Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/0/323630323a663738613a34333a3a2f34382d3438203d3e203136393039.roa
File: 323630323a663738613a34333a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: qW6nfTRR7db9jw/4Zo2QI/2GEmZi79VLnqKwul2BRc4=
Subject key identifier: AE:84:92:A6:10:17:1E:6E:04:9D:1A:12:76:EB:7A:5C:60:3B:37:BC
Certificate issuer: /CN=506be15e199605e756028137092036298a746bcdfe24227e72
Certificate serial: 6B475AC956317A1F346E0A703ED1C7E29F89F35C
Authority key identifier: 15:E0:24:37:1A:83:5B:B0:0E:AB:BA:FB:44:F6:8F:0F:8A:EB:F8:F7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f914ac1a-b017-4cf4-9c3d-349dd19000d3/506be15e199605e756028137092036298a746bcdfe24227e72.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/0/323630323a663738613a34333a3a2f34382d3438203d3e203136393039.roa
Signing time: Thu 19 Dec 2024 14:16:00 +0000
ROA not before: Thu 19 Dec 2024 14:11:00 +0000
ROA not after: Thu 18 Dec 2025 14:16:00 +0000
asID: 16909
IP address blocks: 2602:f78a:43::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 01 Feb 2025 22:05:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:47:5a:c9:56:31:7a:1f:34:6e:0a:70:3e:d1:c7:e2:9f:89:f3:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=506be15e199605e756028137092036298a746bcdfe24227e72
Validity
Not Before: Dec 19 14:11:00 2024 GMT
Not After : Dec 18 14:16:00 2025 GMT
Subject: CN=AE8492A610171E6E049D1A1276EB7A5C603B37BC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:fd:fc:75:e2:e1:90:55:2d:cc:30:8c:84:cb:
0d:f0:94:48:72:a5:fa:da:10:45:f7:4f:f3:90:af:
1c:f6:43:c7:9c:a1:36:3e:fb:59:67:00:1b:ac:b0:
e7:cc:5f:e6:c2:9c:2f:3a:a9:dd:a5:e8:9d:32:ea:
e6:5d:84:65:14:44:c9:e8:71:d4:6f:db:54:11:9d:
ce:77:d6:58:1d:29:58:24:12:c7:78:09:2c:6b:be:
92:82:f7:c6:ee:9a:19:9b:06:39:a8:97:75:ba:71:
83:c6:02:ce:2d:85:df:dc:b4:86:50:c7:f4:f4:c3:
6a:ec:b8:06:a0:64:41:82:ad:0e:a8:30:f7:b2:d4:
3c:07:8c:27:e9:59:7c:26:eb:89:a9:65:00:1a:3f:
ba:8c:b8:5c:74:c5:0d:9e:65:a5:e7:2d:3d:ee:eb:
28:14:15:8e:1e:5d:c8:c6:5f:b4:e6:64:cc:10:94:
0e:ba:a2:0b:1f:be:ea:d7:b6:52:ec:8d:71:4a:45:
08:d3:b5:8e:0e:ee:4c:1d:86:32:92:eb:73:c7:d0:
1c:f6:2f:e5:40:18:6b:6d:d8:f1:f5:21:4c:9d:c2:
d7:09:c0:86:b2:bd:08:ea:2a:df:78:41:8c:bb:ea:
f6:59:bd:87:52:a2:d7:1e:54:c4:d2:3e:db:e5:46:
68:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:84:92:A6:10:17:1E:6E:04:9D:1A:12:76:EB:7A:5C:60:3B:37:BC
X509v3 Authority Key Identifier:
keyid:15:E0:24:37:1A:83:5B:B0:0E:AB:BA:FB:44:F6:8F:0F:8A:EB:F8:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/0/15E024371A835BB00EABBAFB44F68F0F8AEBF8F7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f914ac1a-b017-4cf4-9c3d-349dd19000d3/506be15e199605e756028137092036298a746bcdfe24227e72.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/0/323630323a663738613a34333a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:f78a:43::/48
Signature Algorithm: sha256WithRSAEncryption
20:45:5a:4a:83:5e:e5:36:5d:cc:91:1b:7d:80:c5:53:58:3b:
7f:9b:a7:58:61:57:92:4f:39:16:54:ac:3e:38:77:8a:6e:01:
0e:3d:13:e7:44:71:ea:14:2a:87:39:2f:c8:30:ad:02:70:c8:
4f:08:00:48:d5:c8:cd:80:21:8a:02:ce:cb:1f:3d:78:d7:4c:
c0:39:ad:4f:7b:48:82:17:73:6f:93:27:f9:ad:85:65:f7:2b:
c0:6f:b4:40:4b:8c:f7:a5:fd:e0:c5:91:f0:62:6c:06:15:d7:
e6:79:98:1b:ce:fb:ed:a5:e1:30:75:23:18:40:f0:a6:95:19:
f3:1f:be:e2:d7:21:bb:74:c1:1e:63:d9:89:94:17:44:7e:20:
37:ee:52:d1:01:1a:b1:de:49:98:b2:d5:ae:7b:79:69:1d:a7:
b4:a5:9a:6a:89:78:3c:a2:9f:64:ed:7c:cc:de:9d:c9:ad:d6:
70:f2:99:8e:51:ca:cc:40:09:5c:34:e6:c5:c4:97:a3:c1:92:
c1:03:09:87:3f:58:00:53:d6:53:12:0e:33:d3:10:d1:54:b0:
9f:c8:01:52:ec:f1:ed:03:0f:74:dc:c3:21:dc:79:d8:2b:5d:
00:37:84:cb:e2:08:ee:d6:61:02:cb:71:47:41:9a:d5:22:b5:
a5:0e:63:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 06:45:50 2025 by rpki-client