Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363036313a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363036313a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: t6oUFQGioYclIhMnuuLsYnHLsB2V0SmWoVYlNSObP5Q=
Subject key identifier: 21:D7:7F:2F:EF:4D:96:62:61:6E:3B:AE:F1:2A:D0:34:1E:5D:70:F5
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 6A64207C6163781B298A0854E44F09DB954FADEE
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363036313a3a2f34382d3438203d3e203136393039.roa
Signing time: Sun 02 Mar 2025 15:27:08 +0000
ROA not before: Sun 02 Mar 2025 15:22:08 +0000
ROA not after: Sun 01 Mar 2026 15:27:08 +0000
asID: 16909
IP address blocks: 2a14:7584:6061::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 16 Mar 2025 16:16:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:64:20:7c:61:63:78:1b:29:8a:08:54:e4:4f:09:db:95:4f:ad:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Mar 2 15:22:08 2025 GMT
Not After : Mar 1 15:27:08 2026 GMT
Subject: CN=21D77F2FEF4D9662616E3BAEF12AD0341E5D70F5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:7a:8f:32:54:be:02:1b:7d:dc:dc:c4:67:db:
56:ec:a3:34:11:66:d0:82:48:d6:13:4b:50:bc:a3:
c7:f2:aa:64:96:31:15:8a:84:8f:4d:b1:42:29:de:
a1:39:ae:9d:50:34:8d:bd:ff:31:d8:68:5b:67:91:
d3:25:57:a3:fa:3b:48:ca:5c:97:69:10:b1:90:2c:
ee:36:1a:94:9d:e5:ab:41:0c:1b:00:45:b8:54:98:
17:03:1f:fa:55:ee:cf:77:8f:9b:62:05:8e:9c:30:
66:c2:6e:2d:d4:d2:d4:99:ef:97:95:42:66:21:64:
bc:48:87:c5:98:3f:a2:38:af:97:d4:b4:90:da:23:
f8:de:29:ed:99:e4:4a:e0:6a:f0:d9:97:20:4f:e3:
22:bc:d2:5c:b9:4b:01:fd:9f:d5:dd:fe:b7:76:cf:
5e:59:d3:ed:bc:61:e5:d0:33:fe:41:a7:48:6f:74:
8c:01:76:bc:36:8f:77:21:63:c5:c8:15:a9:36:08:
67:73:f2:b4:f4:01:75:c8:6a:01:0f:8a:2a:62:e3:
35:b8:61:db:c1:69:d1:e9:9f:77:d3:79:6b:2b:af:
9a:ba:8b:c4:19:4c:53:dc:a5:21:0a:3c:f6:32:cd:
3c:45:49:b3:7c:8d:02:f9:5b:d8:45:b9:4e:40:5d:
dd:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:D7:7F:2F:EF:4D:96:62:61:6E:3B:AE:F1:2A:D0:34:1E:5D:70:F5
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363036313a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6061::/48
Signature Algorithm: sha256WithRSAEncryption
49:e3:d1:1a:cf:55:54:fc:e4:a2:12:ee:f6:8c:0c:24:22:eb:
44:70:5e:9e:af:c5:dc:8d:94:c7:06:9c:9f:8d:9b:a0:7f:83:
7c:58:66:91:63:0b:42:f1:26:45:72:84:15:dd:a4:c5:34:8d:
6e:2d:46:98:d0:6f:47:d8:3e:60:a8:35:03:ab:1f:0c:b1:d5:
5c:8c:2a:8b:56:ea:36:c2:59:3a:f5:6b:9d:f3:49:58:4d:f0:
0a:40:be:32:d7:31:79:f1:42:a4:66:ea:e3:cc:9e:75:23:05:
16:3a:3f:37:2f:bf:d7:7e:63:61:b4:10:13:14:bf:9a:54:15:
3d:e6:6b:43:df:a9:c7:01:a5:01:e0:bf:c2:2f:8e:85:6c:13:
c5:69:66:ed:09:2d:2f:fc:5d:8f:a4:cf:ad:e2:cd:4d:c7:73:
a5:2e:4b:44:ba:5e:c9:31:63:18:44:06:70:1d:d8:ee:52:c5:
35:14:c6:27:cf:b0:ac:d8:b5:2b:12:fd:41:5c:02:0b:f2:63:
8e:8a:fe:b6:17:91:47:f4:f6:65:b7:16:14:3a:44:e2:1c:bb:
3e:a6:d0:f3:fc:14:3e:66:d7:12:36:38:e3:13:16:9d:3c:96:
d5:05:20:58:60:44:db:59:80:bf:46:2c:56:c4:ac:d2:a6:66:
34:aa:5c:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:42:26 2025 by rpki-client