Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/0/323630323a663738613a36313a3a2f34382d3438203d3e203136393039.roa
File: 323630323a663738613a36313a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: pzUhHvU+/ajjYOVJGuSgZwMS2wdT5ha0sSueSqy5rTw=
Subject key identifier: 4D:EA:35:9C:81:2D:E4:F7:54:EA:7D:84:FA:81:5D:54:79:3D:7D:74
Certificate issuer: /CN=506be15e199605e756028137092036298a746bcdfe24227e72
Certificate serial: 71B44553E2CB02D74899C9F36FBCCD238BCA309E
Authority key identifier: 15:E0:24:37:1A:83:5B:B0:0E:AB:BA:FB:44:F6:8F:0F:8A:EB:F8:F7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f914ac1a-b017-4cf4-9c3d-349dd19000d3/506be15e199605e756028137092036298a746bcdfe24227e72.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/0/323630323a663738613a36313a3a2f34382d3438203d3e203136393039.roa
Signing time: Thu 19 Dec 2024 14:16:05 +0000
ROA not before: Thu 19 Dec 2024 14:11:05 +0000
ROA not after: Thu 18 Dec 2025 14:16:05 +0000
asID: 16909
IP address blocks: 2602:f78a:61::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 01 Feb 2025 22:05:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:b4:45:53:e2:cb:02:d7:48:99:c9:f3:6f:bc:cd:23:8b:ca:30:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=506be15e199605e756028137092036298a746bcdfe24227e72
Validity
Not Before: Dec 19 14:11:05 2024 GMT
Not After : Dec 18 14:16:05 2025 GMT
Subject: CN=4DEA359C812DE4F754EA7D84FA815D54793D7D74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:87:b8:20:72:0b:40:4a:14:b6:bc:37:ed:e5:
08:95:9b:73:ca:4d:ed:96:5f:18:6c:9e:60:9b:16:
c4:b4:24:a9:5a:95:20:56:07:bc:67:bd:4b:31:2d:
73:47:a0:e0:67:07:71:17:c4:6e:02:0d:f9:32:21:
1b:61:3d:90:cb:5e:2c:05:00:27:ce:72:0f:8f:1d:
25:98:c9:f0:1b:f2:d8:b9:19:7f:a9:34:d1:cb:e2:
37:11:ed:05:11:a6:96:d0:0c:d3:3d:d5:20:57:bb:
c9:61:79:ee:40:95:f3:3d:ad:5e:ec:1b:95:64:a1:
fb:a5:a8:85:fc:3f:a7:6d:e0:d6:f8:ca:e0:51:b7:
0c:2e:a6:a7:a6:e0:ea:56:62:07:76:2e:cd:d8:db:
33:4d:d2:5b:39:30:8b:59:01:b9:e9:74:7b:b3:b2:
28:67:59:6f:1d:59:b1:49:a7:9a:b6:6b:5e:a1:22:
cd:9a:60:20:ee:26:e1:e0:ef:19:73:f4:3d:60:e9:
65:25:a0:f6:6c:02:5e:d2:98:aa:e2:44:11:e7:6a:
50:62:cc:b1:20:d1:1a:45:78:4a:00:40:77:d0:82:
e3:1c:36:7b:47:fa:37:84:fc:24:68:5b:b2:db:84:
b7:2d:43:24:10:87:85:9e:fb:72:f6:60:f1:89:ad:
50:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:EA:35:9C:81:2D:E4:F7:54:EA:7D:84:FA:81:5D:54:79:3D:7D:74
X509v3 Authority Key Identifier:
keyid:15:E0:24:37:1A:83:5B:B0:0E:AB:BA:FB:44:F6:8F:0F:8A:EB:F8:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/0/15E024371A835BB00EABBAFB44F68F0F8AEBF8F7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f914ac1a-b017-4cf4-9c3d-349dd19000d3/506be15e199605e756028137092036298a746bcdfe24227e72.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/0/323630323a663738613a36313a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:f78a:61::/48
Signature Algorithm: sha256WithRSAEncryption
74:70:8d:92:d1:24:52:91:c1:92:a3:00:94:74:08:05:a3:8f:
58:3b:fd:c5:05:92:59:8e:18:0e:4f:c8:0f:cd:49:5b:95:13:
ba:73:58:76:de:e1:e4:6a:a7:9a:e2:79:f9:83:62:a8:1f:8e:
79:96:3b:28:6c:9f:1c:75:ea:a9:52:c3:0c:57:36:93:37:6c:
9d:c0:3e:3c:60:dd:1f:f3:77:fe:42:70:1b:c4:81:b6:27:2f:
51:f8:8a:94:e1:14:6a:e6:62:77:b3:f0:79:06:32:38:83:98:
d1:f5:ac:ac:d7:ce:61:a0:88:b5:4c:67:b5:95:80:3a:a5:7f:
43:3d:81:24:1a:f3:77:f8:9d:a9:44:69:dd:c5:05:03:ac:6a:
f2:c5:6c:b2:42:38:0a:5c:3d:42:7c:e2:48:f9:a3:c2:85:1d:
66:66:8a:ca:46:45:91:4a:7a:71:73:5d:3b:7f:06:1b:f3:80:
40:2c:e1:f4:7e:17:56:d1:e9:24:6f:2d:7c:bf:90:87:a1:9c:
7d:cb:e9:12:ca:11:e7:0a:c1:bd:c3:64:e0:b8:86:8b:0d:00:
8a:85:71:3c:2c:7f:4e:f0:d7:dc:0c:d9:64:d1:3a:f7:b1:4d:
51:8c:33:57:1f:40:68:97:58:ef:91:fe:55:d0:35:bd:aa:b3:
06:f4:58:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 06:49:30 2025 by rpki-client