Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/0/323630323a663738613a33313a3a2f34382d3438203d3e20343031353037.roa
File: 323630323a663738613a33313a3a2f34382d3438203d3e20343031353037.roa (raw, json)
Hash identifier: fJAn4TOj0x19MyMGrv3DNuKQSZ2YikgHd+6124sFKEA=
Subject key identifier: 87:DF:04:30:A7:3C:4D:3B:CC:BD:D9:01:34:2A:EA:1C:8B:F1:0C:4D
Certificate issuer: /CN=506be15e199605e756028137092036298a746bcdfe24227e72
Certificate serial: 73D2FD78122FB3D271B4A0D0BA6AFFCB30B275DC
Authority key identifier: 15:E0:24:37:1A:83:5B:B0:0E:AB:BA:FB:44:F6:8F:0F:8A:EB:F8:F7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f914ac1a-b017-4cf4-9c3d-349dd19000d3/506be15e199605e756028137092036298a746bcdfe24227e72.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/0/323630323a663738613a33313a3a2f34382d3438203d3e20343031353037.roa
Signing time: Thu 19 Dec 2024 14:16:50 +0000
ROA not before: Thu 19 Dec 2024 14:11:50 +0000
ROA not after: Thu 18 Dec 2025 14:16:50 +0000
asID: 401507
IP address blocks: 2602:f78a:31::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 01 Feb 2025 22:06:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:d2:fd:78:12:2f:b3:d2:71:b4:a0:d0:ba:6a:ff:cb:30:b2:75:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=506be15e199605e756028137092036298a746bcdfe24227e72
Validity
Not Before: Dec 19 14:11:50 2024 GMT
Not After : Dec 18 14:16:50 2025 GMT
Subject: CN=87DF0430A73C4D3BCCBDD901342AEA1C8BF10C4D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:c1:73:27:5d:a8:0c:86:ca:65:e8:0b:28:ec:
78:78:e1:1a:08:62:49:07:e5:f1:f2:7b:1b:d4:29:
6a:ee:ba:a1:02:c6:5b:dd:dc:c8:dd:cc:f7:a6:82:
95:69:76:02:49:44:23:62:47:1b:2f:29:db:c6:76:
b7:fb:63:6e:a8:c8:79:8a:fd:95:ae:27:ec:ad:b8:
50:89:89:ce:20:89:43:84:aa:f9:39:49:ec:f3:3b:
d8:d1:3f:9d:2b:e6:09:be:e7:90:12:80:af:bc:ad:
98:fa:44:fa:a2:f5:d6:5e:ad:8a:55:fe:9d:be:ab:
b6:13:55:42:51:72:16:ea:4f:5f:d2:b5:05:0d:ec:
6e:0e:2a:b4:6a:1f:fb:64:c2:64:cf:de:65:f6:1c:
72:18:56:a2:43:a5:f9:bd:f9:fa:4e:44:af:05:0d:
1f:27:d5:c8:4e:95:94:b7:c9:2d:58:80:93:87:63:
02:6f:49:ba:b7:81:bd:be:a9:b6:99:cb:c9:ac:f3:
17:5b:ce:c4:a0:2a:68:77:d0:2e:34:57:29:0b:32:
eb:b8:55:d2:e2:9f:6a:54:88:9c:67:99:48:37:39:
be:51:c4:e6:11:06:ab:1d:14:47:f0:c9:e9:2c:ec:
d4:0d:82:e6:dd:49:51:0c:d7:62:f4:44:47:bb:ed:
f7:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:DF:04:30:A7:3C:4D:3B:CC:BD:D9:01:34:2A:EA:1C:8B:F1:0C:4D
X509v3 Authority Key Identifier:
keyid:15:E0:24:37:1A:83:5B:B0:0E:AB:BA:FB:44:F6:8F:0F:8A:EB:F8:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/0/15E024371A835BB00EABBAFB44F68F0F8AEBF8F7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f914ac1a-b017-4cf4-9c3d-349dd19000d3/506be15e199605e756028137092036298a746bcdfe24227e72.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/0/323630323a663738613a33313a3a2f34382d3438203d3e20343031353037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:f78a:31::/48
Signature Algorithm: sha256WithRSAEncryption
24:a1:d0:a4:b4:d3:d9:73:44:56:4e:9a:a4:72:3c:4f:19:b2:
af:3e:64:5a:b2:05:df:44:fc:ed:87:c1:3a:cb:18:c7:bf:72:
6c:2f:18:a6:b8:bc:aa:f4:d0:cd:95:b6:74:1a:46:f8:8e:c0:
87:16:fd:08:c8:33:c3:09:70:47:99:95:79:33:ed:0c:00:ca:
3f:c9:82:3f:de:e8:21:c1:3e:69:f2:0a:80:39:86:81:53:3f:
48:18:b4:8c:aa:3e:7d:8d:ef:a5:17:a7:36:f1:19:63:43:c9:
9b:20:0c:0a:4f:7d:44:c0:05:4e:2c:eb:cc:47:e7:a2:e0:35:
5f:66:64:25:fb:69:e6:97:96:66:0a:d0:f9:56:20:d5:7b:e5:
98:6c:45:82:b5:be:e2:ed:b3:b7:80:0d:cb:12:48:b1:2b:19:
2d:ef:d1:3f:2c:f9:60:9f:6f:c2:e7:0d:85:c3:63:ca:c6:d2:
65:fd:48:32:6a:83:6e:aa:72:12:04:74:aa:d3:c3:dc:46:74:
49:26:a2:8c:1b:c0:c3:7b:52:f2:9f:57:48:f2:2e:aa:5b:a6:
92:d6:c6:e5:41:8a:75:0c:0a:bc:6c:08:8d:75:08:f4:60:c0:
f9:a0:d6:4d:75:a3:18:ea:aa:32:32:1a:93:4c:ba:b1:40:c1:
ad:3b:9d:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 07:39:57 2025 by rpki-client