Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/0/323630323a663738613a36323a3a2f34382d3438203d3e203136393039.roa
File: 323630323a663738613a36323a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: HxcoRfRhmvTkyUkihvxcgMsX3zfExCOqSw1HWz//6Ok=
Subject key identifier: 9A:0D:2D:68:5D:AF:87:0E:92:23:0E:B9:7B:A4:09:2E:D8:A9:44:49
Certificate issuer: /CN=506be15e199605e756028137092036298a746bcdfe24227e72
Certificate serial: 352ADB3751343887801246134F77A5F1914FDFDA
Authority key identifier: 15:E0:24:37:1A:83:5B:B0:0E:AB:BA:FB:44:F6:8F:0F:8A:EB:F8:F7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f914ac1a-b017-4cf4-9c3d-349dd19000d3/506be15e199605e756028137092036298a746bcdfe24227e72.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/0/323630323a663738613a36323a3a2f34382d3438203d3e203136393039.roa
Signing time: Thu 19 Dec 2024 14:16:07 +0000
ROA not before: Thu 19 Dec 2024 14:11:07 +0000
ROA not after: Thu 18 Dec 2025 14:16:07 +0000
asID: 16909
IP address blocks: 2602:f78a:62::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 01 Feb 2025 22:05:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:2a:db:37:51:34:38:87:80:12:46:13:4f:77:a5:f1:91:4f:df:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=506be15e199605e756028137092036298a746bcdfe24227e72
Validity
Not Before: Dec 19 14:11:07 2024 GMT
Not After : Dec 18 14:16:07 2025 GMT
Subject: CN=9A0D2D685DAF870E92230EB97BA4092ED8A94449
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b6:8f:ae:0c:6a:73:05:5c:d5:cc:ad:86:de:
f2:4e:e6:7e:e9:a9:ce:ee:07:ba:7f:22:eb:9c:c9:
2c:1c:aa:3e:12:93:f3:7e:a5:85:93:7d:71:5f:2f:
93:23:d0:31:8a:68:ad:45:ab:d5:4c:33:14:2f:89:
7a:79:f0:1f:bf:4d:43:c3:c7:fd:ce:28:8b:d2:d9:
f1:4c:e3:76:2d:68:77:f7:8b:1d:80:31:89:6a:25:
55:47:0f:48:fc:27:b9:15:9b:4a:cf:e2:00:63:a2:
81:ea:e1:13:9c:6d:96:44:91:e2:5c:12:ac:b0:3c:
63:8a:63:91:b8:0b:77:f2:f3:76:e3:18:70:19:56:
f9:f3:0a:21:57:e5:30:1c:3b:6e:fe:a8:97:e2:4c:
4d:00:b4:f6:7d:67:62:c6:a2:ec:3d:28:89:5a:be:
be:48:ba:13:ed:e7:5a:4b:78:ff:ef:72:15:17:b0:
e4:d1:68:04:9a:40:0f:9c:1d:a0:6c:9f:25:c9:15:
c7:ea:00:88:e4:8f:ad:91:82:f1:50:f2:98:19:a2:
a5:51:60:a7:a4:58:0d:66:e1:73:a3:19:b6:ea:86:
c7:4c:c2:8b:0f:d9:ff:51:65:c4:02:6c:0a:54:c1:
7b:c4:5d:ac:95:d2:a2:89:4b:1e:40:65:90:40:8a:
3b:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:0D:2D:68:5D:AF:87:0E:92:23:0E:B9:7B:A4:09:2E:D8:A9:44:49
X509v3 Authority Key Identifier:
keyid:15:E0:24:37:1A:83:5B:B0:0E:AB:BA:FB:44:F6:8F:0F:8A:EB:F8:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/0/15E024371A835BB00EABBAFB44F68F0F8AEBF8F7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f914ac1a-b017-4cf4-9c3d-349dd19000d3/506be15e199605e756028137092036298a746bcdfe24227e72.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/0/323630323a663738613a36323a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:f78a:62::/48
