Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363035343a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363035343a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: aytrQKcn0dlQ+Wqr85zfyeb63Z2jy34UONym5thBo/4=
Subject key identifier: 8B:5E:3B:88:1F:B6:41:94:3A:2F:1B:F8:BE:B6:F4:47:46:71:7C:87
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 62AAE9E3E5D566AC397556059383D9891DB9922B
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363035343a3a2f34382d3438203d3e203136393039.roa
Signing time: Sun 02 Mar 2025 15:26:45 +0000
ROA not before: Sun 02 Mar 2025 15:21:45 +0000
ROA not after: Sun 01 Mar 2026 15:26:45 +0000
asID: 16909
IP address blocks: 2a14:7584:6054::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 10 Mar 2025 12:11:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:aa:e9:e3:e5:d5:66:ac:39:75:56:05:93:83:d9:89:1d:b9:92:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Mar 2 15:21:45 2025 GMT
Not After : Mar 1 15:26:45 2026 GMT
Subject: CN=8B5E3B881FB641943A2F1BF8BEB6F44746717C87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:18:5b:64:33:ad:15:4a:d0:c6:5d:88:93:88:
aa:4c:b0:3b:1b:b7:af:e3:65:cc:d3:ea:46:76:4d:
3b:36:db:4a:b6:f0:ef:44:3a:94:c1:48:44:df:ef:
c4:af:8d:c8:6c:c4:61:9e:dc:35:0a:d9:48:75:0c:
3a:ea:c3:7c:8d:9f:f3:47:ec:5a:6d:c7:e8:34:0d:
cb:e0:b6:46:11:8e:20:0c:59:b7:f1:a1:80:06:0e:
4d:be:95:00:0e:2b:86:a9:e4:88:05:af:20:36:01:
d0:ff:0f:53:db:1f:fd:5f:3d:9b:fb:be:80:f9:08:
5e:1f:e5:ca:61:51:71:6a:ef:96:15:3b:01:13:e1:
3f:11:0d:2a:09:8f:f6:5f:0d:d2:eb:a0:4e:61:d1:
1e:74:af:9d:84:58:1b:17:d6:ef:42:88:e1:4b:01:
b2:37:07:46:76:92:89:8e:94:f9:8d:b7:8b:a5:49:
ee:6a:cb:24:2a:94:a3:fd:c6:32:0e:0f:59:7b:04:
fd:fe:00:cb:3c:62:e5:ae:e1:6f:69:b4:70:ab:1b:
b3:ea:72:ab:4b:9a:d1:90:b3:28:a4:fe:08:25:3d:
a9:59:fc:5e:03:13:ff:6f:f7:ae:48:02:4f:93:5a:
01:01:c1:d1:d8:b9:f6:08:62:93:81:bd:ce:2c:bb:
82:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:5E:3B:88:1F:B6:41:94:3A:2F:1B:F8:BE:B6:F4:47:46:71:7C:87
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363035343a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6054::/48
Signature Algorithm: sha256WithRSAEncryption
af:c9:1e:4e:43:99:1d:4d:a7:96:6a:d5:d0:c8:c6:cb:6f:82:
af:75:49:fc:ae:9f:42:c5:01:54:3f:78:f2:be:d8:9c:71:33:
9f:36:85:bf:a3:c7:8c:4a:0c:f0:4f:22:59:be:30:f1:12:c2:
4e:3f:b7:91:6d:5e:83:d3:bf:8d:73:31:89:ed:f7:eb:d2:db:
f6:68:83:4d:60:58:a2:9d:ca:20:bd:63:50:1b:19:46:4b:3e:
83:45:d1:62:61:0d:ec:c9:fb:6c:47:e4:09:4b:1e:1f:b6:5f:
af:a0:12:91:6e:10:89:0f:7c:90:68:a2:39:9b:1a:e7:6f:de:
e8:ec:4c:68:42:ab:ea:25:bc:60:63:51:da:0f:17:e4:14:22:
28:d9:72:da:71:8b:1c:46:8a:24:00:6c:76:47:39:61:71:89:
34:c7:6c:a8:d5:d6:41:c7:98:68:7c:fe:d4:fb:ac:23:58:1b:
1e:ea:0d:57:87:14:61:60:65:97:79:61:5e:b9:09:8c:72:01:
3a:74:3b:fd:9f:20:ac:ff:b8:ba:85:68:bd:09:03:3c:4a:47:
c4:07:52:fe:84:69:3f:e6:f8:09:f7:26:97:df:1f:4c:71:d3:
b6:3b:a2:b2:61:5a:6e:ba:48:44:66:2c:02:6e:33:49:62:ee:
23:1b:7c:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:42:17 2025 by rpki-client