Route Origin Authorization
$ rpki-client -vvf rpki-pp.com/repo/GOOFL/0/323630323a663833643a63303a3a2f34332d3433203d3e203133353237.roa
File: 323630323a663833643a63303a3a2f34332d3433203d3e203133353237.roa (raw, json)
Hash identifier: QvSMgDazZYe9UKVwUQyT8xUuYI5KADn49hTnTUjyOGY=
Subject key identifier: EC:49:85:23:36:C1:77:11:14:C5:BE:65:DB:8C:1D:9C:AA:36:40:07
Certificate issuer: /CN=86de965d710aeee198142f460f82d31bc5a8aae2b2f48e0c5d
Certificate serial: 5463501A11F3B683F1FF6EF7FE668D069D1B675D
Authority key identifier: D4:60:6A:E6:F1:88:38:E2:25:7D:55:AB:B5:00:63:6F:50:92:36:E3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7c9b1947-b813-43b3-9152-c4ccbff1cde7/86de965d710aeee198142f460f82d31bc5a8aae2b2f48e0c5d.cer
Subject info access: rsync://rpki-pp.com/repo/GOOFL/0/323630323a663833643a63303a3a2f34332d3433203d3e203133353237.roa
Signing time: Fri 28 Feb 2025 19:00:18 +0000
ROA not before: Fri 28 Feb 2025 18:55:18 +0000
ROA not after: Fri 27 Feb 2026 19:00:18 +0000
asID: 13527
IP address blocks: 2602:f83d:c0::/43 maxlen: 43
Validation: Failed, certificate revoked on Fri 28 Feb 2025 19:39:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:63:50:1a:11:f3:b6:83:f1:ff:6e:f7:fe:66:8d:06:9d:1b:67:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86de965d710aeee198142f460f82d31bc5a8aae2b2f48e0c5d
Validity
Not Before: Feb 28 18:55:18 2025 GMT
Not After : Feb 27 19:00:18 2026 GMT
Subject: CN=EC49852336C1771114C5BE65DB8C1D9CAA364007
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:97:00:e1:d1:5a:22:9d:af:fb:a3:40:de:fc:
9d:bc:bb:8a:85:f5:ad:9f:2b:8d:89:0a:0b:10:86:
0b:c6:a3:b4:f5:17:7b:f8:3f:32:d5:6b:98:c9:2a:
df:88:91:b1:2a:6c:50:ab:12:ad:55:7b:15:a5:ed:
e2:e5:82:93:7e:7e:63:63:c1:07:3a:12:98:fc:2d:
d7:fa:04:22:44:b5:14:7e:0f:1b:47:d2:1a:8a:ee:
da:97:e2:0d:02:9a:57:fe:f6:a8:ae:c2:62:76:db:
fe:30:e6:af:ac:a9:86:57:f4:80:4c:ee:4a:42:03:
fb:aa:5c:4e:92:22:e0:2b:7b:b7:82:ae:5e:f5:d9:
56:75:8c:d0:77:5d:79:25:df:a5:43:60:8b:ce:49:
04:b0:db:eb:e9:01:b2:d5:e2:77:69:0f:08:c8:66:
10:18:b4:be:61:c3:2d:9e:b2:2c:42:da:5b:a1:db:
5b:40:f3:d1:34:6f:e7:ed:6a:3b:dc:1c:1d:f2:23:
b1:55:3a:c8:d4:5b:97:06:5d:14:51:9f:d5:52:7c:
f1:8d:99:2d:49:6e:2b:ca:81:e0:34:26:9d:e8:00:
ba:76:4c:5d:30:9c:82:08:ab:d4:1d:11:d9:77:85:
df:de:c8:92:ee:d3:a8:f5:46:c5:e4:c2:41:37:25:
93:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:49:85:23:36:C1:77:11:14:C5:BE:65:DB:8C:1D:9C:AA:36:40:07
X509v3 Authority Key Identifier:
keyid:D4:60:6A:E6:F1:88:38:E2:25:7D:55:AB:B5:00:63:6F:50:92:36:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-pp.com/repo/GOOFL/0/D4606AE6F18838E2257D55ABB500636F509236E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7c9b1947-b813-43b3-9152-c4ccbff1cde7/86de965d710aeee198142f460f82d31bc5a8aae2b2f48e0c5d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-pp.com/repo/GOOFL/0/323630323a663833643a63303a3a2f34332d3433203d3e203133353237.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:f83d:c0::/43
Signature Algorithm: sha256WithRSAEncryption
c4:81:36:8c:32:7a:c7:c2:07:df:9e:50:8b:1d:b2:7c:6b:ca:
61:c1:42:f3:54:f5:a7:0a:97:52:8c:2a:6b:f8:06:ae:c4:d3:
ae:06:34:58:2d:24:6e:d6:20:66:b9:1d:b0:43:86:b8:15:16:
4b:93:c0:ee:01:43:e5:37:38:2f:ba:bd:3d:b8:81:7b:a7:96:
41:46:a5:55:f0:64:9e:4f:21:1b:0a:99:1a:fc:27:99:3e:ce:
d6:95:d0:d9:31:c8:70:e9:e4:75:96:c0:fe:9e:d9:ab:49:77:
a3:3f:e7:4a:a5:a7:7a:64:70:76:15:31:c1:c1:6a:e6:69:4a:
11:0c:df:f9:28:10:63:8a:8c:5d:84:e5:40:51:ee:d1:8e:83:
ee:a1:b5:7e:2e:27:d8:2c:d7:b5:f0:08:5f:ed:04:7b:37:e8:
ce:f2:91:4e:08:2d:88:58:6b:df:52:1e:cd:1e:82:7e:fc:0d:
c8:69:b5:0a:82:b6:d2:55:26:f6:69:48:89:7a:4c:95:a9:76:
ca:02:a9:e1:35:92:05:9d:5f:d7:8a:62:57:7b:55:f8:27:51:
31:96:09:67:a8:2d:77:85:45:d4:95:e9:55:5f:51:77:bf:29:
d3:93:73:3d:ff:1f:7c:36:52:bc:ab:fa:64:fe:39:eb:3f:28:
18:6a:8c:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 03:58:42 2025 by rpki-client