Route Origin Authorization
$ rpki-client -vvf rpki-pp.com/repo/GOOFL/0/323630323a663833643a61313a3a2f34382d3438203d3e203437303635.roa
File: 323630323a663833643a61313a3a2f34382d3438203d3e203437303635.roa (raw, json)
Hash identifier: jjmMiDhPGYoY1tzGy8cn0VuPvFfN2wSmm1pzs/JPL/E=
Subject key identifier: 35:A8:E1:C6:C6:F0:15:9C:63:76:00:E9:6B:52:3B:FE:DC:4C:97:74
Certificate issuer: /CN=86de965d710aeee198142f460f82d31bc5a8aae2b2f48e0c5d
Certificate serial: 6223B81FFF804708D47A20CCCD18306337DAD036
Authority key identifier: D4:60:6A:E6:F1:88:38:E2:25:7D:55:AB:B5:00:63:6F:50:92:36:E3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7c9b1947-b813-43b3-9152-c4ccbff1cde7/86de965d710aeee198142f460f82d31bc5a8aae2b2f48e0c5d.cer
Subject info access: rsync://rpki-pp.com/repo/GOOFL/0/323630323a663833643a61313a3a2f34382d3438203d3e203437303635.roa
Signing time: Thu 27 Mar 2025 03:15:32 +0000
ROA not before: Thu 27 Mar 2025 03:10:32 +0000
ROA not after: Thu 26 Mar 2026 03:15:32 +0000
asID: 47065
IP address blocks: 2602:f83d:a1::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 27 Mar 2025 03:15:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:23:b8:1f:ff:80:47:08:d4:7a:20:cc:cd:18:30:63:37:da:d0:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86de965d710aeee198142f460f82d31bc5a8aae2b2f48e0c5d
Validity
Not Before: Mar 27 03:10:32 2025 GMT
Not After : Mar 26 03:15:32 2026 GMT
Subject: CN=35A8E1C6C6F0159C637600E96B523BFEDC4C9774
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:8f:19:63:a3:2f:fd:13:22:23:f1:2a:8c:d8:
21:bc:3d:d9:ee:f3:0b:c9:bb:d2:d7:c4:ee:6a:29:
1f:65:79:e7:19:f4:90:4d:f2:19:be:57:d9:0d:dc:
ff:41:25:d6:6b:88:55:fe:06:fb:b7:ff:f6:4d:eb:
09:b4:df:3e:ad:5f:fb:51:2d:9d:bb:19:a0:d3:10:
5c:14:1b:02:9a:dd:9d:07:3f:4d:3a:a7:4f:cf:fb:
ab:0a:94:ee:be:87:44:e9:ac:b8:5a:e5:a0:cd:ce:
4b:50:a4:32:d4:ec:18:36:d8:a5:d7:7d:7f:cb:b0:
82:dc:bb:c8:90:f8:8e:8d:72:eb:24:54:81:9b:6b:
e5:4f:99:fe:23:a2:e4:21:91:37:2d:4f:2c:22:b8:
f4:1c:4c:e1:11:a0:e1:c1:21:c5:1b:04:9c:09:69:
fe:48:76:25:f3:cc:75:52:1d:a8:b0:e0:31:77:30:
e0:db:41:c0:d7:bb:bf:78:d2:78:d8:ca:76:d5:db:
e9:7f:e5:4c:17:95:31:15:8b:b2:c1:96:b4:15:d6:
a3:a0:81:26:3e:fe:0d:cc:91:21:57:dd:6a:13:24:
99:8d:61:3b:95:49:57:df:ad:15:cf:d4:c8:b9:48:
73:87:84:d6:62:f5:cb:cb:97:42:0a:ed:a3:7d:c2:
b3:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:A8:E1:C6:C6:F0:15:9C:63:76:00:E9:6B:52:3B:FE:DC:4C:97:74
X509v3 Authority Key Identifier:
keyid:D4:60:6A:E6:F1:88:38:E2:25:7D:55:AB:B5:00:63:6F:50:92:36:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-pp.com/repo/GOOFL/0/D4606AE6F18838E2257D55ABB500636F509236E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7c9b1947-b813-43b3-9152-c4ccbff1cde7/86de965d710aeee198142f460f82d31bc5a8aae2b2f48e0c5d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-pp.com/repo/GOOFL/0/323630323a663833643a61313a3a2f34382d3438203d3e203437303635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:f83d:a1::/48
