Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade91fb43b4019288462c3804e6/0/323630323a663836353a65303a3a2f34342d3438203d3e203531363932.roa
File: 323630323a663836353a65303a3a2f34342d3438203d3e203531363932.roa (raw, json)
Hash identifier: qz7+bUfWeXeX+imKg4HuviYKMaKvC2GQuETHyvAoLE0=
Subject key identifier: D1:35:A6:3D:B9:20:24:57:ED:87:52:D9:36:D2:9E:53:78:DE:2F:A4
Certificate issuer: /CN=e8238ea0d5ed59b84507040b80fb3ba7f9ebbda5fe05af1672
Certificate serial: 6778F691B4B9FA4DC53B00BF177AECB317294007
Authority key identifier: 59:64:34:7C:AF:C9:84:C6:21:12:3C:2F:5E:4F:42:37:3C:60:80:FA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f0cf986a-2ec9-4aa2-9e61-43a0efc4f2ea/e8238ea0d5ed59b84507040b80fb3ba7f9ebbda5fe05af1672.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade91fb43b4019288462c3804e6/0/323630323a663836353a65303a3a2f34342d3438203d3e203531363932.roa
Signing time: Sun 17 Nov 2024 23:25:11 +0000
ROA not before: Sun 17 Nov 2024 23:20:11 +0000
ROA not after: Sun 16 Nov 2025 23:25:11 +0000
asID: 51692
IP address blocks: 2602:f865:e0::/44 maxlen: 48
Validation: Failed, certificate revoked on Sun 16 Feb 2025 01:28:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:78:f6:91:b4:b9:fa:4d:c5:3b:00:bf:17:7a:ec:b3:17:29:40:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8238ea0d5ed59b84507040b80fb3ba7f9ebbda5fe05af1672
Validity
Not Before: Nov 17 23:20:11 2024 GMT
Not After : Nov 16 23:25:11 2025 GMT
Subject: CN=D135A63DB9202457ED8752D936D29E5378DE2FA4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:63:04:a0:f2:e3:54:26:8c:cd:3a:fa:ef:8c:
63:ba:3d:68:6b:0a:ba:44:30:59:64:e5:fc:71:9d:
84:1f:e2:da:15:97:c1:64:7d:71:fb:6c:d0:b2:a4:
e7:5b:01:d0:fe:ab:f4:27:f6:ce:57:e2:f0:4d:76:
a7:7c:d8:1e:3c:9d:0e:85:1f:dc:3e:f7:7a:5f:db:
91:2c:16:7b:85:b9:48:f2:ea:bd:ff:4f:7d:99:61:
25:3a:73:1e:5b:1c:6f:67:75:da:d1:01:75:50:6e:
4e:3b:93:6c:2c:5a:92:90:64:de:e2:78:29:aa:31:
9a:ee:d5:bd:6c:2b:24:56:3d:77:fb:d4:27:e0:89:
08:2c:c5:d7:7f:9a:1a:e5:fa:ff:35:f8:37:92:6a:
09:71:5f:01:22:be:35:b5:c0:78:50:80:d4:ae:27:
37:d4:ca:45:2d:29:5c:eb:15:95:2a:b3:3e:25:fc:
6b:fa:93:c0:02:b4:44:33:cd:77:b2:40:65:e7:b9:
f1:70:6e:f9:b1:e4:3f:2c:4d:c2:c4:81:da:72:0f:
eb:51:a1:01:71:18:59:81:b1:54:72:0f:c2:00:54:
f6:41:8e:c5:7a:a7:de:a7:02:13:f7:e3:41:4d:5f:
a2:c7:62:2b:b4:bc:3f:70:fe:79:77:08:6f:98:47:
2c:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:35:A6:3D:B9:20:24:57:ED:87:52:D9:36:D2:9E:53:78:DE:2F:A4
X509v3 Authority Key Identifier:
keyid:59:64:34:7C:AF:C9:84:C6:21:12:3C:2F:5E:4F:42:37:3C:60:80:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b4019288462c3804e6/0/5964347CAFC984C621123C2F5E4F42373C6080FA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f0cf986a-2ec9-4aa2-9e61-43a0efc4f2ea/e8238ea0d5ed59b84507040b80fb3ba7f9ebbda5fe05af1672.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b4019288462c3804e6/0/323630323a663836353a65303a3a2f34342d3438203d3e203531363932.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:f865:e0::/44
Signature Algorithm: sha256WithRSAEncryption
ca:b9:e4:46:c8:d0:54:43:95:97:e4:37:53:f9:08:62:71:27:
69:2b:c0:cc:e1:4b:26:e1:5f:ed:24:1c:1e:16:62:09:7b:c1:
60:22:45:d3:1d:f0:0c:50:21:dc:bc:fd:c6:49:39:2e:e3:13:
46:8b:6f:71:00:8a:0d:3c:13:ef:93:ef:c0:4c:82:59:f6:f9:
13:58:1c:f4:b1:fa:da:75:ea:1b:72:0c:53:11:63:fa:1d:3b:
f2:6d:37:32:97:50:f5:ae:1e:b5:e7:69:a7:00:b5:99:de:8a:
f3:fe:91:ba:9b:37:10:ec:92:f9:77:a1:cf:34:61:b7:ba:cf:
f1:d9:b9:5a:7a:c0:3d:79:2e:98:aa:3c:4b:06:e9:fd:66:10:
71:01:95:5e:1a:d6:fd:a8:75:34:66:7a:15:07:f1:4b:39:87:
fe:70:69:d4:be:22:bf:62:f0:59:0f:be:a2:19:8e:80:0c:a1:
93:36:7f:75:6d:0c:40:16:f4:d8:68:da:dd:27:10:a7:c8:a7:
ff:11:8a:5a:01:a6:d6:fc:73:00:06:59:45:ba:ae:f8:f1:f9:
1a:dd:ca:15:01:b6:a1:b7:3f:4e:ca:d1:f9:38:9c:a4:23:99:
de:e9:9c:5b:4d:e6:53:a3:3f:c4:fc:32:78:25:c9:24:e3:b2:
39:5c:eb:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:24:53 2025 by rpki-client