Route Origin Authorization
$ rpki-client -vvf rpki-pp.com/repo/GOOFL/0/323630323a663833643a3a2f34332d3433203d3e203133353237.roa
File: 323630323a663833643a3a2f34332d3433203d3e203133353237.roa (raw, json)
Hash identifier: QI732N8uRmZLT1oWkBxQ0FIBlMGsjsUltCRwrWA7dl8=
Subject key identifier: 96:B0:5B:5D:25:CF:1A:B4:0A:80:79:7F:7E:21:53:98:5B:A4:7F:AA
Certificate issuer: /CN=86de965d710aeee198142f460f82d31bc5a8aae2b2f48e0c5d
Certificate serial: 75D7DC5BE37239AFD89E997D5DD90C9CFA0EC2E5
Authority key identifier: D4:60:6A:E6:F1:88:38:E2:25:7D:55:AB:B5:00:63:6F:50:92:36:E3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7c9b1947-b813-43b3-9152-c4ccbff1cde7/86de965d710aeee198142f460f82d31bc5a8aae2b2f48e0c5d.cer
Subject info access: rsync://rpki-pp.com/repo/GOOFL/0/323630323a663833643a3a2f34332d3433203d3e203133353237.roa
Signing time: Fri 28 Feb 2025 19:00:24 +0000
ROA not before: Fri 28 Feb 2025 18:55:24 +0000
ROA not after: Fri 27 Feb 2026 19:00:24 +0000
asID: 13527
IP address blocks: 2602:f83d::/43 maxlen: 43
Validation: Failed, certificate revoked on Fri 28 Feb 2025 19:39:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:d7:dc:5b:e3:72:39:af:d8:9e:99:7d:5d:d9:0c:9c:fa:0e:c2:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86de965d710aeee198142f460f82d31bc5a8aae2b2f48e0c5d
Validity
Not Before: Feb 28 18:55:24 2025 GMT
Not After : Feb 27 19:00:24 2026 GMT
Subject: CN=96B05B5D25CF1AB40A80797F7E2153985BA47FAA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:7b:ce:e6:f1:cf:4e:e7:c8:64:5f:b2:b9:a3:
12:b6:76:89:65:65:91:37:02:74:25:9e:5f:0b:20:
4d:90:db:4c:fd:ec:be:cf:b0:27:2c:6c:87:c6:f1:
fe:9d:8c:fa:64:8f:d1:01:1a:b3:20:2c:b2:66:d4:
8a:8d:f1:a3:5c:37:62:58:ed:82:99:ab:d4:a0:d8:
bb:f6:99:c4:5f:40:ac:c8:48:35:cc:78:a3:bb:dc:
ac:48:89:4d:b0:12:8e:c5:bb:d8:c4:b9:11:7a:f9:
4b:6b:df:97:88:a1:c4:57:88:6f:e7:e8:84:83:f1:
8d:1f:02:9d:0d:cd:ca:49:bd:7d:83:55:0e:1b:05:
8e:b3:2f:c6:8d:ad:30:62:11:76:e4:95:67:a7:8d:
d6:08:03:50:0a:d7:0b:42:6a:94:ef:b6:3a:bf:27:
35:b9:4e:4e:c4:a1:af:b8:fe:8c:f1:07:8c:7b:94:
ed:b3:94:61:b7:8d:25:1f:95:f2:1d:c2:dd:64:97:
ff:d1:73:f4:54:36:b2:73:cf:ab:cc:af:5d:51:52:
15:54:11:b1:d0:4d:37:94:09:54:11:45:e1:75:37:
f8:47:9b:c2:25:45:b3:9c:b9:64:e6:e3:4c:15:9d:
7d:cc:09:7f:11:61:56:eb:01:ef:64:e1:5a:e3:67:
00:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:B0:5B:5D:25:CF:1A:B4:0A:80:79:7F:7E:21:53:98:5B:A4:7F:AA
X509v3 Authority Key Identifier:
keyid:D4:60:6A:E6:F1:88:38:E2:25:7D:55:AB:B5:00:63:6F:50:92:36:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-pp.com/repo/GOOFL/0/D4606AE6F18838E2257D55ABB500636F509236E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7c9b1947-b813-43b3-9152-c4ccbff1cde7/86de965d710aeee198142f460f82d31bc5a8aae2b2f48e0c5d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-pp.com/repo/GOOFL/0/323630323a663833643a3a2f34332d3433203d3e203133353237.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:f83d::/43
