Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/10/323630323a3233343a3a2f33322d3438203d3e2037373139.roa
File: 323630323a3233343a3a2f33322d3438203d3e2037373139.roa (raw, json)
Hash identifier: 9wPQ3RN1C6RtH8Jc6TvVQhxALE6tlnpSkUu99DJrpWs=
Subject key identifier: EE:F9:8C:02:AC:91:22:15:5D:9E:54:34:32:A5:84:0A:15:6B:45:71
Certificate issuer: /CN=DAB1C9CA28007DB3E3BF92EF2ECFAB0730D9B228
Certificate serial: 21186A8BF0E8E896033F964DD293CF5CF21606DF
Authority key identifier: DA:B1:C9:CA:28:00:7D:B3:E3:BF:92:EF:2E:CF:AB:07:30:D9:B2:28
Authority info access: rsync://dev.tw/rpki/August/6/DAB1C9CA28007DB3E3BF92EF2ECFAB0730D9B228.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/10/323630323a3233343a3a2f33322d3438203d3e2037373139.roa
Signing time: Thu 20 Jun 2024 05:23:07 +0000
ROA not before: Thu 20 Jun 2024 05:18:07 +0000
ROA not after: Thu 19 Jun 2025 05:23:07 +0000
asID: 7719
IP address blocks: 2602:234::/32 maxlen: 48
Validation: Failed, certificate revoked on Thu 26 Sep 2024 14:20:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:18:6a:8b:f0:e8:e8:96:03:3f:96:4d:d2:93:cf:5c:f2:16:06:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DAB1C9CA28007DB3E3BF92EF2ECFAB0730D9B228
Validity
Not Before: Jun 20 05:18:07 2024 GMT
Not After : Jun 19 05:23:07 2025 GMT
Subject: CN=EEF98C02AC9122155D9E543432A5840A156B4571
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:57:86:d0:d4:d7:cc:9d:18:c8:4b:e3:47:57:
e2:42:72:9f:d9:9c:31:4a:8a:23:b4:1d:70:66:69:
c8:f2:c7:e0:fb:0d:09:f7:73:fc:3e:94:05:16:a8:
39:c8:7a:87:6c:a3:f8:7e:41:da:a6:28:86:33:02:
29:f7:f2:34:75:0a:26:53:75:1b:fc:bd:49:89:dd:
34:ec:e2:5f:0b:24:70:e9:50:0c:e6:05:4c:b4:e4:
82:12:20:90:cb:ee:40:07:6d:34:f8:3d:9d:40:d1:
22:c2:ed:9c:30:83:4e:fc:78:b4:66:43:3a:bb:84:
b7:be:7f:b2:75:10:03:07:50:ff:80:ab:95:63:0a:
b5:a3:cb:e2:41:81:79:d8:ad:02:d2:e7:69:c1:be:
d0:90:4e:03:d5:a7:9d:b0:77:6d:d7:c9:e2:4c:3e:
53:65:31:f6:0d:d6:b0:61:cc:d4:e5:72:01:a0:3f:
93:0a:f1:dc:bb:e4:ad:92:f9:00:56:54:08:47:d3:
5f:bd:63:ef:87:d4:db:df:92:24:0e:8f:ae:26:cb:
55:cb:2a:24:68:16:2d:9c:67:0f:ad:21:2e:b6:0d:
e8:24:24:d0:44:75:26:6d:e4:7b:f6:8e:59:ef:9a:
91:d3:3f:11:bb:d0:9c:9d:91:d0:c7:06:27:8b:a5:
81:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:F9:8C:02:AC:91:22:15:5D:9E:54:34:32:A5:84:0A:15:6B:45:71
X509v3 Authority Key Identifier:
keyid:DA:B1:C9:CA:28:00:7D:B3:E3:BF:92:EF:2E:CF:AB:07:30:D9:B2:28
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/10/DAB1C9CA28007DB3E3BF92EF2ECFAB0730D9B228.crl
Authority Information Access:
CA Issuers - URI:rsync://dev.tw/rpki/August/6/DAB1C9CA28007DB3E3BF92EF2ECFAB0730D9B228.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/10/323630323a3233343a3a2f33322d3438203d3e2037373139.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:234::/32
Signature Algorithm: sha256WithRSAEncryption
c3:42:5d:5f:37:f2:a0:d3:ab:66:d6:17:c7:85:66:2f:57:0d:
ab:f6:9d:da:23:8d:10:76:94:5c:b3:da:f3:ca:80:a0:28:03:
28:7c:68:60:a8:88:79:6a:b8:8e:41:cf:12:31:bb:15:4d:82:
dc:ab:ac:27:9b:b1:15:ed:07:31:83:b6:20:5e:1f:38:28:85:
70:2f:79:e6:22:2c:27:14:ff:df:6a:a3:df:8a:08:f7:15:20:
8f:6c:08:a7:ca:49:c1:2e:13:9c:4d:54:cb:5e:05:60:14:74:
ce:7b:fb:62:34:b1:59:2b:c1:f7:45:74:68:2f:6a:af:f5:3a:
4c:9b:ba:2f:89:50:f9:e3:16:df:68:72:cd:c0:03:1f:c1:a0:
50:a7:cb:38:ac:ea:6b:2b:20:64:75:39:c4:a6:75:02:d5:14:
3e:07:94:4e:8e:7f:d9:9a:06:4d:67:d0:e7:88:d8:1c:f5:cd:
95:97:e9:a0:e8:97:d0:85:05:4c:6b:80:60:d5:2d:c0:18:be:
7c:71:68:06:ca:65:1a:f7:3e:7e:6f:4d:02:7a:11:8a:3e:56:
50:83:18:8a:44:02:25:4a:74:09:17:d6:5f:61:e1:0a:1a:d2:
ee:fc:75:5b:aa:d5:f2:46:0f:1e:d8:3a:e3:0c:55:4f:bf:5d:
d5:27:8e:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 26 16:48:09 2024 by rpki-client on console-ams.rpki-client.org