Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/0/323630323a663738613a36333a3a2f34382d3438203d3e203136393039.roa
File: 323630323a663738613a36333a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: 8k2dFZpANK8Yrb0Fl9GEQspbhJ+Xl03iUPCfAc7NTWU=
Subject key identifier: 8D:65:B6:4A:4D:D6:D1:FE:C8:9D:EA:BB:90:56:B2:1D:EA:3E:F0:D2
Certificate issuer: /CN=506be15e199605e756028137092036298a746bcdfe24227e72
Certificate serial: 2859E404CFC26FD7B0AEB52A88306DB951FF75BA
Authority key identifier: 15:E0:24:37:1A:83:5B:B0:0E:AB:BA:FB:44:F6:8F:0F:8A:EB:F8:F7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f914ac1a-b017-4cf4-9c3d-349dd19000d3/506be15e199605e756028137092036298a746bcdfe24227e72.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/0/323630323a663738613a36333a3a2f34382d3438203d3e203136393039.roa
Signing time: Thu 19 Dec 2024 14:16:09 +0000
ROA not before: Thu 19 Dec 2024 14:11:09 +0000
ROA not after: Thu 18 Dec 2025 14:16:09 +0000
asID: 16909
IP address blocks: 2602:f78a:63::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 01 Feb 2025 22:05:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:59:e4:04:cf:c2:6f:d7:b0:ae:b5:2a:88:30:6d:b9:51:ff:75:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=506be15e199605e756028137092036298a746bcdfe24227e72
Validity
Not Before: Dec 19 14:11:09 2024 GMT
Not After : Dec 18 14:16:09 2025 GMT
Subject: CN=8D65B64A4DD6D1FEC89DEABB9056B21DEA3EF0D2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:00:dc:20:68:18:b1:06:bc:ef:40:32:60:7f:
55:2c:f7:47:c0:4f:af:0f:ff:35:0b:b9:31:04:75:
e3:71:dc:e5:60:80:4a:cc:14:50:e1:88:ab:21:13:
c4:dd:77:c1:da:4d:77:e6:99:18:a3:fc:44:19:ef:
f8:fb:2c:4b:11:bb:e3:46:6c:0f:5a:03:2f:12:2f:
14:5f:94:54:d3:3f:0c:69:37:6d:94:93:bd:33:a4:
12:57:23:5f:5a:bf:60:8b:62:8a:28:a1:a3:7b:fc:
0a:b8:97:1c:46:8a:4f:f8:df:a4:d4:39:2d:9d:f9:
0a:30:85:19:90:22:2b:0a:59:e9:76:01:cb:73:28:
86:6d:11:f3:a1:3f:68:66:49:f2:e9:0c:56:a5:22:
4c:47:c1:86:57:ed:43:aa:5c:63:b9:96:71:67:dd:
20:b6:bf:bf:2b:33:55:dc:29:01:ef:26:4c:7b:0b:
36:f2:14:82:8a:25:9a:88:7f:60:1d:cf:4f:a4:61:
01:9e:1c:6d:e4:0f:5b:94:17:60:22:84:1b:2c:66:
b2:24:67:f2:6c:28:f6:ea:55:c4:12:c9:f2:95:53:
85:df:53:f7:c9:67:af:82:3f:e7:67:39:eb:e0:77:
e7:23:54:72:c8:d7:25:f8:f1:4c:eb:80:d2:0e:d2:
ab:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:65:B6:4A:4D:D6:D1:FE:C8:9D:EA:BB:90:56:B2:1D:EA:3E:F0:D2
X509v3 Authority Key Identifier:
keyid:15:E0:24:37:1A:83:5B:B0:0E:AB:BA:FB:44:F6:8F:0F:8A:EB:F8:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/0/15E024371A835BB00EABBAFB44F68F0F8AEBF8F7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f914ac1a-b017-4cf4-9c3d-349dd19000d3/506be15e199605e756028137092036298a746bcdfe24227e72.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/0/323630323a663738613a36333a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:f78a:63::/48
