Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/0/323630323a663738613a62633a3a2f34382d3438203d3e20343031353037.roa
File: 323630323a663738613a62633a3a2f34382d3438203d3e20343031353037.roa (raw, json)
Hash identifier: Zwlxf5Xq3J5eufAclvGNNPG8ZyVH6wMeddLOywFXz4E=
Subject key identifier: 0F:4A:EC:B9:B3:C8:AA:EF:5B:0F:16:6C:54:44:ED:99:98:41:4F:FA
Certificate issuer: /CN=506be15e199605e756028137092036298a746bcdfe24227e72
Certificate serial: 7A585DFC28EB7AAFAF4BC6C7153B16A9D86A3EEC
Authority key identifier: 15:E0:24:37:1A:83:5B:B0:0E:AB:BA:FB:44:F6:8F:0F:8A:EB:F8:F7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f914ac1a-b017-4cf4-9c3d-349dd19000d3/506be15e199605e756028137092036298a746bcdfe24227e72.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/0/323630323a663738613a62633a3a2f34382d3438203d3e20343031353037.roa
Signing time: Thu 19 Dec 2024 14:31:13 +0000
ROA not before: Thu 19 Dec 2024 14:26:13 +0000
ROA not after: Thu 18 Dec 2025 14:31:13 +0000
asID: 401507
IP address blocks: 2602:f78a:bc::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 01 Feb 2025 22:06:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:58:5d:fc:28:eb:7a:af:af:4b:c6:c7:15:3b:16:a9:d8:6a:3e:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=506be15e199605e756028137092036298a746bcdfe24227e72
Validity
Not Before: Dec 19 14:26:13 2024 GMT
Not After : Dec 18 14:31:13 2025 GMT
Subject: CN=0F4AECB9B3C8AAEF5B0F166C5444ED9998414FFA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:aa:eb:4b:c5:f0:c4:d2:3b:f7:76:49:13:cd:
00:b7:8a:c4:f3:1b:64:84:78:a4:bc:60:23:93:1f:
f4:1e:3f:c2:72:de:c8:28:b4:16:49:5c:c0:5b:46:
85:66:9c:07:69:fd:fb:79:66:08:0d:15:b0:61:4d:
b1:e5:ee:fd:d3:ee:45:dc:dd:44:ec:c9:b7:b8:89:
8c:4f:85:2c:7d:cd:ff:6d:cf:28:b9:7f:80:84:de:
54:3e:35:b1:d4:62:d0:0f:92:64:f5:be:4d:c4:20:
a7:7f:82:3d:1a:f0:da:51:31:ae:58:f2:aa:d5:ee:
e2:75:00:a0:62:5a:86:93:d9:78:07:e4:11:c8:3f:
ff:72:0f:b2:94:0b:e0:37:d0:92:b3:66:fe:7a:36:
4a:0e:30:56:9d:3b:85:9e:c8:19:12:24:39:ca:7f:
7b:e0:25:d6:7d:1c:f1:f5:f0:d0:66:da:e6:be:0d:
c6:91:4d:00:06:b8:08:b1:5b:34:6f:89:0d:f2:1b:
4d:de:87:87:ac:3e:9d:29:fc:d5:39:7f:7d:e8:f8:
f8:16:62:50:51:0f:31:b3:bb:9c:61:1c:a8:ec:d6:
21:62:a1:bd:60:a1:b0:1f:03:4d:e9:be:2b:ac:66:
23:ac:be:68:45:17:32:06:dd:db:66:7c:94:9e:06:
02:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:4A:EC:B9:B3:C8:AA:EF:5B:0F:16:6C:54:44:ED:99:98:41:4F:FA
X509v3 Authority Key Identifier:
keyid:15:E0:24:37:1A:83:5B:B0:0E:AB:BA:FB:44:F6:8F:0F:8A:EB:F8:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/0/15E024371A835BB00EABBAFB44F68F0F8AEBF8F7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f914ac1a-b017-4cf4-9c3d-349dd19000d3/506be15e199605e756028137092036298a746bcdfe24227e72.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/0/323630323a663738613a62633a3a2f34382d3438203d3e20343031353037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:f78a:bc::/48
Signature Algorithm: sha256WithRSAEncryption
7a:d7:a9:b6:9f:3d:eb:4d:21:25:09:9c:d0:4d:20:c7:ad:de:
09:b8:fe:ff:4f:c5:fd:96:97:c0:cb:75:3a:7a:28:99:ac:3a:
73:da:bd:a0:4e:53:7b:78:f3:48:13:06:e8:4e:b8:11:ec:71:
ad:2a:54:c5:d6:69:e1:1d:ce:bf:e3:b4:aa:4e:17:04:32:fd:
2e:0a:10:26:3d:a7:61:74:0a:65:ff:2c:7c:2d:21:fc:79:06:
80:cf:67:f8:f2:d9:8c:5b:90:d3:88:24:0c:da:45:31:95:27:
bb:e0:b9:3e:5f:5f:c1:dc:d7:5d:73:03:23:40:25:6a:82:d6:
5d:e5:58:61:74:ea:e1:99:5f:3c:68:7d:9c:b9:0c:bf:60:81:
12:0e:d7:48:b2:ce:f2:c7:40:75:bd:16:76:2b:27:2c:d7:1d:
82:14:ee:36:eb:cd:01:20:c0:f1:8a:c4:f2:17:a1:07:a4:33:
27:33:64:46:92:be:55:29:b9:69:f3:0a:5a:30:a2:59:23:c9:
6d:97:ea:4b:30:41:66:49:ac:3d:29:ff:61:28:9c:d9:7d:73:
fa:97:73:c4:16:64:8f:7c:11:a4:7e:14:f6:07:19:22:22:2e:
34:b9:94:74:5b:16:6c:9e:be:9b:99:be:f8:42:70:e8:c2:48:
99:99:e5:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 07:38:39 2025 by rpki-client