Route Origin Authorization
$ rpki-client -vvf rpki.co/repo/AS202400/0/323630323a666161383a3230343a3a2f34382d3438203d3e20313531313838.roa
File: 323630323a666161383a3230343a3a2f34382d3438203d3e20313531313838.roa (raw, json)
Hash identifier: VwKYyPiimZPOqGRKj4PD4VzDoDZqv12T7oBsOnVwKOo=
Subject key identifier: 78:54:19:A3:AE:7A:2E:B0:C4:A5:1D:7D:62:70:F5:FF:29:FB:21:40
Certificate issuer: /CN=2a5af74dbb9d4d437cf3ac13206067caa11b1798319623f21f
Certificate serial: 3D4E699A3B0B4E4E5C6181A3FD0C8833B7B236E6
Authority key identifier: B0:BE:7A:BD:BE:B3:E0:14:7D:08:12:2B:69:9C:47:8C:99:A1:B0:FF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/2a5af74dbb9d4d437cf3ac13206067caa11b1798319623f21f.cer
Subject info access: rsync://rpki.co/repo/AS202400/0/323630323a666161383a3230343a3a2f34382d3438203d3e20313531313838.roa
Signing time: Mon 08 Jan 2024 09:01:46 +0000
ROA not before: Mon 08 Jan 2024 08:56:46 +0000
ROA not after: Mon 06 Jan 2025 09:01:46 +0000
asID: 151188
IP address blocks: 2602:faa8:204::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 24 Mar 2024 13:20:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:4e:69:9a:3b:0b:4e:4e:5c:61:81:a3:fd:0c:88:33:b7:b2:36:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a5af74dbb9d4d437cf3ac13206067caa11b1798319623f21f
Validity
Not Before: Jan 8 08:56:46 2024 GMT
Not After : Jan 6 09:01:46 2025 GMT
Subject: CN=785419A3AE7A2EB0C4A51D7D6270F5FF29FB2140
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:44:ec:41:96:2d:fd:c2:16:05:4c:5a:a5:a7:
c5:c7:43:3e:8e:c4:f7:b7:d2:d4:62:ce:2e:18:37:
df:57:68:7b:31:ab:66:c0:5e:25:3c:1b:bc:b7:05:
65:57:71:80:2f:d9:83:51:3f:25:9f:72:b3:d4:f2:
26:72:85:81:99:6d:20:41:76:20:d8:05:f4:e3:a7:
9f:86:e9:cf:cf:e1:84:bc:f1:6d:d4:58:f9:37:64:
51:b3:34:8d:64:f5:bc:e5:db:4a:80:9b:b1:a8:9c:
81:93:a9:c9:4b:81:ec:a4:4f:3d:3d:a1:d1:0e:ac:
ff:93:88:3e:ad:5f:a0:e8:40:41:e4:e7:5d:37:bc:
4f:6d:e2:48:a6:73:af:ba:be:9e:68:7e:42:1c:b9:
67:1a:19:19:ee:55:c2:d2:45:63:39:b1:1c:aa:fb:
8c:bd:48:b1:3d:6b:78:e8:34:2e:5a:dc:00:70:25:
aa:15:50:28:31:6d:03:59:c3:02:53:1e:b9:2d:99:
0e:fb:ea:33:52:af:44:b8:e1:38:9d:02:9f:1d:c9:
a5:15:ba:2a:72:eb:fe:51:5e:c6:fc:d1:2f:02:39:
22:1c:cf:ff:ef:c9:fe:98:16:1d:f3:3e:9e:07:be:
ea:89:40:03:bb:38:bb:2f:db:ee:4d:b4:6c:19:76:
80:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:54:19:A3:AE:7A:2E:B0:C4:A5:1D:7D:62:70:F5:FF:29:FB:21:40
X509v3 Authority Key Identifier:
keyid:B0:BE:7A:BD:BE:B3:E0:14:7D:08:12:2B:69:9C:47:8C:99:A1:B0:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.co/repo/AS202400/0/B0BE7ABDBEB3E0147D08122B699C478C99A1B0FF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/2a5af74dbb9d4d437cf3ac13206067caa11b1798319623f21f.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.co/repo/AS202400/0/323630323a666161383a3230343a3a2f34382d3438203d3e20313531313838.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:faa8:204::/48
Signature Algorithm: sha256WithRSAEncryption
59:11:6e:40:39:6f:13:d8:30:30:7a:ef:ef:49:d8:60:6b:4b:
20:4e:23:7d:d6:ba:24:2e:fd:73:f7:f4:8b:f9:9c:b7:8f:8f:
fa:1d:12:ba:2e:0a:eb:cc:c5:b9:a4:0b:42:2e:e1:21:18:24:
97:87:c8:eb:16:0f:95:97:35:75:ff:9d:c7:57:4e:d2:6f:0b:
89:8a:2e:82:50:8c:3c:92:eb:76:71:c5:9c:70:db:31:b4:c4:
38:19:cd:bc:a5:4c:7f:cf:7f:50:e9:9f:5b:c9:d7:da:4f:be:
ee:41:23:19:89:08:a6:d9:0b:34:f2:8e:e7:2d:b9:21:32:1f:
fd:2d:ca:78:52:02:9f:b5:d6:0a:71:f1:40:d7:ec:02:64:d0:
db:eb:12:f5:76:61:bc:31:00:24:52:67:8d:4e:96:2f:f3:62:
cd:8d:c9:3c:32:0e:ed:e1:bd:ff:b0:c4:f8:57:6e:a7:0b:bd:
14:90:16:d3:50:ae:26:e9:c6:89:6d:b7:9c:79:21:44:73:14:
73:87:65:b6:52:4e:3f:bc:d9:ee:d4:6b:d4:2f:b6:61:dd:f9:
8a:84:77:70:8c:b2:3d:9c:98:60:15:f8:b9:f4:d1:f7:7b:33:
e9:4a:bb:5d:aa:e2:49:7f:fb:2a:80:01:f0:20:13:34:57:48:
d4:8b:6a:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 24 13:55:28 2024 by rpki-client on console-ams.rpki-client.org