Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363032303a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363032303a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: rlATBPwGJws+UmASOxh9ZeUFZlAieZIumPpHNKcgWes=
Subject key identifier: B2:C4:5C:CF:D9:72:E6:F6:6E:11:0D:43:39:3B:C4:F1:86:29:23:6A
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 4B082E8B66AAABFD4BA59AD40FA9336D3A9E8FBD
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363032303a3a2f34382d3438203d3e203136393039.roa
Signing time: Fri 27 Dec 2024 18:02:42 +0000
ROA not before: Fri 27 Dec 2024 17:57:42 +0000
ROA not after: Fri 26 Dec 2025 18:02:42 +0000
asID: 16909
IP address blocks: 2a14:7584:6020::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 01 Jan 2025 21:53:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:08:2e:8b:66:aa:ab:fd:4b:a5:9a:d4:0f:a9:33:6d:3a:9e:8f:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Dec 27 17:57:42 2024 GMT
Not After : Dec 26 18:02:42 2025 GMT
Subject: CN=B2C45CCFD972E6F66E110D43393BC4F18629236A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:72:5e:b3:89:df:11:fd:1c:07:f6:cc:fb:d2:
6f:7f:26:30:fe:f7:e0:2e:9d:d6:df:5a:53:ca:1a:
b8:0d:b7:ac:43:83:f8:db:ad:13:8b:d2:af:1f:a9:
38:eb:6b:4c:1d:bd:27:df:ca:84:86:7a:94:6c:57:
13:6c:3d:fd:ad:8b:4e:bc:68:f6:d2:9e:88:6f:bf:
ea:5f:31:f1:36:50:56:97:bd:6d:76:90:cd:c0:8a:
fa:7e:cc:95:2c:d8:b0:e1:87:7f:b7:60:5c:f8:d5:
f3:2e:ac:01:5a:00:5b:62:2e:fc:94:e3:54:8a:2b:
e3:67:37:84:6a:6c:20:0d:6b:38:d3:97:4e:09:7a:
d9:83:e5:0c:6e:2d:f3:9f:99:96:9a:33:88:e8:d2:
1d:fd:ba:42:aa:c0:38:95:5a:87:99:26:0a:7d:79:
50:6a:09:e1:2b:56:72:5f:54:02:ed:74:22:69:29:
06:e3:c3:2a:fd:04:1a:e8:fd:ae:09:97:7b:b9:be:
e4:c5:9a:03:12:e7:0a:4d:65:88:d5:77:cd:d1:8a:
a6:9f:48:56:2a:21:4b:75:c2:33:54:6a:ec:35:d9:
10:54:73:61:51:b9:05:ad:58:bc:63:ab:6f:35:52:
1a:33:54:53:fd:31:27:21:27:b5:ef:51:ea:5d:68:
ee:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:C4:5C:CF:D9:72:E6:F6:6E:11:0D:43:39:3B:C4:F1:86:29:23:6A
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363032303a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6020::/48
Signature Algorithm: sha256WithRSAEncryption
aa:b5:bf:b3:42:75:69:30:99:25:1a:68:30:45:a4:29:15:59:
24:4f:d5:06:73:b8:e5:f7:ab:4b:19:d9:46:36:f1:f4:57:82:
07:a4:0d:f4:ea:8d:7d:19:6d:3c:1e:c4:f3:92:49:ad:74:24:
d0:f6:af:cf:03:da:23:9b:88:14:ae:e8:c7:16:05:2e:0f:41:
