Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363035613a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363035613a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: WIy6Hfbp5UWwA4fmVo9km1Sp5IEVJpqk2JYI+gAn1Lc=
Subject key identifier: 3B:88:7B:29:D2:02:4B:0C:EE:FF:95:C5:98:D0:A8:A1:C9:B7:62:6F
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 09FCA33CD248EC92ED321A16E551D296F9B4C2DA
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363035613a3a2f34382d3438203d3e203136393039.roa
Signing time: Sun 02 Mar 2025 15:27:03 +0000
ROA not before: Sun 02 Mar 2025 15:22:03 +0000
ROA not after: Sun 01 Mar 2026 15:27:03 +0000
asID: 16909
IP address blocks: 2a14:7584:605a::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 10 Mar 2025 12:11:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:fc:a3:3c:d2:48:ec:92:ed:32:1a:16:e5:51:d2:96:f9:b4:c2:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Mar 2 15:22:03 2025 GMT
Not After : Mar 1 15:27:03 2026 GMT
Subject: CN=3B887B29D2024B0CEEFF95C598D0A8A1C9B7626F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:b2:08:2d:b5:db:76:c4:cb:81:26:9d:bd:be:
9e:04:f7:1b:7f:0b:8b:9a:3a:61:e6:60:cc:0d:76:
d6:38:82:89:7c:cc:95:91:eb:c1:c4:79:48:0b:7a:
11:c7:6a:45:55:ad:f8:93:36:59:ae:8a:e2:ca:8e:
eb:8a:b2:0c:b4:65:8c:d7:ee:66:44:f0:11:1e:5c:
96:3e:81:e8:9a:20:3a:5e:82:41:c9:b1:a3:77:b4:
15:fc:51:66:77:c2:7b:50:9e:60:f1:42:d1:2e:ed:
56:9b:15:08:3d:45:3b:ec:9a:e9:4a:0b:66:ec:1f:
14:6d:57:e8:e9:1a:bb:23:04:91:73:74:7a:bc:d5:
a2:78:84:d6:24:70:c5:63:14:4b:2c:4a:8d:63:b2:
d8:28:c4:a5:2c:e7:1f:63:8e:0b:08:6b:4e:bf:b9:
0d:4d:86:2d:89:d3:ed:b5:da:ad:46:ff:7f:ab:48:
20:68:a2:51:58:47:7b:32:19:07:a7:50:a7:fd:c7:
37:76:b5:22:77:76:ff:25:e5:ef:c0:ba:7f:1d:12:
88:8c:7c:6a:2e:7c:d0:4b:c5:7c:a0:83:c9:35:f9:
6a:78:3f:b7:74:0a:a9:17:2b:05:9b:11:1c:6d:96:
c4:40:04:89:35:e5:57:66:f2:cf:3a:5d:f5:d1:7d:
26:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:88:7B:29:D2:02:4B:0C:EE:FF:95:C5:98:D0:A8:A1:C9:B7:62:6F
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363035613a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:605a::/48
Signature Algorithm: sha256WithRSAEncryption
8d:b4:06:2a:c9:c8:78:39:76:b9:73:89:86:4f:68:06:db:bd:
68:f0:29:16:f4:6e:6d:eb:a2:8f:e5:13:bb:76:69:41:86:a2:
c9:8d:85:fb:b1:ef:28:51:98:fd:74:83:fb:d3:07:c9:e8:80:
83:d4:21:b5:12:18:d2:d5:50:48:34:8c:11:13:4c:35:2a:9d:
3f:46:a9:d0:37:33:1c:ed:be:d3:07:ae:11:a4:04:c3:b2:33:
ff:fc:a7:3c:30:c1:75:fc:f7:43:b6:62:69:de:c2:63:fa:f2:
3e:8c:a6:ba:c6:04:31:dd:1f:76:43:17:a6:fc:01:aa:57:38:
a6:bb:7c:6c:e3:92:f5:23:34:dd:e2:b2:e7:20:a8:a2:06:1b:
31:d6:34:75:df:99:41:a1:0a:f7:ce:c3:d1:1c:5a:2d:de:e7:
a7:b7:3a:96:b8:d8:5b:11:59:76:6f:c2:7c:18:52:ce:b7:8d:
d5:ad:cb:6f:25:20:a9:1e:53:4d:28:7e:bf:10:47:ed:4e:f8:
64:a2:eb:97:46:7c:14:1c:59:37:89:78:89:e3:0f:41:4e:92:
ac:6e:c6:c4:9d:18:2d:ba:30:f0:f1:99:66:6e:11:e0:d4:dc:
e1:15:43:d2:b4:91:f8:30:a9:22:62:ad:23:f9:ff:6d:92:6e:
dd:a4:c8:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:40:14 2025 by rpki-client