Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363035393a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363035393a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: Iitt/NJPe9pHX2bn1R3wXHFmCHc4w9mg9YQtpW3B3aQ=
Subject key identifier: C9:B0:54:DB:A8:FA:3A:EE:7C:7E:C1:49:6C:AF:57:57:93:29:25:A4
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 087CCF5CB0725094C954FF60964E49B7D406EFB1
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363035393a3a2f34382d3438203d3e203136393039.roa
Signing time: Sun 02 Mar 2025 15:26:49 +0000
ROA not before: Sun 02 Mar 2025 15:21:49 +0000
ROA not after: Sun 01 Mar 2026 15:26:49 +0000
asID: 16909
IP address blocks: 2a14:7584:6059::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 16 Mar 2025 16:16:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:7c:cf:5c:b0:72:50:94:c9:54:ff:60:96:4e:49:b7:d4:06:ef:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Mar 2 15:21:49 2025 GMT
Not After : Mar 1 15:26:49 2026 GMT
Subject: CN=C9B054DBA8FA3AEE7C7EC1496CAF5757932925A4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:1f:ed:83:39:70:0c:68:8a:5b:03:b0:e0:86:
db:58:7c:02:c4:dc:eb:c1:b3:7b:f2:fd:81:05:e0:
b5:63:73:b4:b4:a6:af:66:a3:6b:9c:8f:2f:d0:90:
d2:58:c8:48:32:2a:16:ed:bd:85:06:ee:29:01:54:
40:77:9f:2d:97:1c:0b:b6:3d:39:89:a8:eb:03:0f:
dd:30:60:d1:a7:01:eb:77:93:78:46:83:50:8d:7d:
f9:52:be:3d:e9:cc:2f:3d:c6:8e:51:f8:25:86:9c:
55:0d:5d:22:82:45:84:b0:ef:6c:14:c7:43:70:30:
b9:1d:a4:2d:e8:04:e7:24:87:93:19:dc:59:64:8f:
2e:8e:f0:41:47:5f:c8:af:bd:da:c2:3b:1f:65:5b:
b6:a6:1f:25:e1:18:b7:45:af:63:8e:37:a5:d8:69:
86:a6:51:ea:c2:a4:a5:c4:94:2b:65:ce:fb:be:5d:
55:03:ec:07:07:12:07:fc:94:4d:f9:11:07:2a:0f:
c4:f6:76:76:a4:5a:ab:22:17:4e:e4:9e:00:3d:57:
7a:1c:1d:87:76:8a:5f:94:ed:aa:f0:1e:fa:a6:e6:
e4:33:eb:3a:11:9b:7f:a1:ec:4d:19:50:6f:7d:63:
6d:2c:3f:9c:7b:7d:3e:1a:1a:a4:01:4c:ad:b0:3e:
8a:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:B0:54:DB:A8:FA:3A:EE:7C:7E:C1:49:6C:AF:57:57:93:29:25:A4
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363035393a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6059::/48
Signature Algorithm: sha256WithRSAEncryption
51:bc:57:03:dd:a2:38:e3:98:42:32:1a:8e:a8:53:79:e7:10:
70:5a:55:34:8c:21:d6:60:03:22:65:ff:07:d4:af:5f:90:85:
49:4f:3d:56:2b:68:66:41:7d:f0:65:35:e0:4e:b5:27:14:b2:
98:02:09:5c:1a:a8:55:82:22:60:7e:c1:53:ce:06:e4:8d:84:
e0:ef:0e:48:7f:67:a5:2e:a1:28:15:f6:29:14:fa:6a:8d:b5:
79:19:73:1e:e7:b0:61:87:98:2a:af:8d:f9:c0:ce:39:64:3c:
59:f6:1b:f8:eb:fd:7e:e7:29:fb:85:7e:81:71:59:fe:15:d3:
d1:c6:25:cb:97:65:b2:cf:47:5f:30:f7:bb:93:b2:b1:66:2d:
67:ab:07:b0:0b:46:de:cc:68:8a:99:af:b4:36:ac:61:fa:ff:
fa:df:0b:80:23:1c:82:92:30:3a:37:c1:ec:17:b8:29:93:bf:
3e:69:c6:f5:31:f2:33:54:69:15:cc:fd:cf:23:e2:da:1a:b8:
c8:4c:2e:7d:96:61:bb:89:d7:0e:54:4e:99:85:3b:df:65:91:
d1:6f:6c:37:de:e4:3d:b7:f4:03:60:33:25:34:df:71:5e:75:
79:8a:81:1e:bb:29:08:02:ad:ca:81:42:c7:7c:88:81:07:91:
21:f5:3c:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:44:53 2025 by rpki-client