Route Origin Authorization
$ rpki-client -vvf rpki-pp.com/repo/GOOFL/0/323630323a663833643a61303a3a2f34332d3433203d3e203133353237.roa
File: 323630323a663833643a61303a3a2f34332d3433203d3e203133353237.roa (raw, json)
Hash identifier: kLomKB+NqpJLgSFtub0aiki1opbM+jz8KE4o5klMHNg=
Subject key identifier: F0:7E:55:C7:37:4F:E3:87:DB:6B:40:34:52:21:33:FF:D5:75:86:D9
Certificate issuer: /CN=86de965d710aeee198142f460f82d31bc5a8aae2b2f48e0c5d
Certificate serial: 4F199A3C86E3A299427D4F419B760963AD1B6FAB
Authority key identifier: D4:60:6A:E6:F1:88:38:E2:25:7D:55:AB:B5:00:63:6F:50:92:36:E3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7c9b1947-b813-43b3-9152-c4ccbff1cde7/86de965d710aeee198142f460f82d31bc5a8aae2b2f48e0c5d.cer
Subject info access: rsync://rpki-pp.com/repo/GOOFL/0/323630323a663833643a61303a3a2f34332d3433203d3e203133353237.roa
Signing time: Fri 28 Feb 2025 19:00:09 +0000
ROA not before: Fri 28 Feb 2025 18:55:09 +0000
ROA not after: Fri 27 Feb 2026 19:00:09 +0000
asID: 13527
IP address blocks: 2602:f83d:a0::/43 maxlen: 43
Validation: Failed, certificate revoked on Fri 28 Feb 2025 19:39:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:19:9a:3c:86:e3:a2:99:42:7d:4f:41:9b:76:09:63:ad:1b:6f:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86de965d710aeee198142f460f82d31bc5a8aae2b2f48e0c5d
Validity
Not Before: Feb 28 18:55:09 2025 GMT
Not After : Feb 27 19:00:09 2026 GMT
Subject: CN=F07E55C7374FE387DB6B4034522133FFD57586D9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:26:cc:7f:e7:0d:9f:08:4e:1e:8a:42:44:b5:
c5:37:13:54:5d:d7:ea:c6:9c:a5:41:64:03:6d:3e:
85:71:9b:0d:a5:9f:82:76:43:44:1f:20:d1:1b:2b:
0d:70:50:90:a4:27:9c:b9:ec:85:92:12:3a:f5:73:
0e:8b:35:29:d2:23:3c:da:ea:7c:41:d0:bc:a8:28:
03:f9:d8:3d:d5:00:c0:be:63:ec:57:3a:be:4e:33:
03:f1:80:03:3d:60:ac:14:e2:20:95:02:1f:ad:0f:
f3:5f:1d:06:ca:1c:93:19:fe:9a:6e:41:27:5e:d3:
4c:84:13:69:86:4d:f5:e0:e9:18:64:31:0d:24:25:
2e:f7:3d:2b:88:fc:39:7d:46:46:99:fd:55:ea:56:
f5:71:22:19:b7:13:ab:bd:44:a7:f8:78:a1:4a:21:
df:01:89:b5:d2:4a:b1:a1:09:ae:d4:eb:26:07:43:
af:0a:6b:fc:02:73:1c:87:2f:41:a1:61:35:0d:91:
74:fe:b5:eb:11:27:3e:b4:72:4d:ff:b8:7d:f3:ef:
3f:4f:50:a4:e9:cf:c2:e2:34:53:d6:1d:04:00:1e:
6b:65:3c:87:50:e8:1c:26:28:0a:01:f3:cc:d1:3a:
5d:98:ec:52:b8:c9:84:ff:9f:a3:54:db:54:f0:93:
d4:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:7E:55:C7:37:4F:E3:87:DB:6B:40:34:52:21:33:FF:D5:75:86:D9
X509v3 Authority Key Identifier:
keyid:D4:60:6A:E6:F1:88:38:E2:25:7D:55:AB:B5:00:63:6F:50:92:36:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-pp.com/repo/GOOFL/0/D4606AE6F18838E2257D55ABB500636F509236E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7c9b1947-b813-43b3-9152-c4ccbff1cde7/86de965d710aeee198142f460f82d31bc5a8aae2b2f48e0c5d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-pp.com/repo/GOOFL/0/323630323a663833643a61303a3a2f34332d3433203d3e203133353237.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:f83d:a0::/43
Signature Algorithm: sha256WithRSAEncryption
9f:24:1d:29:ba:a8:49:63:c6:38:d6:72:0d:9c:70:f8:f9:fe:
65:be:c0:f3:71:ef:23:03:26:9d:62:a7:11:9e:d1:6c:04:b6:
3a:51:3f:24:76:61:07:6d:f2:56:05:81:d5:2f:49:59:66:12:
82:b4:50:ab:e0:51:3f:49:59:dd:de:de:de:5c:ef:f9:50:43:
67:68:43:17:8c:7f:da:0a:9a:f0:03:33:63:3c:b1:9d:e7:56:
e1:82:e2:de:93:b0:33:2b:63:16:68:fd:67:da:29:a0:1c:4c:
6d:5f:64:69:9d:72:c2:f7:dd:0e:ed:fe:cc:ae:1f:f3:53:e6:
94:ca:e7:2d:5c:d9:c9:13:90:66:ed:a4:fa:62:63:a9:7b:1d:
a3:2b:e7:8f:47:79:02:2a:d4:de:04:9a:06:fa:9d:18:28:d0:
05:66:35:e9:13:2f:d4:10:9b:d8:a1:36:bf:af:f6:06:ea:78:
a4:7d:9a:f8:b3:99:31:4e:dc:20:25:84:f6:0a:48:6a:92:e9:
bd:85:fb:96:20:f6:88:8e:a3:cf:ef:54:93:ea:00:16:b5:93:
45:58:5a:20:2c:0e:e5:65:5a:78:90:3e:3d:cb:5e:01:8b:90:
34:95:74:9a:5f:8c:fc:8b:73:13:f9:b7:97:44:fb:51:c0:2e:
8a:c0:ba:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 11:09:07 2025 by rpki-client