Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/323630323a666139623a3a2f34382d3438203d3e203534323138.roa
File: 323630323a666139623a3a2f34382d3438203d3e203534323138.roa (raw, json)
Hash identifier: T+v8GyVA/E8JEDcjp34BWrsnj4qPIcRximcE5LknSIU=
Subject key identifier: A3:4E:98:EE:C8:37:29:79:F0:FC:5F:24:3C:60:83:19:B8:F6:22:C9
Certificate issuer: /CN=724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805
Certificate serial: 53F6E7CAB9560173477D38C075F4DD1B359710EC
Authority key identifier: D0:E6:C7:6B:AD:EC:A5:CB:DA:92:C9:18:B9:7C:7F:45:99:EF:B6:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/323630323a666139623a3a2f34382d3438203d3e203534323138.roa
Signing time: Mon 26 Feb 2024 12:08:49 +0000
ROA not before: Mon 26 Feb 2024 12:03:49 +0000
ROA not after: Mon 24 Feb 2025 12:08:49 +0000
asID: 54218
IP address blocks: 2602:fa9b::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 26 Mar 2024 19:25:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:f6:e7:ca:b9:56:01:73:47:7d:38:c0:75:f4:dd:1b:35:97:10:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805
Validity
Not Before: Feb 26 12:03:49 2024 GMT
Not After : Feb 24 12:08:49 2025 GMT
Subject: CN=A34E98EEC8372979F0FC5F243C608319B8F622C9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:45:06:a3:4b:a9:4f:af:24:d9:a6:84:0f:19:
30:ca:8e:3d:f8:92:c3:d0:0b:bc:86:22:0e:64:50:
43:94:3b:bd:cf:58:b0:82:14:46:27:d5:2b:1b:8e:
22:a3:f5:ac:39:94:06:1f:15:b5:43:cc:5d:88:f7:
c4:47:29:9c:44:36:fd:cd:d3:d2:de:4c:5f:26:23:
95:4e:b7:7d:63:4d:f3:e3:fe:fd:f9:c6:c5:c2:18:
65:fe:75:ed:1b:d7:f7:40:2d:7c:31:25:a0:5c:9c:
7c:f3:61:33:88:23:77:f0:5e:9e:73:da:9d:bb:83:
36:a0:7b:20:6e:27:de:b1:1c:3c:95:bf:5f:9a:6d:
c0:d6:cb:74:d7:1c:ef:88:0c:1c:fd:63:7e:b1:03:
eb:d2:92:f1:0f:3c:9c:c4:ba:ab:39:c0:05:77:88:
54:ef:67:86:46:97:33:51:24:43:f2:89:09:c8:77:
60:11:b2:ad:c3:26:6f:cb:49:a1:c9:da:05:b2:a7:
e3:c8:1b:9d:84:c2:52:d0:56:8d:90:3b:ba:9b:8d:
0d:7f:af:82:00:c2:67:d5:dc:40:03:d8:f6:b0:52:
d2:bd:cf:bb:1c:ac:d3:56:63:3b:5b:80:84:20:7f:
fb:ef:01:e2:19:16:6f:e2:96:79:bc:0d:de:da:c9:
d3:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:4E:98:EE:C8:37:29:79:F0:FC:5F:24:3C:60:83:19:B8:F6:22:C9
X509v3 Authority Key Identifier:
keyid:D0:E6:C7:6B:AD:EC:A5:CB:DA:92:C9:18:B9:7C:7F:45:99:EF:B6:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/D0E6C76BADECA5CBDA92C918B97C7F4599EFB6CF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/323630323a666139623a3a2f34382d3438203d3e203534323138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:fa9b::/48
Signature Algorithm: sha256WithRSAEncryption
df:e3:90:d7:ed:ba:18:4b:92:aa:1f:94:e6:e2:e0:62:b4:c4:
e1:7e:c7:99:a8:2d:45:dc:6e:77:a3:ae:33:d4:32:31:12:a1:
de:b3:41:e9:8f:53:db:9a:ab:4c:37:03:bb:a4:5f:37:80:8c:
ff:b4:97:08:05:55:25:6f:40:8c:62:9e:97:f9:d0:93:d3:d7:
91:8d:6d:44:51:c3:20:9e:66:bc:41:25:a6:ff:41:a0:5f:8d:
3f:a2:96:04:9b:82:e7:72:37:18:18:50:ad:7e:87:f4:e7:47:
09:a9:82:35:bb:4b:49:46:01:39:85:db:19:b8:d0:a1:6c:9d:
ea:65:7c:f3:c0:d2:68:03:a3:92:d8:62:0e:12:a7:66:13:5a:
f0:0a:85:67:ce:3b:1a:0c:cd:a3:20:ca:c9:e2:b9:d8:e2:b3:
8f:2e:ae:2b:04:92:a7:8b:d5:30:f3:c0:10:46:ec:d1:f4:d5:
7f:fa:5c:9e:a2:b2:dc:b3:63:36:37:25:e3:6d:5e:39:6c:5a:
87:98:29:97:39:c2:3f:6e:17:f7:97:99:87:4d:18:ad:82:8c:
f1:f6:d9:7b:2e:aa:75:82:66:f8:6d:5c:f3:a8:0b:9a:46:3b:
07:26:af:71:81:68:0d:9f:a8:6f:5f:a5:c3:43:08:0a:c8:f1:
10:da:f6:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:26:19 2025 by rpki-client