Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/0/323630323a663738613a37333a3a2f34382d3438203d3e203136393039.roa
File: 323630323a663738613a37333a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: vcQ2KXgTmrJTL6c1JUXC+lyssMOVVMXRaGP0O0IYU34=
Subject key identifier: AA:6D:DA:3B:3D:5D:18:25:A5:B5:7F:42:01:AD:12:0A:03:39:5D:33
Certificate issuer: /CN=506be15e199605e756028137092036298a746bcdfe24227e72
Certificate serial: 29A66EFDFC607AC8ECE8AC610D7FA94BBD266AAD
Authority key identifier: 15:E0:24:37:1A:83:5B:B0:0E:AB:BA:FB:44:F6:8F:0F:8A:EB:F8:F7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f914ac1a-b017-4cf4-9c3d-349dd19000d3/506be15e199605e756028137092036298a746bcdfe24227e72.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/0/323630323a663738613a37333a3a2f34382d3438203d3e203136393039.roa
Signing time: Thu 19 Dec 2024 14:58:01 +0000
ROA not before: Thu 19 Dec 2024 14:53:01 +0000
ROA not after: Thu 18 Dec 2025 14:58:01 +0000
asID: 16909
IP address blocks: 2602:f78a:73::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 01 Feb 2025 22:05:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:a6:6e:fd:fc:60:7a:c8:ec:e8:ac:61:0d:7f:a9:4b:bd:26:6a:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=506be15e199605e756028137092036298a746bcdfe24227e72
Validity
Not Before: Dec 19 14:53:01 2024 GMT
Not After : Dec 18 14:58:01 2025 GMT
Subject: CN=AA6DDA3B3D5D1825A5B57F4201AD120A03395D33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:bc:8d:f6:9a:3d:39:27:53:3a:39:56:64:00:
6a:22:f5:ac:f4:0b:12:0c:e5:2a:79:59:fe:72:2a:
cd:8e:56:12:2b:c8:02:f2:bc:48:f3:2c:59:a9:af:
af:a0:2f:84:8d:1e:bc:34:62:b0:cf:12:db:cc:a0:
81:ab:40:10:70:08:20:9a:27:34:48:9e:3a:2f:78:
e3:64:d4:d1:48:b0:41:59:2e:f6:de:f2:0c:43:39:
12:71:d5:d6:a2:a8:44:47:e1:02:90:bb:de:84:02:
da:1d:2e:5b:9f:8f:a1:54:bb:8f:22:3c:a4:20:25:
da:e7:f7:99:d4:cf:8f:84:6f:92:64:c3:a6:80:51:
7e:b6:13:bd:23:f6:b6:dc:e8:39:a9:94:3a:6a:24:
52:e0:5e:6d:94:9f:2a:e7:26:7e:10:17:71:50:a7:
67:5d:2d:09:ed:58:db:91:d6:f9:e1:67:59:a3:68:
5e:c3:48:2b:84:f2:0c:cb:ef:07:2c:4f:2f:8c:95:
ed:73:5a:68:36:b7:61:14:62:3a:5c:62:44:7d:1c:
12:6f:b5:6f:02:31:70:71:61:f1:9e:d3:c8:b1:b6:
9f:3e:df:a9:58:cd:21:ec:cc:85:de:91:30:e0:29:
2a:29:e9:5a:6b:77:7f:5a:cc:a2:53:f0:6b:16:de:
fd:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:6D:DA:3B:3D:5D:18:25:A5:B5:7F:42:01:AD:12:0A:03:39:5D:33
X509v3 Authority Key Identifier:
keyid:15:E0:24:37:1A:83:5B:B0:0E:AB:BA:FB:44:F6:8F:0F:8A:EB:F8:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/0/15E024371A835BB00EABBAFB44F68F0F8AEBF8F7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f914ac1a-b017-4cf4-9c3d-349dd19000d3/506be15e199605e756028137092036298a746bcdfe24227e72.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/0/323630323a663738613a37333a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:f78a:73::/48
Signature Algorithm: sha256WithRSAEncryption
9f:d6:02:58:c4:24:02:a8:35:31:a5:0c:d4:33:1d:ae:5a:87:
c6:80:95:33:09:88:61:9e:8a:7b:6a:87:7b:f9:50:5c:e8:e1:
2e:e6:02:84:58:f5:06:7a:d5:4b:d6:60:8a:bf:60:f2:aa:90:
42:3e:4b:f3:97:2f:94:b0:8b:75:a5:35:65:fe:52:3f:52:04:
a7:9e:05:da:52:0f:39:02:a2:e6:71:5b:aa:db:a5:62:97:82:
e8:bc:3f:4c:69:6c:69:cb:42:d0:ba:ae:37:14:bb:af:21:39:
03:14:2a:87:d0:87:2e:2f:e5:dd:d7:ae:75:49:72:ac:43:02:
34:1b:83:ad:21:8b:d2:23:26:05:bf:57:20:ad:09:e5:00:95:
45:2b:b3:fc:5a:8f:03:08:82:b2:37:22:4b:be:17:5e:8a:4d:
93:e5:90:60:50:b3:b5:b1:b3:71:95:87:22:1b:09:22:d8:43:
11:d5:82:fa:27:59:cd:e0:5a:01:a6:df:c0:98:35:41:f9:10:
8d:a0:a1:07:2e:0b:8b:1e:8d:a2:1a:fb:e2:54:b8:60:42:e3:
d7:c8:eb:b8:5e:a3:04:47:09:65:c3:8e:6d:01:b0:9d:28:1f:
11:8c:8a:ae:2b:24:80:a6:16:ab:1d:1b:16:65:7f:35:7e:20:
fd:68:e3:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 06:54:13 2025 by rpki-client