Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363035653a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363035653a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: E+94xOZT1I2zh3pYsbssupBNxPBcu7OGZsnauIiwbvY=
Subject key identifier: 36:E7:C9:15:A0:07:32:4B:95:9A:8E:BB:C3:6F:94:7D:47:4A:8E:46
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 474390622C7089E6ECF18A91B8DD83A5B6412EE1
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363035653a3a2f34382d3438203d3e203136393039.roa
Signing time: Sun 02 Mar 2025 15:27:06 +0000
ROA not before: Sun 02 Mar 2025 15:22:06 +0000
ROA not after: Sun 01 Mar 2026 15:27:06 +0000
asID: 16909
IP address blocks: 2a14:7584:605e::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 10 Mar 2025 12:11:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:43:90:62:2c:70:89:e6:ec:f1:8a:91:b8:dd:83:a5:b6:41:2e:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Mar 2 15:22:06 2025 GMT
Not After : Mar 1 15:27:06 2026 GMT
Subject: CN=36E7C915A007324B959A8EBBC36F947D474A8E46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c0:d4:dd:41:0c:50:d9:d4:5f:4e:12:e0:df:
c7:d5:18:b9:7a:09:86:56:38:86:83:88:ff:df:76:
0c:01:a1:7c:70:98:3e:44:7e:ea:39:0c:f8:48:62:
42:15:41:48:4f:7d:83:89:3d:23:7a:02:40:63:09:
b1:c8:63:b3:ba:7d:99:9c:68:3c:38:81:8d:da:5c:
58:c7:18:4e:de:01:69:3e:91:c5:0e:8a:ca:1d:31:
b3:fe:1c:c4:fe:74:a3:89:d4:f6:44:3e:bb:c4:09:
a4:66:f7:6a:c9:88:33:6f:ed:22:7f:87:ce:c9:53:
2f:00:30:4b:42:22:dd:ac:2c:78:8b:b7:e6:da:7e:
1e:71:b3:25:a4:06:cb:0f:a4:06:3d:34:a5:a2:88:
fa:5e:56:e8:1b:00:8b:bd:a4:da:89:4d:68:12:ea:
c1:2a:35:2e:02:88:50:2e:06:05:61:81:f9:34:0d:
a6:52:28:a5:48:43:b2:50:42:7e:93:ee:92:43:d0:
51:f7:e6:f3:bc:37:14:0e:00:d0:b1:cb:b2:53:32:
ba:4d:ed:7f:7f:ea:7f:6b:ea:23:c4:57:a7:73:08:
49:cd:3e:c4:2f:2f:65:8c:7e:60:86:90:85:b2:aa:
76:9b:e0:f3:5c:30:29:ad:fd:a6:b8:b5:b7:ea:a7:
cb:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:E7:C9:15:A0:07:32:4B:95:9A:8E:BB:C3:6F:94:7D:47:4A:8E:46
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363035653a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:605e::/48
Signature Algorithm: sha256WithRSAEncryption
81:a4:b4:1d:f8:8d:7a:41:40:9f:91:37:41:91:86:57:63:95:
a1:d8:b9:63:99:2e:19:f6:ca:3e:d2:31:62:31:76:be:f8:64:
ac:3b:00:12:e3:99:ad:b8:ec:2a:8b:8b:89:9a:43:a6:8d:59:
8e:30:b9:ba:7f:94:be:21:ef:eb:e4:c8:ff:94:b0:e3:61:f6:
41:7c:11:4c:cd:85:d9:e1:00:e6:b6:45:01:73:95:64:a0:5e:
5e:94:7f:23:50:50:a7:7b:9f:57:a1:20:2a:52:05:4f:2c:e4:
06:12:f1:22:2a:4c:52:c1:25:d7:61:7b:8b:f9:75:4c:63:7a:
df:85:fc:88:7a:00:b1:0a:3b:bd:80:23:ef:69:90:ed:fa:fc:
f3:32:0e:c1:41:12:05:b4:b9:1c:be:61:c0:66:ab:8b:6b:50:
64:68:b7:a7:66:d9:c8:0f:af:71:44:24:49:1f:2a:82:e1:60:
88:c0:82:18:5e:ec:77:23:fa:62:f3:de:69:0e:82:67:21:0c:
6f:af:4e:c1:cc:d6:7a:2e:ad:7e:34:cc:b2:40:bf:cd:aa:40:
1a:6d:b0:da:eb:11:3b:cc:35:99:e9:45:92:0c:98:ae:32:c2:
39:45:96:3c:ea:a7:d1:69:55:04:f6:b0:d0:36:ad:a4:aa:73:
86:46:2c:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:40:19 2025 by rpki-client