Route Origin Authorization
$ rpki-client -vvf rpki-pp.com/repo/GOOFL/0/323630323a663833643a36303a3a2f34332d3433203d3e203133353237.roa
File: 323630323a663833643a36303a3a2f34332d3433203d3e203133353237.roa (raw, json)
Hash identifier: Txfe1gO5apRwjYfIHXtRWQqlAiTgvZqbHo5kZ3OaX6g=
Subject key identifier: 84:66:25:BF:64:FD:D9:EA:90:C7:C8:87:A8:D7:28:EF:19:9A:F1:C4
Certificate issuer: /CN=86de965d710aeee198142f460f82d31bc5a8aae2b2f48e0c5d
Certificate serial: 26DBD81B2F7DD4ED5E318B316E4045543A445FC4
Authority key identifier: D4:60:6A:E6:F1:88:38:E2:25:7D:55:AB:B5:00:63:6F:50:92:36:E3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7c9b1947-b813-43b3-9152-c4ccbff1cde7/86de965d710aeee198142f460f82d31bc5a8aae2b2f48e0c5d.cer
Subject info access: rsync://rpki-pp.com/repo/GOOFL/0/323630323a663833643a36303a3a2f34332d3433203d3e203133353237.roa
Signing time: Fri 28 Feb 2025 19:00:23 +0000
ROA not before: Fri 28 Feb 2025 18:55:23 +0000
ROA not after: Fri 27 Feb 2026 19:00:23 +0000
asID: 13527
IP address blocks: 2602:f83d:60::/43 maxlen: 43
Validation: Failed, certificate revoked on Fri 28 Feb 2025 19:39:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:db:d8:1b:2f:7d:d4:ed:5e:31:8b:31:6e:40:45:54:3a:44:5f:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86de965d710aeee198142f460f82d31bc5a8aae2b2f48e0c5d
Validity
Not Before: Feb 28 18:55:23 2025 GMT
Not After : Feb 27 19:00:23 2026 GMT
Subject: CN=846625BF64FDD9EA90C7C887A8D728EF199AF1C4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:11:cd:87:bc:f9:68:d9:d9:ac:f1:59:c2:aa:
fc:cf:53:ac:93:f2:a8:bd:24:3c:1c:72:13:d9:d5:
b4:b1:56:ef:5a:22:bf:3d:63:15:80:dc:4d:00:4e:
59:8a:c9:86:24:24:6c:3c:2f:51:a1:b4:9c:47:0c:
0c:19:d1:ff:b2:3a:f0:b6:b9:d0:1f:2a:7b:b0:c9:
67:0c:b8:07:32:23:45:d0:a7:34:4f:d2:22:5b:39:
52:8c:12:1e:b1:7e:dc:4d:53:1d:39:49:1b:aa:02:
71:98:03:fc:fc:06:ec:e7:62:c1:4b:d5:94:88:39:
68:25:69:b2:81:d0:36:9a:09:b5:9c:54:4a:41:6b:
e8:2b:b4:a6:72:c1:ad:a2:5a:d3:0b:44:18:19:61:
49:48:70:78:f1:97:aa:e5:1b:0b:d7:f3:6e:96:d1:
d7:0b:8b:97:fe:43:cb:03:04:c8:fe:d9:94:74:fd:
47:6a:33:6e:5f:85:13:df:0b:db:f7:6f:32:1b:d0:
cd:32:c3:d3:b0:4f:8d:c6:a7:e1:34:80:e3:45:27:
0d:8d:6a:1b:cc:6f:df:a1:67:8a:66:b1:19:c1:05:
2c:5c:da:c6:1b:a2:a8:2a:65:7a:a5:3d:09:2e:80:
ac:86:9c:c7:1c:62:1c:d3:3e:6c:53:8c:49:a0:68:
77:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:66:25:BF:64:FD:D9:EA:90:C7:C8:87:A8:D7:28:EF:19:9A:F1:C4
X509v3 Authority Key Identifier:
keyid:D4:60:6A:E6:F1:88:38:E2:25:7D:55:AB:B5:00:63:6F:50:92:36:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-pp.com/repo/GOOFL/0/D4606AE6F18838E2257D55ABB500636F509236E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7c9b1947-b813-43b3-9152-c4ccbff1cde7/86de965d710aeee198142f460f82d31bc5a8aae2b2f48e0c5d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-pp.com/repo/GOOFL/0/323630323a663833643a36303a3a2f34332d3433203d3e203133353237.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:f83d:60::/43