e8:b6:92:d0:62:b8:64:f9:74:70:2e:2a:1a:9b:d6:57:9e:18:
71:62:2b:76:99:59:5c:2a:37:51:bf:ca:c9:56:2d:45:a3:e5:
0e:39:09:78:79:ff:f7:24:af:ad:80:cd:5a:d3:6e:a8:91:59:
1e:44:35:ce:cd:15:e2:4a:e8:05:dc:10:fa:b8:8b:bc:70:37:
ee:6c:7c:9a:fe:25:b0:c4:50:05:b7:33:de:05:07:fd:7e:c6:
3c:18:e0:c1:0a:41:0a:7c:13:c1:5d:7b:c3:e6:93:bc:d7:97:
83:ce:c2:70:1d:77:70:6d:18:bc:3b:4c:56:02:3c:7c:2f:ce:
8a:a6:3f:a8:5d:cb:a9:58:dc:b3:43:e8:77:61:33:95:a7:18:
39:61:30:dd:5f:79:34:4b:ec:76:a7:f8:82:0a:05:f2:76:9b:
1a:74:e2:39:11:22:89:49:5d:7c:95:d6:ca:38:53:1a:b5:72:
ae:d4:81:1d
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUSwgui2aqq/1LpZrUD6kzbTqej70wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NCMjZGNzY0MkZENkI0Q0JGMzVGQkVFNDU1RjFFRkIw
QzlGMEE0NTAeFw0yNDEyMjcxNzU3NDJaFw0yNTEyMjYxODAyNDJaMDMxMTAvBgNV
BAMTKEIyQzQ1Q0NGRDk3MkU2RjY2RTExMEQ0MzM5M0JDNEYxODYyOTIzNkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8cl6zid8R/RwH9sz70m9/JjD+
9+AundbfWlPKGrgNt6xDg/jbrROL0q8fqTjra0wdvSffyoSGepRsVxNsPf2ti068
aPbSnohvv+pfMfE2UFaXvW12kM3Aivp+zJUs2LDhh3+3YFz41fMurAFaAFtiLvyU
41SKK+NnN4RqbCANazjTl04JetmD5QxuLfOfmZaaM4jo0h39ukKqwDiVWoeZJgp9
eVBqCeErVnJfVALtdCJpKQbjwyr9BBro/a4Jl3u5vuTFmgMS5wpNZYjVd83Riqaf
SFYqIUt1wjNUauw12RBUc2FRuQWtWLxjq281UhozVFP9MSchJ7XvUepdaO6JAgMB
AAGjggJoMIICZDAdBgNVHQ4EFgQUssRcz9ly5vZuEQ1DOTvE8YYpI2owHwYDVR0j
BBgwFoAUfLJvdkL9a0y/NfvuRV8e+wyfCkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMS83Q0IyNkY3NjQy
RkQ2QjRDQkYzNUZCRUU0NTVGMUVGQjBDOUYwQTQ1LmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdm
MzgyNC8wLzdDQjI2Rjc2NDJGRDZCNENCRjM1RkJFRTQ1NUYxRUZCMEM5RjBBNDUu
Y2VyMIGqBggrBgEFBQcBCwSBnTCBmjCBlwYIKwYBBQUHMAuGgYpyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMS8zMjYxMzEzNDNhMzczNTM4MzQzYTM2MzAzMjMwM2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzEzNjM5MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoUdYRgIDAN
BgkqhkiG9w0BAQsFAAOCAQEAqrW/s0J1aTCZJRpoMEWkKRVZJE/VBnO45ferSxnZ
Rjbx9FeCB6QN9OqNfRltPB7E85JJrXQk0PavzwPaI5uIFK7oxxYFLg9B6LaS0GK4
ZPl0cC4qGpvWV54YcWIrdplZXCo3Ub/KyVYtRaPlDjkJeHn/9ySvrYDNWtNuqJFZ
HkQ1zs0V4kroBdwQ+riLvHA37mx8mv4lsMRQBbcz3gUH/X7GPBjgwQpBCnwTwV17
w+aTvNeXg87CcB13cG0YvDtMVgI8fC/OiqY/qF3LqVjcs0Pod2EzlacYOWEw3V95
NEvsdqf4ggoF8nabGnTiOREiiUldfJXWyjhTGrVyrtSBHQ==
-----END CERTIFICATE-----
Generated at Sat Apr 19 00:44:47 2025 by rpki-client