Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363031393a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363031393a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: vKoNpNVoOtJmwF2QcHc7r1H0/O26txnyilxm9npTfDY=
Subject key identifier: 30:36:05:A8:D8:B1:EA:17:59:BA:9E:AF:FA:3C:E4:DA:A4:CD:65:29
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 0743A86FC5CEAB3D4A86964705E1DBC897DF1160
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363031393a3a2f34382d3438203d3e203136393039.roa
Signing time: Sat 15 Feb 2025 21:12:53 +0000
ROA not before: Sat 15 Feb 2025 21:07:53 +0000
ROA not after: Sat 14 Feb 2026 21:12:53 +0000
asID: 16909
IP address blocks: 2a14:7584:6019::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 02 Mar 2025 15:21:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:43:a8:6f:c5:ce:ab:3d:4a:86:96:47:05:e1:db:c8:97:df:11:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Feb 15 21:07:53 2025 GMT
Not After : Feb 14 21:12:53 2026 GMT
Subject: CN=303605A8D8B1EA1759BA9EAFFA3CE4DAA4CD6529
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:af:d5:76:b5:7e:5e:23:75:f6:ea:4f:98:ca:
c9:ac:19:9a:40:51:75:55:9e:79:a9:11:ee:16:35:
b2:2f:83:f7:26:e5:10:3f:13:68:9d:b8:3d:e6:98:
8a:90:68:52:81:a4:95:43:18:52:d9:2f:b0:b1:ce:
17:a4:bc:a7:ce:68:3a:48:45:79:c1:f2:31:7a:a9:
4d:09:61:ed:a1:b0:9a:a7:46:d4:a3:93:f2:c5:21:
49:15:4d:6a:aa:2a:a6:67:f4:a2:61:a2:ca:a6:41:
93:4c:79:70:74:c9:2f:eb:53:40:87:ce:b5:bf:e3:
78:91:97:33:53:e5:58:dd:68:b4:5c:62:cd:40:c7:
41:84:e1:5a:f1:f4:02:c7:ce:bd:bf:03:24:b6:b4:
cf:27:59:db:a6:1a:91:8f:ac:76:49:46:1f:9a:3d:
ef:80:50:b3:90:c9:7f:13:ae:06:d4:71:ef:20:64:
d3:7c:f3:85:1f:35:42:ef:9c:a7:f0:09:57:d2:76:
4f:ae:c7:13:4c:f1:b5:46:07:99:9f:46:25:8b:cb:
93:46:e8:af:e7:37:8f:36:ab:32:12:a7:f3:98:ca:
55:d6:98:7b:45:2d:aa:ed:cf:08:85:32:55:a6:8b:
ad:7b:fc:3f:f7:77:a9:23:1f:66:89:8a:d1:1b:a6:
5f:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:36:05:A8:D8:B1:EA:17:59:BA:9E:AF:FA:3C:E4:DA:A4:CD:65:29
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363031393a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6019::/48
Signature Algorithm: sha256WithRSAEncryption
b2:d9:5e:8e:39:e4:cb:2b:1e:c9:1b:a7:c2:ad:93:30:77:da:
6e:7b:2d:1c:ab:fc:52:58:7d:83:6a:58:c8:30:fa:90:7e:07:
14:ef:25:60:a0:85:9c:28:8e:8c:0a:ca:d6:bb:b4:63:04:d6:
b6:54:cb:4e:d3:12:2d:0e:3a:16:e3:1e:ba:b5:2b:c5:d0:cf:
7d:a0:53:d3:d3:82:de:0c:d8:35:84:ee:50:68:d7:bc:29:ff:
42:2e:89:8d:04:8e:ea:7b:6a:27:6c:82:6e:6a:e9:b5:c3:c8:
34:99:04:03:38:60:dd:5c:48:60:f7:ac:b3:49:2b:b7:5f:17:
db:1b:d9:10:38:dd:0b:91:2e:74:d7:21:43:1d:42:9d:35:97:
1a:c0:a8:0f:81:d2:1a:da:8e:c5:eb:70:b8:45:82:e2:f4:3d:
35:d7:ba:f8:66:13:6d:eb:14:4d:c1:bb:c4:34:dd:36:b6:74:
94:2d:0d:c5:45:81:1e:c5:2b:dc:87:cf:2e:bb:c4:23:70:12:
9c:ec:6b:81:5e:d5:cb:62:ee:6b:a8:f9:ab:cf:2e:1d:93:5c:
87:34:bb:77:f0:ee:76:4f:87:57:1b:b7:20:7c:d1:ac:79:ec:
bc:50:b8:88:87:4f:18:c0:e8:a5:de:2a:07:31:f9:2d:1a:c3:
69:5b:d4:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:47:03 2025 by rpki-client