Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363035373a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363035373a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: 5zJepNFP0Sfly5rtIA8Tc4NJSRQXTXU4lQy7hF8JzgA=
Subject key identifier: BE:5B:0A:D1:3F:DD:C3:CF:B7:96:83:0C:0D:30:96:7D:0F:59:36:06
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 7E1E6EB38EA52996FC328828C8CD6173BD9EC348
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363035373a3a2f34382d3438203d3e203136393039.roa
Signing time: Sun 02 Mar 2025 15:26:47 +0000
ROA not before: Sun 02 Mar 2025 15:21:47 +0000
ROA not after: Sun 01 Mar 2026 15:26:47 +0000
asID: 16909
IP address blocks: 2a14:7584:6057::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 16 Mar 2025 16:16:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:1e:6e:b3:8e:a5:29:96:fc:32:88:28:c8:cd:61:73:bd:9e:c3:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Mar 2 15:21:47 2025 GMT
Not After : Mar 1 15:26:47 2026 GMT
Subject: CN=BE5B0AD13FDDC3CFB796830C0D30967D0F593606
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:4e:4e:a7:6d:ec:5b:c9:51:68:fb:c1:6c:de:
bb:0a:ba:9b:b0:d4:53:18:26:34:93:2f:e1:1d:38:
76:c2:4b:32:b4:9b:39:79:fe:b0:77:02:06:c0:7e:
1c:91:29:75:da:62:31:c9:02:af:ac:78:92:54:7d:
59:6f:02:09:e2:da:37:0b:4f:eb:01:15:df:b9:65:
39:73:82:7c:46:11:9e:9b:c2:8d:5e:d6:35:38:14:
7f:23:b8:84:42:e2:95:d2:59:87:13:a5:e8:f0:53:
cd:71:2b:29:1f:3d:71:d4:8a:82:b9:8c:c5:bc:23:
19:42:6f:85:5f:42:1b:4f:d0:4b:e7:e6:dd:db:a9:
90:f6:e9:1c:76:fc:69:91:67:52:18:38:02:9c:76:
d0:80:d1:38:c2:e6:0c:5a:0c:e1:bd:e0:21:44:09:
6b:68:5a:2d:65:69:a6:be:b8:c5:79:cf:d2:3d:e0:
f3:54:ca:d4:cc:c7:bf:6d:61:72:8f:2f:58:1e:59:
9d:ca:8c:e0:26:e6:27:8d:d8:12:17:12:3f:bf:12:
80:b5:b9:57:b1:62:27:f5:41:72:d1:87:eb:b6:d6:
69:e1:a0:87:15:76:a1:63:a9:32:61:eb:b4:48:e0:
4f:36:eb:55:a7:2b:00:46:fc:52:46:74:86:67:1e:
75:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:5B:0A:D1:3F:DD:C3:CF:B7:96:83:0C:0D:30:96:7D:0F:59:36:06
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363035373a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6057::/48
Signature Algorithm: sha256WithRSAEncryption
29:e7:a8:e8:61:50:cf:ec:bc:76:93:94:4f:d4:14:c2:17:fb:
87:c6:89:6c:60:20:e5:96:35:56:0c:22:9f:88:4e:88:35:1a:
98:1d:49:0e:1a:e0:db:eb:70:c7:fc:0c:d9:d2:51:1b:fd:fc:
73:f1:d7:70:05:b6:2e:d5:72:7d:1c:6a:35:1a:47:bf:c6:93:
ec:0d:e4:1c:4c:c1:46:1f:7c:45:4c:c5:28:0f:20:b5:49:e2:
23:f7:73:f6:c3:95:64:f2:4a:92:b9:4b:0b:a8:95:72:6d:8f:
2e:61:41:e3:16:3a:0c:3b:b8:0d:6b:ad:ef:21:bc:53:ab:57:
82:8a:15:56:c2:35:05:cd:1b:9a:a7:71:05:6b:1b:e9:33:16:
15:67:06:bf:06:01:7d:89:8d:c9:e4:01:38:b4:b7:46:66:02:
c7:50:cc:b1:cd:12:29:24:98:5d:47:13:64:bc:74:f3:fd:17:
e5:59:3b:01:09:19:91:48:b1:90:ba:5a:d1:1c:92:a2:0f:43:
bc:ff:87:f4:f7:1c:3a:83:41:db:d1:9f:fe:7b:ac:e7:60:aa:
a7:aa:2a:b8:37:96:53:4a:89:c9:0f:fe:9e:9f:25:eb:f4:24:
84:a3:b2:c7:1e:ac:b7:84:6e:8f:7b:d9:ad:ce:63:bd:ad:ac:
cf:59:cd:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:36:18 2025 by rpki-client