Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363032383a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363032383a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: lN1CQH12Xj8TTGQlpcM2rkA0iqNKRpr1Mjd9MdteP/c=
Subject key identifier: 24:29:4C:29:BB:34:D1:F1:FC:C0:D7:BB:2D:CA:96:AA:48:B9:79:56
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 7772F033BD4AC6673C16870CF769152F9E04F88C
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363032383a3a2f34382d3438203d3e203136393039.roa
Signing time: Sun 23 Feb 2025 07:58:35 +0000
ROA not before: Sun 23 Feb 2025 07:53:35 +0000
ROA not after: Sun 22 Feb 2026 07:58:35 +0000
asID: 16909
IP address blocks: 2a14:7584:6028::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 02 Mar 2025 15:21:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:72:f0:33:bd:4a:c6:67:3c:16:87:0c:f7:69:15:2f:9e:04:f8:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Feb 23 07:53:35 2025 GMT
Not After : Feb 22 07:58:35 2026 GMT
Subject: CN=24294C29BB34D1F1FCC0D7BB2DCA96AA48B97956
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:50:0e:83:85:08:31:41:c7:e4:6e:0f:c2:bf:
80:5d:7d:93:0d:50:fa:0d:a5:fb:04:9a:1e:ab:f0:
61:d3:b8:57:96:a0:6c:28:e0:64:92:0d:d1:51:df:
f5:b7:4e:9c:3e:9a:ca:14:c9:e6:e7:13:9e:68:29:
e1:64:9c:72:8f:77:b5:f5:63:ef:bc:52:55:da:75:
ac:fe:17:3b:9b:55:83:76:a8:4b:58:91:23:6d:8d:
e5:63:f1:49:84:90:f0:26:8b:83:69:8e:31:88:05:
b5:0d:e6:59:70:5f:bd:64:9b:75:a5:06:dd:27:ba:
80:9b:2b:73:35:d3:64:39:90:e1:5c:7b:27:d9:db:
18:ab:96:15:a6:af:f3:ec:e8:78:4d:ea:6b:f6:8f:
83:5a:83:5e:73:63:53:53:a3:60:5a:25:2d:a6:64:
4c:e0:5a:19:5e:25:17:69:60:ed:44:7f:73:35:c0:
76:e0:99:4e:50:a0:96:ab:92:6c:ec:20:e2:ca:8c:
46:66:ec:a1:64:86:df:13:58:bd:ec:77:0f:c4:d4:
b4:c2:b1:1d:1f:a6:4d:af:b3:15:5f:c5:89:48:13:
41:af:b0:cb:df:97:46:2b:1c:3e:3a:c7:b6:cf:5f:
35:67:e1:22:21:47:8a:a0:3b:ee:a9:51:c0:5c:e6:
9b:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:29:4C:29:BB:34:D1:F1:FC:C0:D7:BB:2D:CA:96:AA:48:B9:79:56
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363032383a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6028::/48
Signature Algorithm: sha256WithRSAEncryption
50:a2:c7:11:7b:94:10:46:47:8c:36:ca:bb:c4:79:4f:5e:5a:
bf:10:7d:25:36:7e:ee:7c:ec:36:7a:e7:e3:33:c7:94:7e:a5:
81:e3:e0:39:c8:0c:fe:c8:7d:f2:5d:60:4f:4a:78:b7:a0:2f:
17:07:c7:54:ed:9b:0e:08:50:e8:b9:79:17:93:8c:49:bc:70:
3a:68:39:74:d4:8f:65:8d:0f:b7:fc:0f:38:3b:c3:a8:cf:80:
d4:4d:b2:21:d3:5b:bd:7f:d2:b2:bf:5b:07:d4:56:fe:25:90:
91:40:4e:b9:65:60:97:d4:1e:45:e5:bb:18:52:2d:2c:74:5d:
78:ee:45:25:73:c7:09:10:23:4d:ce:9d:85:b5:a7:5d:ad:aa:
f1:c2:7c:64:40:7a:32:b9:90:42:6a:42:89:cb:f5:64:56:7f:
4b:6d:fb:54:29:97:d2:50:37:da:d4:a1:96:91:54:c6:1d:50:
6a:30:fe:01:85:ee:08:c1:a2:82:1e:5b:b9:6e:e2:40:b5:03:
85:5b:01:68:3b:9a:c8:f6:fa:6d:c5:c1:dc:f5:52:ee:60:0b:
4e:98:c6:39:5d:63:bf:d6:6b:0e:8e:75:df:da:f4:de:84:71:
ef:8c:a6:54:85:4d:27:4f:7c:cc:de:f3:ec:6e:0c:b6:40:7b:
93:e4:a9:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:50:37 2025 by rpki-client