Signature Algorithm: sha256WithRSAEncryption
06:56:4a:80:aa:e2:c7:78:1e:3b:49:64:ea:87:43:d7:2a:5a:
1c:0f:12:4a:2a:e0:57:f1:26:ba:16:cb:93:36:32:6c:f8:d2:
8b:1d:17:f3:1d:67:24:c7:99:e0:5f:02:18:ae:9d:d6:90:bf:
55:32:ae:24:71:c6:3a:14:fa:b4:87:8f:bb:fc:a3:05:7e:38:
dd:e4:7c:07:73:33:2d:39:8c:9a:f2:b1:e2:ce:be:36:f5:88:
cc:7b:89:47:52:61:85:c6:d2:a4:f7:f8:b5:aa:ff:15:87:73:
f7:c7:24:88:69:6c:2c:8d:ab:d6:a0:37:ca:5f:8a:11:02:21:
a3:81:b7:df:df:d1:eb:8c:47:cd:57:01:99:98:5a:51:29:8a:
98:24:5a:08:a5:08:6b:4f:c6:aa:d2:99:42:ec:a4:70:2d:49:
b3:00:c8:ee:d5:7f:1d:b0:7d:d5:24:c0:9b:db:1c:a3:6f:61:
50:c5:4a:35:c1:a8:22:27:0d:81:68:74:7b:7a:11:61:3d:d9:
ec:f9:b2:1e:f6:89:66:4f:19:28:34:b7:19:16:c5:fa:98:3b:
14:ef:1b:f8:ee:82:5d:c4:21:38:e4:23:69:76:7a:55:4f:a4:
e0:86:53:db:09:42:96:7c:e5:68:a5:3a:52:80:cf:fe:a9:69:
ef:ee:3a:3f
-----BEGIN CERTIFICATE-----
MIIFZTCCBE2gAwIBAgIUJtvYGy991O1eMYsxbkBFVDpEX8QwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyODZkZTk2NWQ3MTBhZWVlMTk4MTQyZjQ2MGY4MmQzMWJj
NWE4YWFlMmIyZjQ4ZTBjNWQwHhcNMjUwMjI4MTg1NTIzWhcNMjYwMjI3MTkwMDIz
WjAzMTEwLwYDVQQDEyg4NDY2MjVCRjY0RkREOUVBOTBDN0M4ODdBOEQ3MjhFRjE5
OUFGMUM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvBHNh7z5aNnZ
rPFZwqr8z1Osk/KovSQ8HHIT2dW0sVbvWiK/PWMVgNxNAE5ZismGJCRsPC9RobSc
RwwMGdH/sjrwtrnQHyp7sMlnDLgHMiNF0Kc0T9IiWzlSjBIesX7cTVMdOUkbqgJx
mAP8/Abs52LBS9WUiDloJWmygdA2mgm1nFRKQWvoK7SmcsGtolrTC0QYGWFJSHB4
8Zeq5RsL1/NultHXC4uX/kPLAwTI/tmUdP1HajNuX4UT3wvb928yG9DNMsPTsE+N
xqfhNIDjRScNjWobzG/foWeKZrEZwQUsXNrGG6KoKmV6pT0JLoCshpzHHGIc0z5s
U4xJoGh3ZQIDAQABo4ICZTCCAmEwHQYDVR0OBBYEFIRmJb9k/dnqkMfIh6jXKO8Z
mvHEMB8GA1UdIwQYMBaAFNRgaubxiDjiJX1Vq7UAY29QkjbjMA4GA1UdDwEB/wQE
AwIHgDBeBgNVHR8EVzBVMFOgUaBPhk1yc3luYzovL3Jwa2ktcHAuY29tL3JlcG8v
R09PRkwvMC9ENDYwNkFFNkYxODgzOEUyMjU3RDU1QUJCNTAwNjM2RjUwOTIzNkUz
LmNybDCB8wYIKwYBBQUHAQEEgeYwgeMwgeAGCCsGAQUFBzAChoHTcnN5bmM6Ly9y
cGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4
MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1iYjFmLTQ4YjYtYmYz
Mi1jOTQ5MjI4NmYxOTUvN2M5YjE5NDctYjgxMy00M2IzLTkxNTItYzRjY2JmZjFj
ZGU3Lzg2ZGU5NjVkNzEwYWVlZTE5ODE0MmY0NjBmODJkMzFiYzVhOGFhZTJiMmY0
OGUwYzVkLmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuGX3JzeW5jOi8v
cnBraS1wcC5jb20vcmVwby9HT09GTC8wLzMyMzYzMDMyM2E2NjM4MzM2NDNhMzYz
MDNhM2EyZjM0MzMyZDM0MzMyMDNkM2UyMDMxMzMzNTMyMzcucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwUm
Avg9AGAwDQYJKoZIhvcNAQELBQADggEBAAZWSoCq4sd4HjtJZOqHQ9cqWhwPEkoq
4FfxJroWy5M2Mmz40osdF/MdZyTHmeBfAhiundaQv1UyriRxxjoU+rSHj7v8owV+
ON3kfAdzMy05jJryseLOvjb1iMx7iUdSYYXG0qT3+LWq/xWHc/fHJIhpbCyNq9ag
N8pfihECIaOBt9/f0euMR81XAZmYWlEpipgkWgilCGtPxqrSmULspHAtSbMAyO7V
fx2wfdUkwJvbHKNvYVDFSjXBqCInDYFodHt6EWE92ez5sh72iWZPGSg0txkWxfqY
OxTvG/jugl3EITjkI2l2elVPpOCGU9sJQpZ85WilOlKAz/6pae/uOj8=
-----END CERTIFICATE-----
Generated at Wed Apr 30 02:55:06 2025 by rpki-client