Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/0/323630323a663738613a36303a3a2f34382d3438203d3e203136393039.roa
File: 323630323a663738613a36303a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: +vHoYrB7Df+s+P2gkhkyOV9DI8RPCO/1CY5oIDarHtw=
Subject key identifier: 7A:B4:40:BA:9F:C6:B9:FD:60:9D:DE:68:53:21:82:48:1E:CE:D9:7C
Certificate issuer: /CN=506be15e199605e756028137092036298a746bcdfe24227e72
Certificate serial: 5BAB94ABBEC9167434EE814D5C1ECFCA2FEC012F
Authority key identifier: 15:E0:24:37:1A:83:5B:B0:0E:AB:BA:FB:44:F6:8F:0F:8A:EB:F8:F7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f914ac1a-b017-4cf4-9c3d-349dd19000d3/506be15e199605e756028137092036298a746bcdfe24227e72.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/0/323630323a663738613a36303a3a2f34382d3438203d3e203136393039.roa
Signing time: Thu 19 Dec 2024 14:16:02 +0000
ROA not before: Thu 19 Dec 2024 14:11:02 +0000
ROA not after: Thu 18 Dec 2025 14:16:02 +0000
asID: 16909
IP address blocks: 2602:f78a:60::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 01 Feb 2025 22:05:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:ab:94:ab:be:c9:16:74:34:ee:81:4d:5c:1e:cf:ca:2f:ec:01:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=506be15e199605e756028137092036298a746bcdfe24227e72
Validity
Not Before: Dec 19 14:11:02 2024 GMT
Not After : Dec 18 14:16:02 2025 GMT
Subject: CN=7AB440BA9FC6B9FD609DDE68532182481ECED97C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b9:68:02:fa:be:06:64:5b:97:c8:de:e2:c6:
05:67:47:8c:f3:37:b5:31:e3:33:ab:9b:e0:0b:f9:
98:aa:e5:eb:04:47:d0:dc:28:ae:a1:79:ab:8b:fc:
d5:a4:dd:9d:7f:1a:9a:e8:80:d7:83:59:db:bf:42:
4d:6d:15:93:6b:1b:da:8d:bc:38:c4:e3:aa:29:16:
84:64:13:b6:6f:68:ea:bf:20:f2:f7:ce:05:a8:e5:
64:85:59:7e:d6:cf:7a:42:e4:13:fe:66:0f:df:96:
c6:37:e9:30:d8:c0:bf:b0:b8:1c:85:4f:a9:a2:29:
f6:d1:78:6c:e8:c9:21:a2:ed:c7:0f:b6:03:d1:38:
12:c0:e4:7e:29:cb:a9:75:bb:65:cf:8d:58:4f:ff:
e8:38:4f:96:0c:94:6f:08:98:35:3c:dd:2b:f7:1f:
c4:a3:bf:91:b1:4f:88:23:ad:99:c8:67:04:e9:35:
6a:62:c5:a8:f1:ad:f0:97:88:1b:ba:13:81:52:51:
23:4a:0e:f1:ab:74:59:eb:1d:78:d1:8b:d4:5e:20:
b4:02:5e:b8:bd:58:5e:67:ec:11:b4:20:4b:cb:b1:
e9:3e:23:92:b8:37:00:b1:d8:c2:d0:52:a8:46:8a:
32:10:a2:d3:9f:d1:f7:ab:2a:b8:28:f1:30:a7:16:
96:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:B4:40:BA:9F:C6:B9:FD:60:9D:DE:68:53:21:82:48:1E:CE:D9:7C
X509v3 Authority Key Identifier:
keyid:15:E0:24:37:1A:83:5B:B0:0E:AB:BA:FB:44:F6:8F:0F:8A:EB:F8:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/0/15E024371A835BB00EABBAFB44F68F0F8AEBF8F7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f914ac1a-b017-4cf4-9c3d-349dd19000d3/506be15e199605e756028137092036298a746bcdfe24227e72.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/0/323630323a663738613a36303a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:f78a:60::/48
Signature Algorithm: sha256WithRSAEncryption
01:5d:aa:ef:77:c0:57:98:4a:41:d1:5f:d1:c9:b9:d5:03:e6:
23:4a:7a:55:67:ee:81:42:67:fc:ca:a8:45:f8:72:67:39:02:
7c:75:63:d0:f7:58:33:78:6a:c4:b7:c5:26:d2:08:b3:5d:74:
8e:b8:a1:1d:91:d1:0f:45:a7:0f:bb:d8:f5:a1:cc:6d:fb:b6:
c3:2e:29:92:29:e1:c2:f9:92:ce:ca:b9:5e:97:9e:4e:be:f1:
ee:5e:4c:02:04:35:cb:61:e3:4a:3e:06:94:a0:c8:50:93:78:
7a:da:eb:7a:24:5d:c3:a9:77:6e:02:7e:df:38:33:f3:5a:6d:
fd:69:81:7e:c3:af:65:fa:48:f7:06:22:f6:da:85:3a:26:1a:
d6:6c:06:9a:4b:19:82:82:ba:15:6a:28:a3:b4:5b:ff:6e:77:
e3:e5:ae:e0:d4:df:9f:49:b4:d5:68:fb:42:e6:ca:a0:54:8a:
66:6d:af:0c:20:4b:f6:44:f0:27:5a:6c:73:81:77:51:29:b0:
8c:73:f4:04:d5:37:91:85:c5:2e:d8:23:f8:f6:4a:89:3e:5f:
d4:a0:ff:bf:02:45:e5:8a:f2:ae:8f:e2:4e:50:87:a6:79:f1:
98:33:15:24:74:40:39:a2:51:18:f8:0d:74:b7:96:c7:3c:d7:
36:f3:f8:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 06:40:26 2025 by rpki-client