Signature Algorithm: sha256WithRSAEncryption
8c:12:36:df:38:81:e8:bf:63:bc:9d:da:27:7b:0f:41:70:82:
97:88:c9:4f:b1:52:f8:f8:13:50:83:60:36:9e:ae:1a:83:27:
70:1a:d5:63:14:8e:cc:b3:58:fb:ab:8b:9a:58:74:12:2d:85:
28:a4:9c:94:38:86:f3:a7:b5:cb:8f:bc:f4:a2:86:b0:25:ca:
d3:d2:9d:ca:f4:8b:53:89:e4:da:13:17:8b:d8:a8:cd:33:0e:
5a:ef:31:d6:ea:89:90:79:8e:76:37:b7:a7:3e:23:76:2e:0c:
ce:d0:a8:25:04:02:2d:a0:e3:3b:67:5c:5a:0c:3b:88:7f:43:
e6:05:01:57:46:49:dc:50:37:8a:a3:81:ec:30:17:12:3d:c5:
40:45:d5:b5:bd:9a:d0:c1:ba:5b:d1:af:d2:7e:cc:45:31:b2:
f7:38:0d:a7:29:bf:e7:d9:75:dd:fe:af:ec:51:f2:f3:68:bd:
3c:fb:40:8d:1f:66:5b:57:f0:6f:fc:3e:a5:0e:45:ab:f4:a8:
e6:6c:48:44:ca:44:ee:fd:79:94:3c:39:a7:87:a2:21:05:fb:
dc:b2:f6:88:79:21:df:05:37:e1:b6:bc:5a:0a:3a:89:6e:b1:
0f:af:3f:00:94:66:db:92:92:6f:7c:72:b6:df:12:1b:59:77:
35:a7:92:b8
-----BEGIN CERTIFICATE-----
MIIFuTCCBKGgAwIBAgIUKFnkBM/Cb9ewrrUqiDBtuVH/dbowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTA2YmUxNWUxOTk2MDVlNzU2MDI4MTM3MDkyMDM2Mjk4
YTc0NmJjZGZlMjQyMjdlNzIwHhcNMjQxMjE5MTQxMTA5WhcNMjUxMjE4MTQxNjA5
WjAzMTEwLwYDVQQDEyg4RDY1QjY0QTRERDZEMUZFQzg5REVBQkI5MDU2QjIxREVB
M0VGMEQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAogDcIGgYsQa8
70AyYH9VLPdHwE+vD/81C7kxBHXjcdzlYIBKzBRQ4YirIRPE3XfB2k135pkYo/xE
Ge/4+yxLEbvjRmwPWgMvEi8UX5RU0z8MaTdtlJO9M6QSVyNfWr9gi2KKKKGje/wK
uJccRopP+N+k1DktnfkKMIUZkCIrClnpdgHLcyiGbRHzoT9oZkny6QxWpSJMR8GG
V+1DqlxjuZZxZ90gtr+/KzNV3CkB7yZMews28hSCiiWaiH9gHc9PpGEBnhxt5A9b
lBdgIoQbLGayJGfybCj26lXEEsnylVOF31P3yWevgj/nZznr4HfnI1RyyNcl+PFM
64DSDtKrKwIDAQABo4ICuTCCArUwHQYDVR0OBBYEFI1ltkpN1tH+yJ3qu5BWsh3q
PvDSMB8GA1UdIwQYMBaAFBXgJDcag1uwDqu6+0T2jw+K6/j3MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmOTJlZTRkODQwMTkzZGY0NWEwZWE2Njg3LzAv
MTVFMDI0MzcxQTgzNUJCMDBFQUJCQUZCNDRGNjhGMEY4QUVCRjhGNy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNjlmZDAxNTYtYmIxZi00OGI2LWJmMzItYzk0OTIy
ODZmMTk1L2Y5MTRhYzFhLWIwMTctNGNmNC05YzNkLTM0OWRkMTkwMDBkMy81MDZi
ZTE1ZTE5OTYwNWU3NTYwMjgxMzcwOTIwMzYyOThhNzQ2YmNkZmUyNDIyN2U3Mi5j
ZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjkyZWU0ZDg0MDE5M2Rm
NDVhMGVhNjY4Ny8wLzMyMzYzMDMyM2E2NjM3Mzg2MTNhMzYzMzNhM2EyZjM0Mzgy
ZDM0MzgyMDNkM2UyMDMxMzYzOTMwMzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAmAveKAGMwDQYJKoZI
hvcNAQELBQADggEBAIwSNt84gei/Y7yd2id7D0FwgpeIyU+xUvj4E1CDYDaerhqD
J3Aa1WMUjsyzWPuri5pYdBIthSiknJQ4hvOntcuPvPSihrAlytPSncr0i1OJ5NoT
F4vYqM0zDlrvMdbqiZB5jnY3t6c+I3YuDM7QqCUEAi2g4ztnXFoMO4h/Q+YFAVdG
SdxQN4qjgewwFxI9xUBF1bW9mtDBulvRr9J+zEUxsvc4Dacpv+fZdd3+r+xR8vNo
vTz7QI0fZltX8G/8PqUORav0qOZsSETKRO79eZQ8OaeHoiEF+9yy9oh5Id8FN+G2
vFoKOolusQ+vPwCUZtuSkm98crbfEhtZdzWnkrg=
-----END CERTIFICATE-----
Generated at Wed Feb 5 06:40:26 2025 by rpki-client