Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/323630323a666134333a38303a3a2f34342d3434203d3e20323030333531.roa
File: 323630323a666134333a38303a3a2f34342d3434203d3e20323030333531.roa (raw, json)
Hash identifier: MZKQb3BjZCdA6f00I3mm681VndoEutkrgPAZZVs3SXY=
Subject key identifier: 2B:F6:BD:BD:3B:DF:99:0B:EB:53:07:D0:50:40:E0:62:86:E5:BF:B0
Certificate issuer: /CN=7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788
Certificate serial: 24CB12A6978CEAE3401B3843D468D2543D26BF5C
Authority key identifier: 04:40:EC:91:AE:04:E8:04:91:BF:66:17:36:09:7F:35:69:C7:DB:1B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/323630323a666134333a38303a3a2f34342d3434203d3e20323030333531.roa
Signing time: Thu 24 Oct 2024 21:03:30 +0000
ROA not before: Thu 24 Oct 2024 20:58:30 +0000
ROA not after: Thu 23 Oct 2025 21:03:30 +0000
asID: 200351
IP address blocks: 2602:fa43:80::/44 maxlen: 44
Validation: Failed, certificate revoked on Fri 20 Dec 2024 00:40:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:cb:12:a6:97:8c:ea:e3:40:1b:38:43:d4:68:d2:54:3d:26:bf:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788
Validity
Not Before: Oct 24 20:58:30 2024 GMT
Not After : Oct 23 21:03:30 2025 GMT
Subject: CN=2BF6BDBD3BDF990BEB5307D05040E06286E5BFB0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:7e:1c:4d:4c:59:81:ce:18:ff:16:7a:ea:e8:
4c:d3:db:97:c3:fb:b8:69:37:90:77:c9:e3:ea:4b:
0c:a3:cb:29:20:e7:f5:33:43:b7:3b:bc:b4:b6:d0:
95:d7:e7:24:34:d6:2a:a4:b7:4f:a0:c4:18:ce:7d:
22:85:34:1b:c3:4c:8b:22:94:c2:e1:7d:14:fb:82:
7b:4f:cb:b7:43:74:14:9e:b0:18:30:87:fc:fc:49:
e3:41:ef:41:8c:16:ec:84:82:0f:82:a5:3c:bf:c0:
84:91:87:aa:5e:7c:70:08:c4:25:78:d5:04:4e:d3:
8f:ae:66:f0:1c:89:be:c0:a5:f7:1b:99:82:ec:c4:
72:31:49:41:61:e0:65:95:bf:4f:6f:af:a5:36:94:
8f:87:ed:e8:05:77:ad:b1:d1:ba:ec:87:53:cd:f4:
84:78:eb:1b:26:b2:bb:b6:42:f6:a8:f0:f1:bf:eb:
62:06:f3:94:30:31:28:92:c0:b5:39:19:d5:ec:b8:
b1:06:c3:59:93:29:1f:04:45:97:15:7e:54:c4:63:
be:72:77:f2:af:c3:f9:46:cf:c5:5d:36:f6:5e:2e:
8c:c4:dc:28:84:5b:e7:af:e2:ca:7c:19:fc:2d:76:
22:24:42:56:8a:ff:10:1d:a7:7c:94:7c:4b:12:67:
3c:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:F6:BD:BD:3B:DF:99:0B:EB:53:07:D0:50:40:E0:62:86:E5:BF:B0
X509v3 Authority Key Identifier:
keyid:04:40:EC:91:AE:04:E8:04:91:BF:66:17:36:09:7F:35:69:C7:DB:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/0440EC91AE04E80491BF661736097F3569C7DB1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/323630323a666134333a38303a3a2f34342d3434203d3e20323030333531.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:fa43:80::/44
Signature Algorithm: sha256WithRSAEncryption
7a:da:80:1d:cf:d2:a0:0b:f7:1f:b0:ec:ba:48:72:3b:b4:33:
49:90:9b:e4:76:af:45:85:a0:cd:e5:b3:a4:2a:a2:f3:ed:2b:
74:91:0c:2c:71:e7:66:76:20:d7:ad:e1:24:6c:f2:72:6f:5a:
78:10:02:02:2a:5d:79:33:a5:d2:b6:69:db:7a:f9:ca:e2:7b:
9c:d7:61:86:a7:a0:d3:69:61:33:46:d5:54:4a:aa:85:99:d1:
1c:f8:84:64:1a:40:e2:d8:bf:37:9c:22:d8:11:8e:11:20:ec:
cd:d4:80:00:ef:b2:34:1f:3e:a6:bd:ad:03:e1:da:46:5b:1c:
a3:79:24:00:84:18:41:e7:a9:bf:f9:53:ae:ca:cc:b8:29:d9:
fb:ea:75:3b:ca:28:7c:1c:fc:fa:a9:9d:ff:80:20:96:fd:09:
d8:c8:fa:20:0d:c2:8d:09:3f:46:68:31:59:4b:bd:61:09:bc:
f1:47:71:ec:6f:8f:0d:5f:75:14:12:6e:c5:55:1a:43:4f:15:
e4:ec:4b:16:ea:5c:18:6e:d7:74:57:06:08:59:d4:83:3f:59:
8b:b5:e1:f3:9d:4b:63:d4:5b:af:83:6c:89:2e:12:e3:fe:81:
01:d6:ac:3f:05:5d:f5:80:61:50:6d:5f:bb:e3:ef:e0:fe:08:
53:51:fb:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 16:01:01 2025 by rpki-client