Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/0/323630323a663738613a38633a3a2f34382d3438203d3e20343031353037.roa
File: 323630323a663738613a38633a3a2f34382d3438203d3e20343031353037.roa (raw, json)
Hash identifier: 1b1SyI+Qz3UARnhKdpXbaP+IjDuHEeAXojRaFT/gOFE=
Subject key identifier: BB:D9:2A:A2:85:C8:68:35:0B:C0:D2:A3:E6:6F:8C:F2:35:C5:5A:4D
Certificate issuer: /CN=506be15e199605e756028137092036298a746bcdfe24227e72
Certificate serial: 1B2D5D669A104205554B9D0D9F546062EFC425E9
Authority key identifier: 15:E0:24:37:1A:83:5B:B0:0E:AB:BA:FB:44:F6:8F:0F:8A:EB:F8:F7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f914ac1a-b017-4cf4-9c3d-349dd19000d3/506be15e199605e756028137092036298a746bcdfe24227e72.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/0/323630323a663738613a38633a3a2f34382d3438203d3e20343031353037.roa
Signing time: Thu 19 Dec 2024 14:30:48 +0000
ROA not before: Thu 19 Dec 2024 14:25:48 +0000
ROA not after: Thu 18 Dec 2025 14:30:48 +0000
asID: 401507
IP address blocks: 2602:f78a:8c::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 01 Feb 2025 22:06:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:2d:5d:66:9a:10:42:05:55:4b:9d:0d:9f:54:60:62:ef:c4:25:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=506be15e199605e756028137092036298a746bcdfe24227e72
Validity
Not Before: Dec 19 14:25:48 2024 GMT
Not After : Dec 18 14:30:48 2025 GMT
Subject: CN=BBD92AA285C868350BC0D2A3E66F8CF235C55A4D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:2d:90:f3:dc:6f:c3:63:3c:74:5a:c7:07:b1:
8b:ad:00:6e:95:ec:be:a7:74:79:1f:d0:91:be:8d:
36:99:8e:28:4a:5b:e1:2e:c0:d0:90:a2:88:1f:00:
34:b3:35:e6:f8:a3:2f:ac:ed:c2:77:54:2b:c7:fa:
73:22:ed:56:61:c0:42:4d:3f:de:f7:59:1d:56:6e:
ce:71:c5:ca:c1:4b:37:7d:d0:ce:8c:96:a5:13:96:
66:b3:03:89:0f:d6:64:f8:27:87:58:f4:eb:1c:70:
46:6f:b6:82:7c:d7:cd:e5:6b:8b:b1:d6:48:c9:c5:
49:c4:43:7e:83:8b:c9:f4:ee:89:b8:2b:bf:e9:17:
e5:f3:e1:b5:f3:eb:c3:73:c7:c7:d9:73:e3:b5:8c:
64:64:cf:da:31:86:82:a3:62:1a:d0:3d:fd:c0:a9:
b2:4f:8c:14:54:97:86:5c:1d:09:42:5e:8f:23:11:
20:ca:2d:ca:57:ce:e3:6b:7f:4d:1d:dd:a3:4d:aa:
5a:8f:bb:d5:8d:11:16:6b:d4:cb:7a:a1:a3:b9:ed:
ee:f4:ff:1f:a4:a6:1a:b9:e1:5d:1c:b6:32:d5:8e:
87:d5:38:4d:0f:53:48:36:69:a7:e8:ee:9d:83:81:
e3:a8:4e:d6:54:79:54:23:13:d2:97:1f:70:4e:23:
d5:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:D9:2A:A2:85:C8:68:35:0B:C0:D2:A3:E6:6F:8C:F2:35:C5:5A:4D
X509v3 Authority Key Identifier:
keyid:15:E0:24:37:1A:83:5B:B0:0E:AB:BA:FB:44:F6:8F:0F:8A:EB:F8:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/0/15E024371A835BB00EABBAFB44F68F0F8AEBF8F7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f914ac1a-b017-4cf4-9c3d-349dd19000d3/506be15e199605e756028137092036298a746bcdfe24227e72.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/0/323630323a663738613a38633a3a2f34382d3438203d3e20343031353037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:f78a:8c::/48
Signature Algorithm: sha256WithRSAEncryption
19:70:fb:55:13:ad:ce:58:3a:8e:e9:34:58:88:c9:18:e5:54:
41:6b:87:a9:7c:32:07:d2:f9:f2:8e:81:8f:b9:d6:e3:df:54:
34:05:dc:97:65:6b:ba:fd:f4:6f:b8:ee:c8:8a:05:77:16:a0:
14:b9:04:f5:32:69:99:b1:a8:e0:4e:a4:a4:52:f7:24:0a:83:
a9:44:01:0a:6c:06:9a:57:21:ac:25:eb:e0:af:c5:02:c1:42:
92:20:8b:4f:e0:e4:10:35:0c:53:85:fc:8c:c5:39:1d:75:e2:
a2:2f:a7:58:e6:7f:3b:fa:b5:27:d2:23:2c:30:d6:65:e0:59:
5e:4d:3c:dc:1e:b0:30:00:d0:d7:d9:9e:e9:9f:90:50:2c:ad:
60:7e:65:4f:6b:ba:8e:90:eb:05:cd:ca:7a:8e:ce:1d:66:16:
71:e4:eb:12:ee:4c:15:76:bd:ff:2f:35:20:fe:6a:88:80:cf:
59:76:0f:34:33:b1:96:4a:23:d0:39:2e:24:e4:b3:60:0c:27:
b6:40:8d:c7:e6:0f:a8:90:44:71:d7:10:ac:c1:07:db:0a:d4:
a8:8f:13:2f:74:15:03:11:21:24:e5:f0:d6:a3:9b:3c:a7:8b:
87:46:8e:2c:b8:38:e3:cd:bd:dd:81:52:a9:20:c1:69:a6:b6:
92:94:01:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 07:50:47 2025 by rpki-client