Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/0/323630323a663738613a39633a3a2f34382d3438203d3e20343031353037.roa
File: 323630323a663738613a39633a3a2f34382d3438203d3e20343031353037.roa (raw, json)
Hash identifier: tsSvCL1266O/PV0JzuQ4+fZORugEpNgp68yM7iBeslI=
Subject key identifier: 38:28:B2:52:E6:3D:B9:15:AA:DC:F5:E9:69:30:A1:4E:60:0F:F8:95
Certificate issuer: /CN=506be15e199605e756028137092036298a746bcdfe24227e72
Certificate serial: 403BFF255417B443BCE106ADD5B05D4DCDFCE331
Authority key identifier: 15:E0:24:37:1A:83:5B:B0:0E:AB:BA:FB:44:F6:8F:0F:8A:EB:F8:F7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f914ac1a-b017-4cf4-9c3d-349dd19000d3/506be15e199605e756028137092036298a746bcdfe24227e72.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/0/323630323a663738613a39633a3a2f34382d3438203d3e20343031353037.roa
Signing time: Thu 19 Dec 2024 14:30:58 +0000
ROA not before: Thu 19 Dec 2024 14:25:58 +0000
ROA not after: Thu 18 Dec 2025 14:30:58 +0000
asID: 401507
IP address blocks: 2602:f78a:9c::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 01 Feb 2025 22:06:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:3b:ff:25:54:17:b4:43:bc:e1:06:ad:d5:b0:5d:4d:cd:fc:e3:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=506be15e199605e756028137092036298a746bcdfe24227e72
Validity
Not Before: Dec 19 14:25:58 2024 GMT
Not After : Dec 18 14:30:58 2025 GMT
Subject: CN=3828B252E63DB915AADCF5E96930A14E600FF895
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:c8:82:ca:77:f5:47:d6:75:a5:5a:74:1a:4d:
49:4c:2e:7d:e0:4e:0f:04:c4:ca:b5:08:08:8f:36:
94:47:7e:a0:df:32:27:58:41:ee:de:6d:c9:e5:c8:
9e:13:25:22:f4:a0:1c:ce:6d:0e:58:0d:5d:6b:8e:
ea:98:66:dc:1c:70:0b:f1:32:89:4e:91:cf:e8:0b:
55:83:9c:51:61:9f:4c:d6:1a:58:df:78:8d:93:b4:
40:26:b5:f5:ee:33:b4:02:ce:af:7a:88:9c:64:26:
d5:3a:20:55:e1:2c:1d:7d:04:b3:b5:4b:47:78:90:
fd:10:a5:90:6b:1c:0a:05:70:74:53:53:1b:ce:47:
45:f7:22:81:a6:96:36:05:c5:37:6f:a0:e5:01:40:
d7:aa:03:c4:cf:bc:75:b3:5c:c9:93:2b:64:df:63:
1a:cb:07:5f:2e:75:6d:be:74:dc:4f:f9:d9:81:a5:
06:60:b8:5f:76:32:22:09:7f:d1:81:c6:53:04:bc:
e0:8f:9c:fa:93:2a:23:40:6d:5f:aa:94:e0:44:b0:
5f:e2:eb:e9:ad:31:b6:19:c0:55:b4:76:bc:c8:52:
bd:3e:fd:bb:1c:47:64:2e:e4:11:2b:64:22:61:97:
db:76:a0:81:3d:6f:42:fd:c1:59:e2:5a:a2:08:53:
88:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:28:B2:52:E6:3D:B9:15:AA:DC:F5:E9:69:30:A1:4E:60:0F:F8:95
X509v3 Authority Key Identifier:
keyid:15:E0:24:37:1A:83:5B:B0:0E:AB:BA:FB:44:F6:8F:0F:8A:EB:F8:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/0/15E024371A835BB00EABBAFB44F68F0F8AEBF8F7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f914ac1a-b017-4cf4-9c3d-349dd19000d3/506be15e199605e756028137092036298a746bcdfe24227e72.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/0/323630323a663738613a39633a3a2f34382d3438203d3e20343031353037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:f78a:9c::/48
Signature Algorithm: sha256WithRSAEncryption
2e:03:bc:22:6f:5f:61:63:90:2b:57:a8:7c:2f:22:d2:95:cd:
68:45:07:d9:0b:42:da:d0:66:85:92:06:89:77:17:0f:d9:03:
6f:62:fc:ac:de:f2:45:11:a7:21:56:c0:f7:49:22:87:b3:7e:
a9:4c:5a:66:da:2b:dd:ec:0e:8f:66:f1:4e:48:d6:22:e9:54:
60:3b:53:f0:3f:1f:a4:30:ca:27:7d:73:0d:25:f9:ae:73:ca:
67:34:76:d4:ff:3e:45:ae:a1:cb:1c:61:17:fb:6e:a1:c8:a3:
c2:58:77:e0:aa:a5:79:5e:bb:09:9b:a4:d5:1d:4c:0f:aa:7b:
e8:f7:00:3f:b7:30:af:e4:1d:0d:8c:f1:d1:09:f1:df:35:88:
b9:7a:3f:e1:71:14:15:2a:0c:cd:8d:39:90:62:d0:ed:94:11:
be:02:89:13:bf:e9:11:ca:d7:87:62:31:d2:dd:f4:02:d1:5a:
a8:f3:9c:16:46:1e:05:cf:e0:b3:c6:73:79:08:82:01:e8:e7:
26:8e:73:3e:5e:32:0f:d0:b9:67:7c:ca:51:41:44:7f:17:8d:
f9:e7:92:10:20:f7:99:a2:44:c5:eb:f1:11:d5:51:4e:b2:13:
7f:fe:c0:77:33:95:75:13:46:fc:16:b9:c2:92:89:df:db:f4:
02:b2:38:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 07:51:21 2025 by rpki-client