Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363035623a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363035623a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: MStCqdg9L62ugh6tS16/Hm/IG4fzntrHXIEss+0uUAQ=
Subject key identifier: F6:E3:2E:49:A0:E0:03:C6:E5:30:36:BA:CF:2A:56:99:E1:E3:B0:C8
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 505B9492DFD525B50D974FFF29F1DBE02310224C
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363035623a3a2f34382d3438203d3e203136393039.roa
Signing time: Sun 02 Mar 2025 15:27:04 +0000
ROA not before: Sun 02 Mar 2025 15:22:04 +0000
ROA not after: Sun 01 Mar 2026 15:27:04 +0000
asID: 16909
IP address blocks: 2a14:7584:605b::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 10 Mar 2025 12:11:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:5b:94:92:df:d5:25:b5:0d:97:4f:ff:29:f1:db:e0:23:10:22:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Mar 2 15:22:04 2025 GMT
Not After : Mar 1 15:27:04 2026 GMT
Subject: CN=F6E32E49A0E003C6E53036BACF2A5699E1E3B0C8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:20:ca:52:3b:af:4f:30:17:97:a9:e6:26:b0:
da:52:5c:7f:93:73:ca:39:9f:28:67:ff:2b:5a:1f:
8f:a1:64:cf:52:70:ff:80:fd:41:c4:1b:9d:56:3e:
cd:24:ae:a9:76:06:5f:de:1e:71:04:8d:bd:e7:fc:
4e:0b:29:88:21:00:13:83:13:6a:35:41:7b:5f:e2:
d2:c6:23:bd:41:d2:cb:a5:cb:a1:a5:66:4e:fd:42:
4b:80:05:05:d9:90:32:4e:21:54:ad:59:54:a1:14:
4e:b8:0a:5a:b5:5b:cc:0d:ea:7a:05:28:09:5a:90:
00:45:1b:34:54:87:27:32:52:05:63:67:1d:8f:4c:
6f:bf:70:0c:b3:f4:ff:93:8e:0e:45:b7:dc:a1:2b:
1d:0f:01:c0:e9:21:b7:82:90:21:72:e1:c9:54:a1:
d2:1f:1a:a8:c5:6d:e4:33:cc:01:9d:4c:f0:1b:49:
90:a2:11:bd:56:30:66:30:4f:8a:2e:ef:3e:05:b3:
7b:21:4d:91:e4:7b:8a:5e:88:db:01:5f:d8:37:43:
4e:29:da:8e:fd:26:58:42:4f:25:dc:aa:6c:12:98:
58:01:75:b3:be:28:0e:cf:40:45:40:ee:e3:1a:de:
87:8d:87:33:6d:e8:4a:12:40:d1:60:63:85:81:66:
80:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:E3:2E:49:A0:E0:03:C6:E5:30:36:BA:CF:2A:56:99:E1:E3:B0:C8
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363035623a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:605b::/48
Signature Algorithm: sha256WithRSAEncryption
89:be:26:87:ce:09:f2:7e:10:60:34:0a:a7:32:b1:f4:a2:02:
f0:b2:42:a3:d8:0b:d1:3a:bb:e3:c9:83:c6:91:0b:9c:9b:dc:
f4:3f:51:9b:95:bd:0a:55:45:71:73:21:a7:b3:7a:1a:95:4b:
a9:0a:7b:05:ce:24:8c:1c:4e:a2:b5:a9:f2:5f:e7:bf:6e:61:
7e:7e:93:21:92:17:85:a8:cc:f3:50:ee:fe:ca:e2:49:c0:1d:
18:47:b4:f0:d5:a4:f0:73:ba:63:be:90:66:3d:d7:92:c8:86:
84:eb:2d:de:05:f9:d8:de:a6:9e:36:4c:67:5b:e6:21:5f:f6:
f3:51:6f:56:67:dc:cf:68:36:9c:f1:69:b3:40:18:61:b5:ad:
29:29:07:b4:30:ab:c1:61:18:f5:5d:57:9b:9c:bf:af:22:42:
82:23:76:a1:7b:10:0b:ae:3a:09:2e:97:12:7d:f7:5b:d8:0b:
c0:9a:1b:e2:ec:6d:4f:2d:14:c1:3d:c6:85:0f:a3:4c:74:a4:
fc:8a:53:af:67:7d:12:87:58:07:e3:5d:67:c5:95:b0:1c:94:
fe:fe:1b:a6:83:38:00:74:15:9b:2f:3c:ef:d3:5c:b1:74:0b:
85:44:7a:a5:0f:61:bb:e7:d0:ff:46:12:b2:a1:f2:0d:87:39:
93:1c:94:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:41:20 2025 by rpki-client