Signature Algorithm: sha256WithRSAEncryption
84:80:05:86:26:3d:83:a0:2f:46:eb:04:0e:9d:51:d8:76:6c:
74:3b:eb:13:7e:8d:3a:e7:68:40:76:e6:79:4a:08:92:e2:c7:
a0:86:db:96:2e:f0:bc:5b:0e:9b:17:e9:8f:cc:7c:4a:09:39:
46:28:42:16:f1:2b:15:2e:9e:08:f3:a1:11:35:a3:d7:6d:37:
2a:8e:f2:a0:1d:30:27:c6:18:c4:22:23:0d:4d:56:ac:b4:37:
42:61:b4:0d:bb:0a:66:01:ab:95:07:e9:83:29:de:3f:6b:37:
50:f1:d0:01:d1:a1:11:3e:6f:0c:74:b5:a5:8e:1d:f1:6b:87:
53:59:69:46:9c:3a:66:83:c1:5c:43:f8:b4:00:46:77:4d:6a:
46:a0:b1:ce:81:d8:9b:9e:9f:15:9f:6a:ec:c2:17:f2:5f:35:
b8:cc:a9:16:1e:80:55:a7:86:84:f7:ad:7d:78:50:ce:0e:12:
f6:a2:45:4e:e8:d5:81:05:19:bd:f7:5c:12:95:a4:1f:9e:93:
0c:7b:6c:db:fd:d6:37:1b:b9:a1:28:1a:3e:e3:7e:ab:91:e5:
4a:53:4c:3a:91:7e:66:6a:b7:d3:28:8d:bd:54:c3:66:a9:56:
df:96:e0:5f:5a:33:5d:5e:3d:16:44:3c:22:2c:87:3b:d9:a5:
98:59:1c:2d
-----BEGIN CERTIFICATE-----
MIIFXzCCBEegAwIBAgIUddfcW+NyOa/Ynpl9XdkMnPoOwuUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyODZkZTk2NWQ3MTBhZWVlMTk4MTQyZjQ2MGY4MmQzMWJj
NWE4YWFlMmIyZjQ4ZTBjNWQwHhcNMjUwMjI4MTg1NTI0WhcNMjYwMjI3MTkwMDI0
WjAzMTEwLwYDVQQDEyg5NkIwNUI1RDI1Q0YxQUI0MEE4MDc5N0Y3RTIxNTM5ODVC
QTQ3RkFBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsXvO5vHPTufI
ZF+yuaMStnaJZWWRNwJ0JZ5fCyBNkNtM/ey+z7AnLGyHxvH+nYz6ZI/RARqzICyy
ZtSKjfGjXDdiWO2CmavUoNi79pnEX0CsyEg1zHiju9ysSIlNsBKOxbvYxLkRevlL
a9+XiKHEV4hv5+iEg/GNHwKdDc3KSb19g1UOGwWOsy/Gja0wYhF25JVnp43WCANQ
CtcLQmqU77Y6vyc1uU5OxKGvuP6M8QeMe5Tts5Rht40lH5XyHcLdZJf/0XP0VDay
c8+rzK9dUVIVVBGx0E03lAlUEUXhdTf4R5vCJUWznLlk5uNMFZ19zAl/EWFW6wHv
ZOFa42cAqwIDAQABo4ICXzCCAlswHQYDVR0OBBYEFJawW10lzxq0CoB5f34hU5hb
pH+qMB8GA1UdIwQYMBaAFNRgaubxiDjiJX1Vq7UAY29QkjbjMA4GA1UdDwEB/wQE
AwIHgDBeBgNVHR8EVzBVMFOgUaBPhk1yc3luYzovL3Jwa2ktcHAuY29tL3JlcG8v
R09PRkwvMC9ENDYwNkFFNkYxODgzOEUyMjU3RDU1QUJCNTAwNjM2RjUwOTIzNkUz
LmNybDCB8wYIKwYBBQUHAQEEgeYwgeMwgeAGCCsGAQUFBzAChoHTcnN5bmM6Ly9y
cGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4
MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1iYjFmLTQ4YjYtYmYz
Mi1jOTQ5MjI4NmYxOTUvN2M5YjE5NDctYjgxMy00M2IzLTkxNTItYzRjY2JmZjFj
ZGU3Lzg2ZGU5NjVkNzEwYWVlZTE5ODE0MmY0NjBmODJkMzFiYzVhOGFhZTJiMmY0
OGUwYzVkLmNlcjB1BggrBgEFBQcBCwRpMGcwZQYIKwYBBQUHMAuGWXJzeW5jOi8v
cnBraS1wcC5jb20vcmVwby9HT09GTC8wLzMyMzYzMDMyM2E2NjM4MzM2NDNhM2Ey
ZjM0MzMyZDM0MzMyMDNkM2UyMDMxMzMzNTMyMzcucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwUmAvg9AAAw
DQYJKoZIhvcNAQELBQADggEBAISABYYmPYOgL0brBA6dUdh2bHQ76xN+jTrnaEB2
5nlKCJLix6CG25Yu8LxbDpsX6Y/MfEoJOUYoQhbxKxUungjzoRE1o9dtNyqO8qAd
MCfGGMQiIw1NVqy0N0JhtA27CmYBq5UH6YMp3j9rN1Dx0AHRoRE+bwx0taWOHfFr
h1NZaUacOmaDwVxD+LQARndNakagsc6B2JuenxWfauzCF/JfNbjMqRYegFWnhoT3
rX14UM4OEvaiRU7o1YEFGb33XBKVpB+ekwx7bNv91jcbuaEoGj7jfquR5UpTTDqR
fmZqt9Mojb1Uw2apVt+W4F9aM11ePRZEPCIshzvZpZhZHC0=
-----END CERTIFICATE-----
Generated at Tue Jun 17 10:01:33 2025 by rpki-client