Signature Algorithm: sha256WithRSAEncryption
9d:63:44:f1:ca:b1:15:cd:0a:c7:05:d4:94:c2:6c:5c:b0:8f:
8a:b9:5b:9d:3d:58:cf:9d:37:5d:52:c0:7f:91:f8:91:5f:06:
04:17:81:46:93:02:b8:3a:cf:eb:28:69:30:f2:68:17:23:2f:
42:45:fd:5f:24:7d:52:37:8b:2e:b9:e7:6e:3e:42:d7:7a:35:
47:09:32:a8:a4:51:f4:31:6e:0c:45:15:ad:e0:5e:23:44:29:
04:94:a2:c7:fa:f9:b7:55:09:09:35:18:ec:ef:02:c7:30:5a:
68:44:9d:09:fc:4f:c7:9b:c6:20:43:dd:08:a9:6b:a7:7c:66:
a2:cd:10:4e:c4:14:df:25:5e:5c:f7:c9:bf:65:68:23:df:c1:
12:56:dd:2c:f0:a2:5e:e2:5e:d9:c3:d8:33:8a:67:d9:f7:56:
5e:22:71:9f:8e:ee:40:2d:06:0f:c1:95:6a:48:f6:d6:ae:60:
bc:a7:be:f6:e2:83:8b:db:de:08:d7:1d:bf:7e:f3:bd:93:70:
b4:6c:ff:e6:cc:5d:4a:1d:57:5a:89:67:fc:cd:a7:76:4f:af:
ad:fc:66:29:1f:4c:10:9b:49:37:ec:95:50:3c:fe:92:f9:9d:
21:17:97:2f:4f:be:8f:c6:28:6f:d7:b3:2d:77:c4:39:ba:75:
c5:13:2d:b9
-----BEGIN CERTIFICATE-----
MIIFuTCCBKGgAwIBAgIUNSrbN1E0OIeAEkYTT3el8ZFP39owDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTA2YmUxNWUxOTk2MDVlNzU2MDI4MTM3MDkyMDM2Mjk4
YTc0NmJjZGZlMjQyMjdlNzIwHhcNMjQxMjE5MTQxMTA3WhcNMjUxMjE4MTQxNjA3
WjAzMTEwLwYDVQQDEyg5QTBEMkQ2ODVEQUY4NzBFOTIyMzBFQjk3QkE0MDkyRUQ4
QTk0NDQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqraPrgxqcwVc
1cytht7yTuZ+6anO7ge6fyLrnMksHKo+EpPzfqWFk31xXy+TI9AximitRavVTDMU
L4l6efAfv01Dw8f9ziiL0tnxTON2LWh394sdgDGJaiVVRw9I/Ce5FZtKz+IAY6KB
6uETnG2WRJHiXBKssDxjimORuAt38vN24xhwGVb58wohV+UwHDtu/qiX4kxNALT2
fWdixqLsPSiJWr6+SLoT7edaS3j/73IVF7Dk0WgEmkAPnB2gbJ8lyRXH6gCI5I+t
kYLxUPKYGaKlUWCnpFgNZuFzoxm26obHTMKLD9n/UWXEAmwKVMF7xF2sldKiiUse
QGWQQIo77QIDAQABo4ICuTCCArUwHQYDVR0OBBYEFJoNLWhdr4cOkiMOuXukCS7Y
qURJMB8GA1UdIwQYMBaAFBXgJDcag1uwDqu6+0T2jw+K6/j3MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmOTJlZTRkODQwMTkzZGY0NWEwZWE2Njg3LzAv
MTVFMDI0MzcxQTgzNUJCMDBFQUJCQUZCNDRGNjhGMEY4QUVCRjhGNy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNjlmZDAxNTYtYmIxZi00OGI2LWJmMzItYzk0OTIy
ODZmMTk1L2Y5MTRhYzFhLWIwMTctNGNmNC05YzNkLTM0OWRkMTkwMDBkMy81MDZi
ZTE1ZTE5OTYwNWU3NTYwMjgxMzcwOTIwMzYyOThhNzQ2YmNkZmUyNDIyN2U3Mi5j
ZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjkyZWU0ZDg0MDE5M2Rm
NDVhMGVhNjY4Ny8wLzMyMzYzMDMyM2E2NjM3Mzg2MTNhMzYzMjNhM2EyZjM0Mzgy
ZDM0MzgyMDNkM2UyMDMxMzYzOTMwMzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAmAveKAGIwDQYJKoZI
hvcNAQELBQADggEBAJ1jRPHKsRXNCscF1JTCbFywj4q5W509WM+dN11SwH+R+JFf
BgQXgUaTArg6z+soaTDyaBcjL0JF/V8kfVI3iy65524+Qtd6NUcJMqikUfQxbgxF
Fa3gXiNEKQSUosf6+bdVCQk1GOzvAscwWmhEnQn8T8ebxiBD3Qipa6d8ZqLNEE7E
FN8lXlz3yb9laCPfwRJW3Szwol7iXtnD2DOKZ9n3Vl4icZ+O7kAtBg/BlWpI9tau
YLynvvbig4vb3gjXHb9+872TcLRs/+bMXUodV1qJZ/zNp3ZPr638ZikfTBCbSTfs
lVA8/pL5nSEXly9Pvo/GKG/Xsy13xDm6dcUTLbk=
-----END CERTIFICATE-----
Generated at Wed Feb 5 06:51:25 2025 by rpki-client