Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363034373a3a2f34382d3438203d3e20343031353037.roa
File: 326131343a373538343a363034373a3a2f34382d3438203d3e20343031353037.roa (raw, json)
Hash identifier: oJqCMbF0qjiYYiEfY5iB+Mzvbf1mQuocFCuD634+Wgc=
Subject key identifier: 84:B6:D9:0E:10:3C:F9:5A:DE:44:F3:2B:9F:84:93:71:B2:F1:19:65
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 6842B9FC02E489EE95B49BF2C17085805B533818
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363034373a3a2f34382d3438203d3e20343031353037.roa
Signing time: Sun 02 Mar 2025 15:24:48 +0000
ROA not before: Sun 02 Mar 2025 15:19:48 +0000
ROA not after: Sun 01 Mar 2026 15:24:48 +0000
asID: 401507
IP address blocks: 2a14:7584:6047::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 10 Mar 2025 12:12:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:42:b9:fc:02:e4:89:ee:95:b4:9b:f2:c1:70:85:80:5b:53:38:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Mar 2 15:19:48 2025 GMT
Not After : Mar 1 15:24:48 2026 GMT
Subject: CN=84B6D90E103CF95ADE44F32B9F849371B2F11965
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:b3:f9:88:aa:98:0e:47:85:88:1f:6a:3a:71:
fd:0b:4a:aa:b1:41:86:c2:00:81:aa:4e:bb:09:be:
a3:d7:e9:b0:a2:94:84:f3:a9:ce:0f:b4:8a:a0:f1:
a1:bf:64:7b:40:e5:ca:1d:14:d3:da:56:04:52:b5:
e8:3a:2a:b8:61:e5:fd:1f:fe:b4:6d:28:61:6e:32:
2a:81:92:46:08:58:5f:a8:54:9a:66:58:60:d4:2a:
9c:1f:f1:44:41:c5:d3:15:64:61:d9:13:a5:48:5b:
2e:34:a7:49:63:59:9e:eb:b1:aa:66:33:d0:b2:de:
6c:ee:f9:cc:ac:b2:83:bd:bf:64:8b:36:bf:9f:4b:
b3:9b:58:46:c7:a1:5c:60:d6:6f:f6:c9:72:22:f6:
71:f3:5a:86:df:39:64:a3:f8:bd:76:01:4a:9a:08:
ff:e2:fa:b7:35:77:83:6b:a8:08:10:6a:c0:c2:13:
e7:2a:e0:62:3a:1d:cd:f2:e0:ff:86:c6:32:c7:2e:
71:70:31:9e:da:5e:e2:11:5b:67:06:d0:98:67:d2:
77:1b:35:50:54:1a:54:c1:34:9f:f1:2f:f5:1b:1c:
e4:bd:09:ff:ce:d3:f3:42:3a:52:d1:df:0f:be:75:
11:62:21:7c:f9:42:0a:10:93:2a:23:5a:1f:53:9a:
7b:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:B6:D9:0E:10:3C:F9:5A:DE:44:F3:2B:9F:84:93:71:B2:F1:19:65
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363034373a3a2f34382d3438203d3e20343031353037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6047::/48
Signature Algorithm: sha256WithRSAEncryption
b5:09:f5:fb:c0:57:9e:b3:c0:9c:c6:f0:f9:dd:92:3d:d4:38:
f4:75:24:e5:ae:63:7b:d8:b6:b3:21:b7:4c:45:b8:d2:93:ae:
0b:7b:69:ca:cf:6f:2a:c8:12:09:7c:d2:66:1e:b1:eb:68:96:
b4:37:94:b3:49:97:1a:29:9a:ea:3a:d6:ae:81:65:91:95:e6:
6b:ee:ee:7f:27:e3:a9:20:cb:ed:3b:da:f6:fe:a1:4c:4e:32:
51:77:f5:8f:99:65:26:bb:a5:c6:5e:cc:23:87:59:94:3d:18:
89:02:7e:96:9e:89:7d:99:80:a8:54:b0:49:d4:ce:42:e6:43:
05:f8:fc:ee:4f:4a:91:ee:f1:f9:5a:a9:f8:6e:8e:01:3b:91:
22:29:51:08:d0:f8:8d:01:1e:eb:c7:e2:ac:f5:aa:81:1a:38:
6a:aa:d3:26:89:87:88:5c:9b:79:b6:c9:fd:7d:ca:93:7e:c9:
5c:20:6e:a0:f8:74:84:ec:dd:30:57:4f:c2:55:e0:21:52:24:
db:6e:fb:52:1c:d7:1a:7f:b7:75:1b:9d:0b:a8:89:e6:ad:43:
d4:6d:30:92:10:a9:a4:d2:0d:d4:72:16:f0:f8:54:fb:f8:50:
8a:43:30:40:d4:54:11:13:c4:71:e9:2c:24:76:af:3f:96:45:
d4:9b:9c:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:45:54 2025 by rpki-client