Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363034303a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363034303a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: Xpyc/xdmHDbbKD7pbU828kl2qg0wyeEzpMwXRNQX2k8=
Subject key identifier: 1B:F3:DC:68:35:B4:04:A1:41:BE:74:3F:2D:EF:C6:A4:CF:BB:A8:A0
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 4A7EE219BA8624770562AF5EFE330CEDB3908A87
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363034303a3a2f34382d3438203d3e203136393039.roa
Signing time: Fri 27 Dec 2024 18:02:53 +0000
ROA not before: Fri 27 Dec 2024 17:57:53 +0000
ROA not after: Fri 26 Dec 2025 18:02:53 +0000
asID: 16909
IP address blocks: 2a14:7584:6040::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 01 Jan 2025 21:53:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:7e:e2:19:ba:86:24:77:05:62:af:5e:fe:33:0c:ed:b3:90:8a:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Dec 27 17:57:53 2024 GMT
Not After : Dec 26 18:02:53 2025 GMT
Subject: CN=1BF3DC6835B404A141BE743F2DEFC6A4CFBBA8A0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:71:dd:83:80:2a:d4:eb:9b:81:c4:fc:73:0a:
7d:ef:0b:01:25:7b:bb:9a:7a:c4:79:01:20:17:2e:
45:c3:e2:49:e0:29:43:ef:a8:35:51:2d:5b:98:52:
1a:d2:af:4f:ce:33:f4:53:fd:a0:b6:d2:92:0f:e2:
7a:06:54:8b:f1:04:c5:a3:7c:27:bf:15:9a:38:02:
88:4d:2a:58:a8:da:f0:a8:b5:2d:4f:6e:96:01:6f:
7e:93:0f:d2:23:5b:59:ca:c4:a7:82:7d:da:a4:75:
32:5a:36:73:8d:2f:0b:aa:cf:a8:54:64:89:17:d5:
b0:bf:13:fc:3c:fc:1e:3e:33:e2:14:f2:e1:ca:75:
15:20:b6:03:80:57:95:b7:15:60:a5:c1:fd:4f:f7:
6d:c0:52:ec:60:ab:76:1b:e7:e9:43:2a:91:41:4f:
57:65:63:37:e0:ea:0d:c6:91:85:38:e5:cc:7a:18:
9d:ae:05:d3:6d:4c:92:a1:07:c4:a0:ae:ff:7e:1f:
2f:c3:24:f7:e2:a0:02:ac:55:55:84:a7:be:a2:89:
4a:75:40:32:38:50:ce:f0:fc:f4:c2:18:31:ee:21:
51:c0:4b:48:7e:27:10:51:e6:99:26:48:1d:31:5d:
cf:cb:b5:92:9d:54:ff:94:50:f6:3d:50:8d:14:ec:
cd:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:F3:DC:68:35:B4:04:A1:41:BE:74:3F:2D:EF:C6:A4:CF:BB:A8:A0
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363034303a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6040::/48
Signature Algorithm: sha256WithRSAEncryption
08:05:98:13:71:0a:9a:4d:33:bd:14:81:9b:43:4e:c2:ed:2d:
1e:01:67:92:ce:a9:4e:64:70:5d:14:d6:c4:f2:97:97:b3:08:
a1:62:e1:3a:e8:c1:71:74:c1:5b:d4:11:74:99:80:83:76:5f:
69:cf:d2:1e:06:40:6f:69:2a:e1:77:58:10:fd:a5:9b:80:2d:
82:8f:03:64:24:9e:02:d1:cf:71:6f:2c:12:56:8a:6e:63:2f:
b0:cd:d0:18:f5:28:5d:9a:de:6e:24:65:b5:0d:97:d4:de:ba:
a3:cc:5d:46:d8:16:14:93:64:3c:57:9a:f5:66:26:ed:30:0b:
c5:bc:3a:68:ab:30:b1:67:66:79:1d:8b:8f:ca:b5:40:54:fa:
03:dd:ce:01:68:80:ae:5d:0f:ca:ab:e4:65:8e:a0:7f:05:e9:
2f:bc:19:43:91:ac:9c:cc:51:b0:fb:37:8f:76:72:10:2b:e0:
9e:f5:5c:41:47:9a:35:ad:dc:50:48:76:39:e0:bd:cb:11:ae:
84:70:66:54:f9:9c:f6:3b:3c:20:ea:32:b2:bb:d0:a8:ca:97:
d5:91:f3:6d:2d:3f:42:a1:18:ea:98:82:1c:25:d3:23:64:cf:
a9:29:b0:82:26:7e:6e:c3:aa:33:d3:c6:fb:43:58:b4:11:65:
4c:95:b1:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:44:49 2025 by rpki-client