Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363035313a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363035313a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: uwjgHo+U5UcOWl38s/M+UFZUHRCXnfO01iZbA3zKOjc=
Subject key identifier: E5:FA:01:F9:80:1D:81:07:4C:2A:88:6E:5F:6B:C9:FD:E0:15:5E:3E
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 33FF10AA9AECE660CF78C110B8A8CBF15C93DA2F
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363035313a3a2f34382d3438203d3e203136393039.roa
Signing time: Sun 02 Mar 2025 15:26:13 +0000
ROA not before: Sun 02 Mar 2025 15:21:13 +0000
ROA not after: Sun 01 Mar 2026 15:26:13 +0000
asID: 16909
IP address blocks: 2a14:7584:6051::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 10 Mar 2025 12:11:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:ff:10:aa:9a:ec:e6:60:cf:78:c1:10:b8:a8:cb:f1:5c:93:da:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Mar 2 15:21:13 2025 GMT
Not After : Mar 1 15:26:13 2026 GMT
Subject: CN=E5FA01F9801D81074C2A886E5F6BC9FDE0155E3E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:67:c7:d9:da:e7:89:04:7c:2c:74:a5:0e:24:
cd:9f:94:d6:3b:c9:29:2d:80:bd:30:cb:5f:9b:1c:
42:be:e4:b3:68:a4:cd:b6:e1:52:13:c3:bf:36:15:
06:4f:6a:16:bf:f3:45:5b:84:1d:e4:f3:97:49:34:
6d:2e:4d:c9:7d:d6:34:64:4c:d1:1b:f9:88:a6:e2:
08:d0:44:19:ff:8f:c0:41:f9:fa:5c:ef:6d:94:b0:
a2:04:20:80:76:f0:e2:a8:8e:61:60:1a:6d:9a:18:
19:7e:76:22:5e:6c:91:ab:b2:36:5a:b6:0f:09:4c:
28:ce:35:70:cb:ce:6c:f7:89:22:74:e2:9b:80:1b:
57:5b:23:29:70:52:d7:79:9e:8c:6f:13:f5:b7:eb:
4d:a2:8a:89:9a:3a:63:fa:03:db:01:27:47:4b:c2:
54:d9:46:47:6f:7c:c3:cf:08:b2:9b:75:4a:a5:b2:
83:e5:a8:5b:6b:ea:f0:2d:6f:d1:7e:0e:84:55:d9:
92:f0:12:c4:32:1b:6b:9b:a3:4f:c3:51:85:4b:fe:
d1:82:7b:56:32:92:21:63:03:1f:87:c6:4f:24:94:
e4:0f:90:f1:f1:73:af:83:ca:ca:11:9c:64:11:ea:
81:e4:40:b5:f7:cd:8d:d1:ad:d7:9b:a5:3f:12:3f:
0d:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:FA:01:F9:80:1D:81:07:4C:2A:88:6E:5F:6B:C9:FD:E0:15:5E:3E
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363035313a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6051::/48
Signature Algorithm: sha256WithRSAEncryption
8e:97:ff:8c:5f:71:64:6a:89:46:2b:4c:20:b7:22:45:81:12:
54:50:d8:9f:ce:9d:fe:4a:8d:34:0b:f3:f5:ac:22:83:8d:25:
2f:31:71:e4:b6:dc:9b:31:55:a9:23:cc:27:0e:6f:0e:53:f7:
70:35:a2:33:04:07:b8:e8:3b:01:7d:e9:93:e0:63:d4:c2:e7:
b1:2a:30:05:b3:4e:7d:bd:fc:d7:0d:27:4f:ce:18:78:f8:19:
1a:cd:0f:09:8b:25:32:ec:4f:89:52:02:9d:45:e5:87:02:22:
31:03:64:a4:1b:fd:99:7d:c7:9b:b3:29:60:5d:8c:7c:a1:91:
90:de:6f:1b:0a:29:77:23:b1:91:47:dd:39:fb:4e:7d:3f:68:
56:5b:db:d4:9f:eb:8b:1f:92:22:aa:d0:2b:7c:74:db:10:24:
17:3e:f1:bc:56:a8:2d:0d:76:bc:80:b7:ac:63:ff:ff:3c:6f:
f0:1e:25:6a:ce:43:2e:87:b4:57:98:f3:58:fd:0b:4b:08:a2:
b1:e7:cc:ab:80:14:52:49:79:03:fa:43:7d:75:fe:34:60:77:
5e:76:82:22:1f:24:b4:1b:83:7b:38:0a:05:61:c4:f3:00:60:
e9:bf:c0:30:bc:97:13:a4:3d:e0:83:e7:ff:67:2d:8c:aa:86:
b9:96:7b:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:41:29 2025 by rpki-client