Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/0/323630323a663738613a33333a3a2f34382d3438203d3e20343031353037.roa
File: 323630323a663738613a33333a3a2f34382d3438203d3e20343031353037.roa (raw, json)
Hash identifier: 0ijK/ef2Y35/lJnwvvsMctIQwPcNxQL1ffaZBtVWUO8=
Subject key identifier: 21:0A:85:79:79:CA:9C:7D:E4:9E:D2:E2:4C:37:9A:C8:EE:92:C2:30
Certificate issuer: /CN=506be15e199605e756028137092036298a746bcdfe24227e72
Certificate serial: 0710D7EFF4C82230DA89EB19DEFD3AAFF5C83566
Authority key identifier: 15:E0:24:37:1A:83:5B:B0:0E:AB:BA:FB:44:F6:8F:0F:8A:EB:F8:F7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f914ac1a-b017-4cf4-9c3d-349dd19000d3/506be15e199605e756028137092036298a746bcdfe24227e72.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/0/323630323a663738613a33333a3a2f34382d3438203d3e20343031353037.roa
Signing time: Thu 19 Dec 2024 14:17:00 +0000
ROA not before: Thu 19 Dec 2024 14:12:00 +0000
ROA not after: Thu 18 Dec 2025 14:17:00 +0000
asID: 401507
IP address blocks: 2602:f78a:33::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 01 Feb 2025 22:06:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:10:d7:ef:f4:c8:22:30:da:89:eb:19:de:fd:3a:af:f5:c8:35:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=506be15e199605e756028137092036298a746bcdfe24227e72
Validity
Not Before: Dec 19 14:12:00 2024 GMT
Not After : Dec 18 14:17:00 2025 GMT
Subject: CN=210A857979CA9C7DE49ED2E24C379AC8EE92C230
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:81:16:09:ff:7c:b6:17:5a:c4:12:f2:b3:cb:
75:95:2b:1b:05:b3:9f:56:91:bc:68:b3:08:73:c4:
a4:7d:81:75:d1:ff:0a:d0:f1:20:e0:e2:0f:28:23:
f4:66:59:1c:c8:13:13:04:5b:59:6d:b0:c7:f9:6f:
87:3d:ac:73:4d:e0:4c:e0:40:76:a0:a1:4a:ce:5a:
74:38:fb:aa:8c:a2:c7:8a:5b:17:87:b2:a5:c4:9b:
07:30:21:89:07:58:36:26:ad:9c:4e:4e:01:ea:ff:
4c:4f:96:e3:13:c8:8b:d2:60:2f:55:8a:c7:8c:ff:
fd:2d:c5:65:f0:e0:1f:6b:6f:e9:de:05:13:19:5a:
67:9e:c4:a0:86:b6:eb:a1:50:50:00:66:c6:05:83:
68:ac:26:2c:81:f4:72:a7:13:5a:df:a1:4f:ca:5f:
0e:e1:65:23:be:da:d9:81:24:be:73:d0:2e:6f:01:
e0:ed:8c:ee:a1:0d:5f:83:0b:ba:09:1e:26:bd:85:
c5:a2:bc:ab:b5:20:31:87:c7:33:9f:62:d6:0a:85:
54:ce:b6:29:9d:46:31:37:b9:92:ac:79:57:d2:9f:
ef:ed:e3:f7:95:2c:63:16:ce:22:08:36:28:9f:a4:
ef:a4:45:02:81:f3:0c:39:d5:75:e8:a6:77:4e:17:
cc:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:0A:85:79:79:CA:9C:7D:E4:9E:D2:E2:4C:37:9A:C8:EE:92:C2:30
X509v3 Authority Key Identifier:
keyid:15:E0:24:37:1A:83:5B:B0:0E:AB:BA:FB:44:F6:8F:0F:8A:EB:F8:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/0/15E024371A835BB00EABBAFB44F68F0F8AEBF8F7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f914ac1a-b017-4cf4-9c3d-349dd19000d3/506be15e199605e756028137092036298a746bcdfe24227e72.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/0/323630323a663738613a33333a3a2f34382d3438203d3e20343031353037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:f78a:33::/48
