Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/0/323630323a663738613a37303a3a2f34382d3438203d3e203136393039.roa
File: 323630323a663738613a37303a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: Jif5VF4Pe2kf32ok6AOnxShnNQsR7bz467aFYHMcASs=
Subject key identifier: B4:B0:68:E5:B2:BF:DF:41:AB:DD:03:CA:49:29:DB:11:AE:4C:D1:4A
Certificate issuer: /CN=506be15e199605e756028137092036298a746bcdfe24227e72
Certificate serial: 32A2830AC8931E304257611C9581E55182772D03
Authority key identifier: 15:E0:24:37:1A:83:5B:B0:0E:AB:BA:FB:44:F6:8F:0F:8A:EB:F8:F7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f914ac1a-b017-4cf4-9c3d-349dd19000d3/506be15e199605e756028137092036298a746bcdfe24227e72.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/0/323630323a663738613a37303a3a2f34382d3438203d3e203136393039.roa
Signing time: Thu 19 Dec 2024 14:57:53 +0000
ROA not before: Thu 19 Dec 2024 14:52:53 +0000
ROA not after: Thu 18 Dec 2025 14:57:53 +0000
asID: 16909
IP address blocks: 2602:f78a:70::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 01 Feb 2025 22:05:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:a2:83:0a:c8:93:1e:30:42:57:61:1c:95:81:e5:51:82:77:2d:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=506be15e199605e756028137092036298a746bcdfe24227e72
Validity
Not Before: Dec 19 14:52:53 2024 GMT
Not After : Dec 18 14:57:53 2025 GMT
Subject: CN=B4B068E5B2BFDF41ABDD03CA4929DB11AE4CD14A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:07:e8:1e:75:7c:46:c0:5e:42:0d:b8:64:8f:
cd:31:c9:ed:9c:be:7a:cf:26:a2:4b:33:f0:33:bc:
f8:9f:13:c2:0d:97:ef:a3:e0:ba:d4:8e:ba:6b:2e:
12:7d:ec:06:26:bc:fa:bd:96:6c:3c:77:fd:f8:9d:
bd:f0:1e:0f:a2:7c:33:55:2e:aa:2f:dd:04:c0:25:
1f:a0:10:6d:95:8f:18:e3:6c:d0:23:84:2a:86:b2:
eb:4c:26:08:e3:87:9d:ab:88:e8:5a:59:91:4d:99:
7d:7c:65:04:f1:17:48:73:04:be:45:a0:8d:c4:34:
9e:34:43:6b:37:e4:12:91:d6:f5:bf:4e:27:d8:35:
51:18:00:ac:24:f9:33:23:76:ef:81:22:99:8e:ce:
26:13:88:ac:11:9c:81:29:cd:2c:46:98:ef:5e:a1:
34:ce:63:14:92:0c:a8:20:9b:94:a7:57:a3:a2:87:
7e:f4:28:21:90:2d:12:f9:73:46:a7:d0:39:52:34:
a5:d0:46:12:53:d9:17:39:4b:fa:cc:2b:d1:8b:2e:
37:eb:88:f8:c2:b0:55:c6:17:1b:ab:47:28:7f:28:
c8:de:af:35:c8:21:f3:d8:44:01:01:5a:d0:5c:2e:
57:c7:f2:44:82:b3:7e:ac:c6:13:20:e5:df:75:99:
4f:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:B0:68:E5:B2:BF:DF:41:AB:DD:03:CA:49:29:DB:11:AE:4C:D1:4A
X509v3 Authority Key Identifier:
keyid:15:E0:24:37:1A:83:5B:B0:0E:AB:BA:FB:44:F6:8F:0F:8A:EB:F8:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/0/15E024371A835BB00EABBAFB44F68F0F8AEBF8F7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f914ac1a-b017-4cf4-9c3d-349dd19000d3/506be15e199605e756028137092036298a746bcdfe24227e72.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/0/323630323a663738613a37303a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:f78a:70::/48