Signature Algorithm: sha256WithRSAEncryption
a1:43:e9:0d:94:85:be:9c:1a:c7:c5:fb:6c:14:8a:53:72:6c:
e7:c2:08:ba:58:c5:87:83:c3:85:21:04:90:39:c4:ef:07:c4:
15:ee:42:14:bf:7b:30:9b:55:50:4b:d2:b3:55:93:a6:71:80:
ef:f5:1c:ef:22:73:42:e8:45:09:94:a1:1e:97:bc:15:82:2c:
aa:f4:c6:70:4c:1c:d4:0c:15:59:d5:f0:d5:2a:a0:36:3c:21:
09:b1:69:e9:de:8c:3d:b5:95:e9:5e:7a:a4:ce:b5:f0:91:c5:
0c:96:ba:06:83:8c:72:a7:de:2a:74:08:98:6e:b3:84:bc:85:
88:5b:b5:e7:69:95:dc:ca:56:25:77:15:86:dc:6b:b7:f6:3f:
61:37:24:e5:07:cc:9a:f0:d5:01:65:0d:89:ca:86:f8:8e:b3:
4e:47:6a:d8:57:48:a4:f7:e2:b1:7d:02:2b:c5:40:2e:27:ea:
85:22:a1:7a:c6:32:58:60:e6:11:c6:7c:7f:cb:3f:1c:85:9a:
2f:55:a9:6c:e8:88:12:f8:c9:48:16:d7:a6:86:62:7a:5f:fb:
99:96:71:df:f3:e6:42:2f:f4:cd:d9:53:19:23:b7:d7:b9:4d:
8c:d1:4d:3c:e2:2c:b5:27:b1:ab:d0:6a:8d:be:d3:8a:09:d0:
c5:d0:71:2c
-----BEGIN CERTIFICATE-----
MIIFZTCCBE2gAwIBAgIUYiO4H/+ARwjUeiDMzRgwYzfa0DYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyODZkZTk2NWQ3MTBhZWVlMTk4MTQyZjQ2MGY4MmQzMWJj
NWE4YWFlMmIyZjQ4ZTBjNWQwHhcNMjUwMzI3MDMxMDMyWhcNMjYwMzI2MDMxNTMy
WjAzMTEwLwYDVQQDEygzNUE4RTFDNkM2RjAxNTlDNjM3NjAwRTk2QjUyM0JGRURD
NEM5Nzc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqI8ZY6Mv/RMi
I/EqjNghvD3Z7vMLybvS18TuaikfZXnnGfSQTfIZvlfZDdz/QSXWa4hV/gb7t//2
TesJtN8+rV/7US2duxmg0xBcFBsCmt2dBz9NOqdPz/urCpTuvodE6ay4WuWgzc5L
UKQy1OwYNtil131/y7CC3LvIkPiOjXLrJFSBm2vlT5n+I6LkIZE3LU8sIrj0HEzh
EaDhwSHFGwScCWn+SHYl88x1Uh2osOAxdzDg20HA17u/eNJ42Mp21dvpf+VMF5Ux
FYuywZa0FdajoIEmPv4NzJEhV91qEySZjWE7lUlX360Vz9TIuUhzh4TWYvXLy5dC
Cu2jfcKz/wIDAQABo4ICZTCCAmEwHQYDVR0OBBYEFDWo4cbG8BWcY3YA6WtSO/7c
TJd0MB8GA1UdIwQYMBaAFNRgaubxiDjiJX1Vq7UAY29QkjbjMA4GA1UdDwEB/wQE
AwIHgDBeBgNVHR8EVzBVMFOgUaBPhk1yc3luYzovL3Jwa2ktcHAuY29tL3JlcG8v
R09PRkwvMC9ENDYwNkFFNkYxODgzOEUyMjU3RDU1QUJCNTAwNjM2RjUwOTIzNkUz
LmNybDCB8wYIKwYBBQUHAQEEgeYwgeMwgeAGCCsGAQUFBzAChoHTcnN5bmM6Ly9y
cGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4
MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1iYjFmLTQ4YjYtYmYz
Mi1jOTQ5MjI4NmYxOTUvN2M5YjE5NDctYjgxMy00M2IzLTkxNTItYzRjY2JmZjFj
ZGU3Lzg2ZGU5NjVkNzEwYWVlZTE5ODE0MmY0NjBmODJkMzFiYzVhOGFhZTJiMmY0
OGUwYzVkLmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuGX3JzeW5jOi8v
cnBraS1wcC5jb20vcmVwby9HT09GTC8wLzMyMzYzMDMyM2E2NjM4MzM2NDNhNjEz
MTNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDM0MzczMDM2MzUucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAm
Avg9AKEwDQYJKoZIhvcNAQELBQADggEBAKFD6Q2Uhb6cGsfF+2wUilNybOfCCLpY
xYeDw4UhBJA5xO8HxBXuQhS/ezCbVVBL0rNVk6ZxgO/1HO8ic0LoRQmUoR6XvBWC
LKr0xnBMHNQMFVnV8NUqoDY8IQmxaenejD21leleeqTOtfCRxQyWugaDjHKn3ip0
CJhus4S8hYhbtedpldzKViV3FYbca7f2P2E3JOUHzJrw1QFlDYnKhviOs05HathX
SKT34rF9AivFQC4n6oUioXrGMlhg5hHGfH/LPxyFmi9VqWzoiBL4yUgW16aGYnpf
+5mWcd/z5kIv9M3ZUxkjt9e5TYzRTTziLLUnsavQao2+04oJ0MXQcSw=
-----END CERTIFICATE-----
Generated at Tue Jun 17 12:54:19 2025 by rpki-client