier:
keyid:D4:60:6A:E6:F1:88:38:E2:25:7D:55:AB:B5:00:63:6F:50:92:36:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-pp.com/repo/GOOFL/0/D4606AE6F18838E2257D55ABB500636F509236E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7c9b1947-b813-43b3-9152-c4ccbff1cde7/86de965d710aeee198142f460f82d31bc5a8aae2b2f48e0c5d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-pp.com/repo/GOOFL/0/323630323a663833643a3a2f34302d3438203d3e203133353237.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:f83d::/40
Signature Algorithm: sha256WithRSAEncryption
a6:98:85:15:0a:33:b7:be:1c:0b:e3:78:f7:b1:de:88:06:b5:
df:8c:ba:18:fd:5a:2f:88:4c:e4:9f:57:23:c2:af:2d:00:3a:
0c:88:7e:f3:7c:30:8c:2e:72:b6:68:0a:5b:79:7d:e8:6c:8a:
fc:70:f5:b4:95:be:b8:16:66:cb:ef:e6:fd:03:fd:2e:78:5c:
cc:fc:47:16:80:d9:80:ac:47:ec:93:d8:6e:3e:21:43:3d:c6:
a9:d5:7a:3a:86:a8:d1:7f:53:0a:bb:9a:24:1c:da:35:83:d7:
35:e7:00:8a:b4:88:60:bc:f9:81:e8:4f:bc:61:43:1b:bd:92:
54:e2:e1:12:bd:ea:10:e5:1a:88:e8:87:8b:bb:c1:c4:f7:da:
d4:0e:d0:58:73:31:14:14:f4:7c:9c:48:f3:9d:be:71:d7:6d:
7d:48:7c:71:04:8c:85:f7:a1:5b:5e:97:3d:ff:2c:60:7e:f5:
3d:f0:0c:e4:d7:b7:dc:1e:27:36:ff:1b:88:b1:62:2f:dc:ea:
1b:41:4d:73:81:69:80:57:21:90:e1:d4:b1:05:c4:67:6b:95:
03:f9:33:46:1e:47:8a:a2:71:3e:5a:d3:bf:eb:ec:3a:91:14:
cb:db:4b:2d:c0:c9:d5:42:a9:1a:db:cb:ad:98:cc:91:a2:8a:
9e:98:c0:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 04:32:34 2025 by rpki-client