Signature Algorithm: sha256WithRSAEncryption
06:d8:63:b7:da:0c:39:96:c4:2d:0a:53:23:a6:72:77:2f:78:
32:e4:8b:ae:3f:00:e7:71:6b:0d:42:34:0e:c0:56:e4:52:55:
a9:56:6c:3e:cd:d1:11:c8:80:68:32:82:4f:5c:d9:5f:7c:ac:
81:63:e9:9d:97:65:09:98:e1:43:24:c0:5d:c1:2d:fa:2a:d3:
c8:50:be:6a:13:86:20:37:f2:8b:d3:33:61:03:32:e9:00:52:
1c:88:ff:59:0a:f8:66:f2:1a:55:73:ec:a2:cf:21:91:94:03:
9c:26:cb:cc:8b:64:37:72:6b:8e:05:1d:ee:94:24:69:18:c5:
ed:c8:ec:e1:96:e9:1c:6a:e7:b4:73:56:d6:8b:34:04:11:1c:
0f:64:92:ae:24:ef:c5:4c:e5:a2:7f:7e:ef:3d:3d:0a:58:86:
d5:e5:bc:20:36:c1:4a:f7:d8:b6:77:37:0a:63:c0:c3:3b:d8:
70:e5:0d:b8:1a:90:d0:ff:fb:16:4d:95:88:b3:d6:c6:71:7d:
66:67:0a:4e:d2:b0:5b:f8:b1:39:68:b7:70:74:11:31:7f:46:
97:62:2a:b0:6b:d2:11:27:02:2a:a0:99:00:ff:44:b9:21:c2:
11:31:c9:00:08:68:17:28:df:c8:e2:85:16:41:ca:79:8b:38:
6c:b7:97:d7
-----BEGIN CERTIFICATE-----
MIIFuTCCBKGgAwIBAgIUMqKDCsiTHjBCV2EclYHlUYJ3LQMwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTA2YmUxNWUxOTk2MDVlNzU2MDI4MTM3MDkyMDM2Mjk4
YTc0NmJjZGZlMjQyMjdlNzIwHhcNMjQxMjE5MTQ1MjUzWhcNMjUxMjE4MTQ1NzUz
WjAzMTEwLwYDVQQDEyhCNEIwNjhFNUIyQkZERjQxQUJERDAzQ0E0OTI5REIxMUFF
NENEMTRBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQfoHnV8RsBe
Qg24ZI/NMcntnL56zyaiSzPwM7z4nxPCDZfvo+C61I66ay4SfewGJrz6vZZsPHf9
+J298B4PonwzVS6qL90EwCUfoBBtlY8Y42zQI4QqhrLrTCYI44edq4joWlmRTZl9
fGUE8RdIcwS+RaCNxDSeNENrN+QSkdb1v04n2DVRGACsJPkzI3bvgSKZjs4mE4is
EZyBKc0sRpjvXqE0zmMUkgyoIJuUp1ejood+9CghkC0S+XNGp9A5UjSl0EYSU9kX
OUv6zCvRiy4364j4wrBVxhcbq0cofyjI3q81yCHz2EQBAVrQXC5Xx/JEgrN+rMYT
IOXfdZlPxwIDAQABo4ICuTCCArUwHQYDVR0OBBYEFLSwaOWyv99Bq90Dykkp2xGu
TNFKMB8GA1UdIwQYMBaAFBXgJDcag1uwDqu6+0T2jw+K6/j3MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmOTJlZTRkODQwMTkzZGY0NWEwZWE2Njg3LzAv
MTVFMDI0MzcxQTgzNUJCMDBFQUJCQUZCNDRGNjhGMEY4QUVCRjhGNy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNjlmZDAxNTYtYmIxZi00OGI2LWJmMzItYzk0OTIy
ODZmMTk1L2Y5MTRhYzFhLWIwMTctNGNmNC05YzNkLTM0OWRkMTkwMDBkMy81MDZi
ZTE1ZTE5OTYwNWU3NTYwMjgxMzcwOTIwMzYyOThhNzQ2YmNkZmUyNDIyN2U3Mi5j
ZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjkyZWU0ZDg0MDE5M2Rm
NDVhMGVhNjY4Ny8wLzMyMzYzMDMyM2E2NjM3Mzg2MTNhMzczMDNhM2EyZjM0Mzgy
ZDM0MzgyMDNkM2UyMDMxMzYzOTMwMzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAmAveKAHAwDQYJKoZI
hvcNAQELBQADggEBAAbYY7faDDmWxC0KUyOmcncveDLki64/AOdxaw1CNA7AVuRS
ValWbD7N0RHIgGgygk9c2V98rIFj6Z2XZQmY4UMkwF3BLfoq08hQvmoThiA38ovT
M2EDMukAUhyI/1kK+GbyGlVz7KLPIZGUA5wmy8yLZDdya44FHe6UJGkYxe3I7OGW
6Rxq57RzVtaLNAQRHA9kkq4k78VM5aJ/fu89PQpYhtXlvCA2wUr32LZ3NwpjwMM7
2HDlDbgakND/+xZNlYiz1sZxfWZnCk7SsFv4sTlot3B0ETF/RpdiKrBr0hEnAiqg
mQD/RLkhwhExyQAIaBco38jihRZBynmLOGy3l9c=
-----END CERTIFICATE-----
Generated at Wed Feb 5 06:46:47 2025 by rpki-client