Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/0/323630323a663738613a35383a3a2f34382d3438203d3e203136393039.roa
File: 323630323a663738613a35383a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: mYh4FSsVHqvGXnLlrMmEix7uSXg9/YBHd/9zZR/kjuY=
Subject key identifier: D6:8F:5D:4B:37:54:D0:90:4C:97:60:C9:E9:AC:A7:4A:07:8C:32:89
Certificate issuer: /CN=506be15e199605e756028137092036298a746bcdfe24227e72
Certificate serial: 682B5FEDA6564680392D85066036F40F53DA0E01
Authority key identifier: 15:E0:24:37:1A:83:5B:B0:0E:AB:BA:FB:44:F6:8F:0F:8A:EB:F8:F7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f914ac1a-b017-4cf4-9c3d-349dd19000d3/506be15e199605e756028137092036298a746bcdfe24227e72.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/0/323630323a663738613a35383a3a2f34382d3438203d3e203136393039.roa
Signing time: Thu 19 Dec 2024 17:22:59 +0000
ROA not before: Thu 19 Dec 2024 17:17:59 +0000
ROA not after: Thu 18 Dec 2025 17:22:59 +0000
asID: 16909
IP address blocks: 2602:f78a:58::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 01 Feb 2025 22:05:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:2b:5f:ed:a6:56:46:80:39:2d:85:06:60:36:f4:0f:53:da:0e:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=506be15e199605e756028137092036298a746bcdfe24227e72
Validity
Not Before: Dec 19 17:17:59 2024 GMT
Not After : Dec 18 17:22:59 2025 GMT
Subject: CN=D68F5D4B3754D0904C9760C9E9ACA74A078C3289
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:f1:64:d1:b5:da:d1:a1:ac:30:f5:6c:1d:2e:
09:fa:1e:fb:41:fe:ce:5b:02:22:6c:43:4a:e6:e6:
11:0d:8c:9c:82:b1:51:41:da:33:0d:6e:9a:f5:e9:
92:3d:90:67:98:7b:8b:04:27:d9:e4:00:2d:03:6a:
80:fb:d4:9b:5c:1a:66:90:45:91:bd:fd:87:df:30:
fc:09:55:96:0a:09:17:14:c2:c4:e0:81:d1:d7:d7:
c2:b6:d5:5d:94:70:92:3b:2f:e6:b8:55:2e:84:fa:
7f:5b:7b:79:1f:94:2a:a5:f2:33:8a:d1:88:58:85:
c7:97:82:cb:d9:06:bb:f6:1a:6c:f1:de:83:a7:2f:
4c:08:94:fa:d4:13:e1:15:a1:cf:83:cc:b6:12:c6:
5c:20:ee:09:6e:99:72:68:b2:c5:1a:e5:6a:f7:9f:
bc:b9:e2:3b:5e:3a:fa:de:42:24:2a:d2:df:ef:97:
d0:89:e6:ff:c7:4d:7c:1e:01:46:6e:5f:f3:21:f9:
da:75:47:2f:95:b7:e9:68:43:a7:1b:6c:f9:6c:ad:
3c:bb:ec:48:02:b8:f6:1e:42:f3:c6:c6:0c:74:34:
00:85:e0:6e:a9:ce:3c:d6:65:c4:1e:09:e0:c7:ec:
e6:8f:9d:8e:e0:14:21:db:84:d4:49:e9:1b:52:be:
f7:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:8F:5D:4B:37:54:D0:90:4C:97:60:C9:E9:AC:A7:4A:07:8C:32:89
X509v3 Authority Key Identifier:
keyid:15:E0:24:37:1A:83:5B:B0:0E:AB:BA:FB:44:F6:8F:0F:8A:EB:F8:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/0/15E024371A835BB00EABBAFB44F68F0F8AEBF8F7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f914ac1a-b017-4cf4-9c3d-349dd19000d3/506be15e199605e756028137092036298a746bcdfe24227e72.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/0/323630323a663738613a35383a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:f78a:58::/48
Signature Algorithm: sha256WithRSAEncryption
07:0b:79:41:52:c6:bf:b1:dc:1d:49:a3:a9:a3:dd:c6:c0:cd:
7a:b1:84:79:c6:22:10:0d:8e:f7:54:a6:8f:ee:ba:c3:36:9c:
55:26:45:4b:36:01:81:88:54:f7:41:2c:73:ab:3f:13:ef:c2:
8c:50:aa:14:e9:ad:91:03:cc:ea:f7:e7:3d:08:d6:2f:0f:f2:
ba:5c:ab:c0:01:e1:7b:d3:45:f7:a9:c2:40:7b:c4:a0:70:b5:
85:d0:25:59:72:c5:44:0b:4c:fe:3d:1c:8a:23:43:c9:20:a9:
52:8c:12:a6:9a:ec:d7:58:e2:35:b7:9d:fc:e7:36:47:51:c7:
6c:ed:d5:c0:de:43:89:38:b3:cf:52:ec:30:82:43:d1:9f:9b:
e5:34:87:5b:ba:02:ad:d1:4f:40:1c:03:91:cd:d3:6e:05:ce:
9a:dc:5c:bd:e4:5b:7d:91:25:68:72:cd:2f:56:60:0e:87:55:
db:17:fd:e0:02:a5:bb:e4:dd:e6:30:18:88:43:cc:9c:e5:96:
99:b5:40:a8:45:20:0b:6f:0d:6e:22:02:1a:ea:fb:3c:07:24:
07:bb:6f:e7:ac:5d:39:29:5d:30:4e:ea:dc:b4:98:de:d4:66:
37:df:a3:6b:32:f8:e0:e3:70:04:d4:27:48:4a:b6:66:da:64:
1d:ff:39:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 06:54:32 2025 by rpki-client