Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363031383a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363031383a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: +b95VepBOOQxcQlobZ32IdWOSD2M4ECXreDUmM9YdfU=
Subject key identifier: 42:CC:5B:B3:FA:09:EC:64:89:D6:5A:9A:2A:38:6D:68:A1:A4:32:93
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 329B0E9C5BDF24788101E17FE8E7B41F11EC5921
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363031383a3a2f34382d3438203d3e203136393039.roa
Signing time: Sat 15 Feb 2025 21:12:52 +0000
ROA not before: Sat 15 Feb 2025 21:07:52 +0000
ROA not after: Sat 14 Feb 2026 21:12:52 +0000
asID: 16909
IP address blocks: 2a14:7584:6018::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 02 Mar 2025 15:21:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:9b:0e:9c:5b:df:24:78:81:01:e1:7f:e8:e7:b4:1f:11:ec:59:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Feb 15 21:07:52 2025 GMT
Not After : Feb 14 21:12:52 2026 GMT
Subject: CN=42CC5BB3FA09EC6489D65A9A2A386D68A1A43293
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:5e:10:6d:47:f2:74:36:7a:24:58:07:d3:27:
59:93:de:6d:02:b6:0e:15:c8:fb:6a:56:11:c6:c3:
d1:8e:15:b2:ee:91:10:0c:be:a7:ab:6a:73:68:73:
b5:26:91:ea:96:cf:9f:05:f9:a4:c6:16:41:22:63:
6e:13:c5:aa:44:12:ee:26:6f:1e:51:f3:b4:16:a6:
f3:67:f6:18:22:4b:36:de:42:71:45:9e:86:4b:5c:
cf:b5:3d:6d:bc:ff:dc:b6:a2:c3:da:6c:0f:82:f2:
10:d8:fd:a4:5c:98:e5:23:72:af:2c:33:df:bf:39:
cb:6e:ca:02:a2:ba:80:1c:eb:aa:10:5f:46:e9:6c:
c7:82:1e:99:c0:88:30:c7:d2:23:1f:c2:ff:ac:3f:
1e:27:14:bd:2f:32:7e:6f:03:da:09:8b:9b:a5:f0:
e4:8d:18:3b:dd:6c:42:f9:19:ec:f3:92:c5:b1:2d:
1f:e7:fc:e3:16:2a:d9:c5:9e:01:8d:cd:12:11:5d:
12:01:b6:b7:38:10:e9:3e:a0:af:c4:96:a7:8f:5d:
69:77:cc:a7:12:07:52:8f:7f:f9:21:cd:17:df:93:
79:c8:d7:d2:a7:03:cc:47:29:9b:06:3a:c1:ec:6c:
25:52:36:f1:a8:8d:f1:c0:88:16:f0:02:7b:14:93:
65:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:CC:5B:B3:FA:09:EC:64:89:D6:5A:9A:2A:38:6D:68:A1:A4:32:93
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363031383a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6018::/48
Signature Algorithm: sha256WithRSAEncryption
98:05:59:25:04:fc:71:13:65:e4:13:ce:53:33:75:66:9b:82:
41:45:f4:fc:2a:ea:7a:66:9b:cb:41:bf:45:60:36:9b:88:5f:
76:50:f8:b4:ab:98:cc:39:34:61:7d:d2:46:eb:39:0d:39:e2:
1c:08:bf:ed:bf:6f:03:c3:67:5a:c0:e8:47:d1:42:23:ff:a5:
ee:8e:52:61:e8:7c:70:2f:a3:0a:0f:4f:9d:08:15:92:c4:12:
8e:00:ba:99:7c:33:f5:19:bb:02:80:98:1d:7f:92:03:d8:b0:
59:22:c3:c9:a3:df:13:c6:6c:fc:6d:cf:f4:bc:53:8d:5d:3d:
c2:90:b9:bd:82:c7:ec:4f:00:5a:86:a4:f6:8a:05:28:eb:6a:
03:9d:e7:ba:2e:7b:27:fc:6b:71:fd:f3:ca:20:2a:96:2b:8c:
b1:d8:f7:f0:27:f5:2e:b2:fb:e2:46:66:13:ed:0e:a8:1c:80:
2d:d7:50:05:d7:d0:cf:16:ff:b2:b7:f5:a6:62:97:c6:d4:a8:
4b:d8:03:fb:47:05:b4:95:b0:9d:53:40:dd:10:a8:b5:c7:76:
b7:49:6d:42:ce:ff:e6:52:98:4b:a5:de:0d:a3:02:be:4d:2e:
48:ad:02:46:9d:bf:40:47:00:1c:97:37:e1:95:8a:48:a6:ed:
4c:f5:6a:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:47:09 2025 by rpki-client