Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363031343a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363031343a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: pbVq3DL3fL4mAUhRkQFwOhl7bSH5sIQLQ5Lqx8TMp90=
Subject key identifier: CE:03:62:01:31:CC:E5:5A:F3:AB:0B:92:C0:56:02:62:89:57:E4:26
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 21A6938BE5F6F4AF5750F83DD008BB58BA91485E
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363031343a3a2f34382d3438203d3e203136393039.roa
Signing time: Sat 15 Feb 2025 21:12:49 +0000
ROA not before: Sat 15 Feb 2025 21:07:49 +0000
ROA not after: Sat 14 Feb 2026 21:12:49 +0000
asID: 16909
IP address blocks: 2a14:7584:6014::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 02 Mar 2025 15:21:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:a6:93:8b:e5:f6:f4:af:57:50:f8:3d:d0:08:bb:58:ba:91:48:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Feb 15 21:07:49 2025 GMT
Not After : Feb 14 21:12:49 2026 GMT
Subject: CN=CE03620131CCE55AF3AB0B92C05602628957E426
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:8c:5c:dd:82:f6:ae:ba:2e:99:11:fa:45:7d:
89:5b:7d:50:23:4b:2d:c8:18:e9:c4:5e:40:a3:62:
6b:e9:f6:43:97:b3:ec:e0:e2:4f:53:17:dd:5a:87:
56:c2:dc:11:85:de:1b:63:48:70:9d:87:40:93:1a:
1a:0d:f1:0d:59:e5:b8:d5:04:c2:fd:7b:0d:b7:53:
db:d4:d0:bd:2b:52:6e:a5:55:99:32:4f:f5:77:9c:
46:83:a7:df:ab:73:62:fd:40:e4:6a:34:db:28:35:
02:0b:0f:02:dc:dd:98:79:18:ce:0d:8a:58:8b:a5:
a4:6f:cb:05:6d:a0:12:15:84:39:0a:bd:3d:23:56:
2b:8d:fd:fa:07:7a:2a:f1:ae:24:a3:25:41:11:fc:
b5:12:a9:f9:e7:e7:cb:4b:af:bf:7e:3d:d0:d1:88:
24:dc:8f:ab:86:57:9b:ef:f7:ba:30:07:60:93:08:
51:63:5d:9d:ab:2f:16:f7:b3:14:87:79:93:f0:84:
59:e5:71:14:91:aa:cf:81:9f:98:30:df:ff:ba:61:
8d:4d:74:d9:46:5c:fb:c9:ab:a2:a5:df:34:4d:a5:
b4:4f:6d:6c:11:c3:5b:49:4e:f6:d5:c3:d7:22:8c:
9c:34:33:18:18:bd:de:eb:ae:a0:65:53:09:f6:32:
88:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:03:62:01:31:CC:E5:5A:F3:AB:0B:92:C0:56:02:62:89:57:E4:26
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363031343a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6014::/48
Signature Algorithm: sha256WithRSAEncryption
6e:19:44:71:22:d6:bd:c1:54:d7:07:fb:ec:eb:94:2d:9a:a6:
de:aa:56:fd:6a:24:f7:67:28:00:a5:bf:1f:5f:7a:5b:c1:b0:
16:a9:14:f0:a4:29:22:7d:4c:92:28:6e:9c:c5:40:03:04:c8:
bb:2a:6d:c7:46:39:4d:38:11:56:fe:5a:11:7a:b5:88:e1:fe:
ac:f3:3f:3b:85:cb:06:51:42:36:a8:58:26:e9:f1:bf:10:74:
88:09:58:85:92:b2:6c:f2:2b:01:fb:52:ab:d2:c8:81:90:b7:
6a:8a:6b:46:b8:13:41:aa:ed:68:11:77:10:5f:ce:eb:4e:0a:
59:e9:19:c0:57:fd:47:a0:2e:57:28:8c:33:c4:be:b1:c2:a4:
e4:b2:fc:4d:f0:74:a4:69:11:8c:9f:17:45:d4:52:6e:b5:e5:
07:c6:23:44:14:ea:58:6a:fa:d1:56:31:7b:03:da:ff:de:16:
c9:15:5f:d6:5a:22:ab:4e:44:22:c1:f6:5e:48:d1:3b:79:69:
fe:e0:d2:64:d6:a2:e2:f8:e2:e7:f5:3e:cf:4e:8f:c0:2a:35:
30:22:14:9f:7b:bc:56:e7:7a:c5:59:23:9a:6b:5e:3d:33:43:
90:34:89:22:30:85:6e:fa:b9:b4:68:67:17:0b:e1:d6:7d:aa:
a9:c9:f6:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:42:25 2025 by rpki-client