Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363035663a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363035663a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: tr94jtpdCv4cwLxihEt1YmsZC7p08R8xcyxzwPnmJyk=
Subject key identifier: 65:B2:27:03:A8:B2:03:5A:8B:79:D1:CB:B4:89:D0:B1:AF:AA:27:1D
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 39A1341AD82B12D326AA369792C6D138014859B1
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363035663a3a2f34382d3438203d3e203136393039.roa
Signing time: Sun 02 Mar 2025 15:27:07 +0000
ROA not before: Sun 02 Mar 2025 15:22:07 +0000
ROA not after: Sun 01 Mar 2026 15:27:07 +0000
asID: 16909
IP address blocks: 2a14:7584:605f::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 16 Mar 2025 16:16:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:a1:34:1a:d8:2b:12:d3:26:aa:36:97:92:c6:d1:38:01:48:59:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Mar 2 15:22:07 2025 GMT
Not After : Mar 1 15:27:07 2026 GMT
Subject: CN=65B22703A8B2035A8B79D1CBB489D0B1AFAA271D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:d8:c6:b9:a2:8d:af:7d:0f:fe:fc:82:41:d0:
46:06:02:06:32:98:8d:dc:43:4a:74:cf:05:53:b0:
5c:96:c6:ee:99:0b:d3:6f:66:0e:56:bb:01:ae:f7:
d3:af:71:91:ca:be:49:59:7f:23:6c:da:5a:a8:db:
95:8d:1c:b5:56:fc:5b:8c:0c:a4:54:4c:3f:c0:0f:
b2:03:23:68:9d:fe:0d:51:85:90:ca:09:18:ed:8e:
9b:ec:d9:85:b9:c4:f7:56:ec:6a:2e:88:89:9e:9f:
54:7a:dc:68:05:82:09:c8:f3:d5:13:65:de:3b:2b:
95:d5:db:9f:51:16:ae:95:a8:b4:07:ef:c8:f1:d0:
65:6b:46:89:b7:cf:6b:ee:68:7a:47:af:47:b8:ac:
6c:3a:15:5e:2e:6f:11:42:09:94:0c:e2:7b:7e:54:
e0:ac:e6:64:c5:0a:92:d7:5f:ae:c2:03:c6:00:ae:
f0:98:1b:06:c8:fe:00:bf:38:da:70:61:02:5f:15:
f4:3f:6a:5b:46:19:7f:e1:e7:4e:39:1b:7e:87:a6:
e5:9b:10:c9:27:f9:6b:54:01:70:15:19:d9:06:40:
26:e9:a7:58:aa:44:32:f0:35:12:55:0a:dd:44:54:
73:fd:3d:33:f7:f6:76:57:6d:77:c8:2f:f7:d7:b1:
a5:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:B2:27:03:A8:B2:03:5A:8B:79:D1:CB:B4:89:D0:B1:AF:AA:27:1D
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363035663a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:605f::/48
Signature Algorithm: sha256WithRSAEncryption
49:a5:8e:43:02:48:6c:7b:af:25:97:54:80:40:98:d9:f3:c7:
48:65:22:64:20:74:ac:b8:de:18:5c:d6:1a:4b:08:84:81:de:
18:72:47:d6:b4:db:e2:43:d4:c2:da:f1:66:9a:aa:a1:3f:f8:
72:f9:bf:1d:13:ad:4e:7b:25:cb:3e:8c:cd:45:e4:ce:a0:90:
73:aa:c7:6b:9f:49:83:3e:9f:2a:5a:1a:9a:af:bf:fd:c2:bb:
11:90:b4:49:4b:da:35:96:4b:8a:8e:25:ee:22:6a:02:b7:1b:
14:62:3d:41:cd:42:61:c7:40:6c:27:af:a6:ea:45:ef:6c:f6:
12:bc:26:bd:11:2c:a6:3b:0e:a5:9d:33:78:43:2b:7d:a8:5e:
77:0b:e7:7a:24:f8:e1:e4:51:cf:4f:1b:4f:cb:5c:0b:e3:7f:
ac:8a:af:ee:66:86:14:df:00:dc:c3:98:a7:3a:72:95:e3:0e:
28:a5:28:e9:c0:ae:6d:64:5b:a0:76:f5:05:4e:66:4d:ac:e1:
5b:a5:52:bc:4e:bc:ea:de:9a:cf:e6:9d:57:36:1a:8b:d8:df:
00:d1:07:f9:e0:26:b5:9e:f2:21:e8:9d:39:9c:3e:97:2d:fd:
af:e6:fb:a3:c3:41:57:66:72:7f:b9:f6:2c:9b:32:12:47:e9:
79:44:1c:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:42:30 2025 by rpki-client