Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363032653a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363032653a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: tinmmbGfnAtHr1FFUAtDP70x+Ze4VkA4wTB84PTOqa0=
Subject key identifier: 7D:B4:EA:10:1F:4A:61:FC:93:F1:81:F1:E1:EB:EA:D9:80:62:BB:6C
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 291CF40DCBCC653F0065BB07280B99C3D68E5096
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363032653a3a2f34382d3438203d3e203136393039.roa
Signing time: Sun 23 Feb 2025 07:58:56 +0000
ROA not before: Sun 23 Feb 2025 07:53:56 +0000
ROA not after: Sun 22 Feb 2026 07:58:56 +0000
asID: 16909
IP address blocks: 2a14:7584:602e::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 02 Mar 2025 15:21:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:1c:f4:0d:cb:cc:65:3f:00:65:bb:07:28:0b:99:c3:d6:8e:50:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Feb 23 07:53:56 2025 GMT
Not After : Feb 22 07:58:56 2026 GMT
Subject: CN=7DB4EA101F4A61FC93F181F1E1EBEAD98062BB6C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:94:42:ef:c2:11:8a:71:a4:c3:a9:41:98:f6:
8d:b1:70:35:19:35:50:6f:bc:07:5e:f1:85:d8:1b:
3d:1c:ca:7b:27:6c:c3:d1:f5:f7:dd:20:4c:0a:ec:
bc:04:d9:70:ab:45:36:ec:e5:44:3b:e5:55:c2:05:
ae:e1:0d:aa:5e:f8:bd:1c:d8:c7:11:a3:74:fc:70:
c0:8d:bc:6a:9e:77:da:a2:f9:2a:2b:98:f1:f6:09:
0d:f2:75:c2:09:3d:ab:73:eb:61:15:27:64:e1:30:
d9:74:eb:49:c0:37:72:2a:5b:1b:df:8c:98:7d:a2:
af:ac:8f:52:32:77:73:9f:bc:bc:e7:dc:05:6f:8f:
f1:5c:43:2f:62:d4:15:42:1c:25:7d:e4:7e:69:7b:
ee:0a:6e:c9:f4:f4:a8:e4:79:bf:f7:34:95:48:e3:
a2:7e:d7:d1:69:0c:32:3c:cc:fc:43:fc:2a:37:49:
ad:84:3d:b9:7d:81:5f:d6:5c:31:f5:da:a4:af:30:
ea:9a:49:73:a1:59:65:c9:d1:9f:40:61:1c:8a:56:
3f:58:2d:be:12:20:0d:80:03:ee:18:c5:16:f8:66:
c6:8d:ba:87:31:19:10:23:fc:dd:8d:22:31:26:18:
84:26:e5:23:64:44:51:24:16:f2:0f:3b:23:5e:62:
1c:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:B4:EA:10:1F:4A:61:FC:93:F1:81:F1:E1:EB:EA:D9:80:62:BB:6C
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363032653a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:602e::/48
Signature Algorithm: sha256WithRSAEncryption
af:bf:61:ca:52:b1:05:47:d1:29:9b:fa:6a:35:de:83:e1:4c:
45:4c:de:7f:09:2e:b6:8b:93:7e:f8:ca:77:24:ab:20:c3:ba:
fb:0c:49:03:00:f0:48:07:af:e6:a9:30:1f:cd:04:a4:ef:05:
f9:6e:6a:27:25:cd:8c:51:d0:cc:c6:81:5e:76:94:5e:51:33:
86:2f:fe:aa:c8:04:31:49:7a:f9:65:85:0f:a8:f9:ba:db:b0:
40:f5:34:fb:ee:48:3f:66:65:ac:0d:51:a1:38:52:a5:61:a1:
eb:03:46:43:50:d8:26:ab:c7:d8:5c:f0:84:98:2e:26:8d:9d:
79:d4:ec:13:6d:77:cc:9c:ce:ca:8c:4a:40:a5:99:d6:0a:de:
a9:8b:0a:c2:f3:54:4e:14:ec:e4:ed:34:30:46:71:77:bb:f7:
b4:be:e5:58:c6:70:d0:d9:c1:9e:93:66:67:56:7e:06:d6:c0:
f9:81:5b:82:c1:7c:49:97:6c:ff:ba:58:31:16:71:8e:1c:01:
0b:ad:f0:03:ea:29:56:f8:01:dd:56:a3:45:9f:90:4a:12:e5:
fb:3d:b7:10:19:7d:18:2b:b2:de:32:0f:00:e7:57:dd:55:17:
07:18:f9:3a:8c:85:fc:b3:80:2d:b1:2d:b6:14:f9:3b:e7:b6:
e2:84:2d:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:50:36 2025 by rpki-client