Signature Algorithm: sha256WithRSAEncryption
09:57:aa:43:ac:9c:22:63:bd:ed:9b:a3:67:54:8d:57:db:49:
5f:5b:52:7f:32:7f:69:12:6e:f6:07:5f:df:95:43:61:f9:11:
e5:3a:4e:00:9b:ee:09:b4:cb:49:b6:b9:93:1d:48:bf:f3:1a:
c1:2a:ee:39:35:ec:03:12:c3:d6:27:96:e0:31:45:03:b3:9e:
f3:bc:44:96:cf:b8:e5:fb:12:53:49:cd:5c:36:89:e6:4d:01:
04:8f:62:9c:bc:a9:2d:9d:58:f4:0e:c7:11:3f:df:23:db:aa:
d6:3e:42:0d:de:57:04:66:03:d0:9d:7d:2f:e8:a7:e5:df:44:
2f:15:c9:c8:c4:57:44:15:a1:02:5a:13:3d:e7:00:71:09:0e:
71:59:e0:8e:ae:5d:9a:05:c0:bc:cd:cc:6e:55:9d:80:49:ca:
c6:fe:23:e8:aa:4c:cf:e6:62:ab:66:62:27:de:fd:03:fe:e3:
69:64:d0:a8:9b:36:4a:89:c2:3b:d7:fe:b8:3c:03:56:f8:83:
8b:ef:12:b2:36:bc:a9:3b:60:51:9d:23:33:8c:41:90:00:1e:
da:61:9d:8f:d7:fb:5d:f1:69:db:71:dc:5e:77:1d:3e:ec:86:
40:45:e9:dc:3f:ba:19:e7:78:6c:c6:4f:d5:d7:67:f8:eb:0e:
8c:fa:bc:f2
-----BEGIN CERTIFICATE-----
MIIFuzCCBKOgAwIBAgIUBxDX7/TIIjDaiesZ3v06r/XINWYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTA2YmUxNWUxOTk2MDVlNzU2MDI4MTM3MDkyMDM2Mjk4
YTc0NmJjZGZlMjQyMjdlNzIwHhcNMjQxMjE5MTQxMjAwWhcNMjUxMjE4MTQxNzAw
WjAzMTEwLwYDVQQDEygyMTBBODU3OTc5Q0E5QzdERTQ5RUQyRTI0QzM3OUFDOEVF
OTJDMjMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2oEWCf98thda
xBLys8t1lSsbBbOfVpG8aLMIc8SkfYF10f8K0PEg4OIPKCP0ZlkcyBMTBFtZbbDH
+W+HPaxzTeBM4EB2oKFKzlp0OPuqjKLHilsXh7KlxJsHMCGJB1g2Jq2cTk4B6v9M
T5bjE8iL0mAvVYrHjP/9LcVl8OAfa2/p3gUTGVpnnsSghrbroVBQAGbGBYNorCYs
gfRypxNa36FPyl8O4WUjvtrZgSS+c9AubwHg7YzuoQ1fgwu6CR4mvYXForyrtSAx
h8czn2LWCoVUzrYpnUYxN7mSrHlX0p/v7eP3lSxjFs4iCDYon6TvpEUCgfMMOdV1
6KZ3ThfMHQIDAQABo4ICuzCCArcwHQYDVR0OBBYEFCEKhXl5ypx95J7S4kw3msju
ksIwMB8GA1UdIwQYMBaAFBXgJDcag1uwDqu6+0T2jw+K6/j3MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmOTJlZTRkODQwMTkzZGY0NWEwZWE2Njg3LzAv
MTVFMDI0MzcxQTgzNUJCMDBFQUJCQUZCNDRGNjhGMEY4QUVCRjhGNy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNjlmZDAxNTYtYmIxZi00OGI2LWJmMzItYzk0OTIy
ODZmMTk1L2Y5MTRhYzFhLWIwMTctNGNmNC05YzNkLTM0OWRkMTkwMDBkMy81MDZi
ZTE1ZTE5OTYwNWU3NTYwMjgxMzcwOTIwMzYyOThhNzQ2YmNkZmUyNDIyN2U3Mi5j
ZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjkyZWU0ZDg0MDE5M2Rm
NDVhMGVhNjY4Ny8wLzMyMzYzMDMyM2E2NjM3Mzg2MTNhMzMzMzNhM2EyZjM0Mzgy
ZDM0MzgyMDNkM2UyMDM0MzAzMTM1MzAzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACYC94oAMzANBgkq
hkiG9w0BAQsFAAOCAQEACVeqQ6ycImO97ZujZ1SNV9tJX1tSfzJ/aRJu9gdf35VD
YfkR5TpOAJvuCbTLSba5kx1Iv/MawSruOTXsAxLD1ieW4DFFA7Oe87xEls+45fsS
U0nNXDaJ5k0BBI9inLypLZ1Y9A7HET/fI9uq1j5CDd5XBGYD0J19L+in5d9ELxXJ
yMRXRBWhAloTPecAcQkOcVngjq5dmgXAvM3MblWdgEnKxv4j6KpMz+Ziq2ZiJ979
A/7jaWTQqJs2SonCO9f+uDwDVviDi+8Ssja8qTtgUZ0jM4xBkAAe2mGdj9f7XfFp
23HcXncdPuyGQEXp3D+6Ged4bMZP1ddn+OsOjPq88g==
-----END CERTIFICATE-----
Generated at Wed Feb 5 07:50:44 2025 by rpki-client