Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363036323a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363036323a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: YYpwjXHwAB2Dqn168FpFzkeyUwcXJQAYySjZXBit/ag=
Subject key identifier: 93:86:01:82:A3:D7:68:2F:E6:A9:D2:6F:CC:C2:75:5B:D9:C0:A8:F5
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 0316C180D4438B416DB7CA2046E455CA0F0DA97A
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363036323a3a2f34382d3438203d3e203136393039.roa
Signing time: Sun 02 Mar 2025 15:27:28 +0000
ROA not before: Sun 02 Mar 2025 15:22:28 +0000
ROA not after: Sun 01 Mar 2026 15:27:28 +0000
asID: 16909
IP address blocks: 2a14:7584:6062::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 10 Mar 2025 12:11:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:16:c1:80:d4:43:8b:41:6d:b7:ca:20:46:e4:55:ca:0f:0d:a9:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Mar 2 15:22:28 2025 GMT
Not After : Mar 1 15:27:28 2026 GMT
Subject: CN=93860182A3D7682FE6A9D26FCCC2755BD9C0A8F5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:fc:9b:c6:98:3e:bb:b7:e5:76:5a:cd:7d:07:
51:4b:e1:84:8b:c9:58:d2:6c:f7:18:18:05:97:c4:
bf:3b:56:6c:4b:1b:65:12:55:d2:69:75:cd:7e:80:
1d:a3:90:a8:1e:59:38:f4:2f:30:b2:c7:76:84:da:
1b:49:6f:55:57:3d:54:06:ea:92:a9:63:d0:6f:47:
84:86:32:a7:dc:2d:c7:4c:ce:d3:7f:71:87:0c:78:
ca:dc:c2:a4:8c:bf:b5:a2:dc:70:3f:f8:a4:58:b4:
02:b2:2c:84:5d:47:42:3b:8e:0f:ce:6c:8b:34:a8:
f0:8b:2e:3e:bc:00:74:ce:9f:50:bc:4b:46:7d:60:
6d:ed:36:ed:74:1c:20:c3:af:8e:87:c3:10:b7:af:
f8:be:bd:dd:de:38:a7:9c:03:5f:a0:d4:a5:4f:cd:
04:bb:e2:ec:23:6e:7d:22:a3:08:7b:a8:8b:a5:2e:
34:88:ae:b3:9a:ad:bc:4f:02:78:af:e3:f9:01:04:
67:8b:3a:72:b2:c8:5a:73:10:7e:d8:56:e3:c7:bf:
c6:bf:4a:04:51:71:49:60:83:c2:3e:a7:5e:9d:23:
f2:2f:97:1b:ff:82:ab:90:db:6e:30:3d:c9:e6:af:
f3:52:e2:cf:9c:ad:83:b3:b8:0e:23:c4:50:11:e2:
e7:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:86:01:82:A3:D7:68:2F:E6:A9:D2:6F:CC:C2:75:5B:D9:C0:A8:F5
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363036323a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6062::/48
Signature Algorithm: sha256WithRSAEncryption
7f:72:dc:29:ee:b9:36:eb:93:05:59:1d:85:20:2e:8b:29:d7:
a5:13:5a:72:b7:30:a1:9f:fb:2a:99:4c:e6:d9:c8:ce:9d:9d:
bf:08:69:f8:72:cb:a1:10:38:a6:ff:cb:a4:e3:ad:ce:29:cb:
a0:bb:17:45:c5:81:6a:aa:d6:fb:2c:aa:a4:72:15:75:ee:e9:
26:60:51:7d:18:2a:09:a9:57:01:74:0b:95:78:66:74:35:06:
61:f7:f4:28:9f:5c:c3:16:bd:1a:dc:8d:4d:33:cf:20:77:89:
e1:a7:4d:ae:07:3f:58:31:1e:4b:9e:b5:3b:73:db:f5:53:60:
9f:16:3a:6f:30:1b:b7:8c:f8:21:1a:36:33:f8:92:8f:93:7f:
20:15:46:90:61:b9:ea:e1:4c:9f:dc:1f:22:c0:33:7a:a0:65:
da:7d:73:3e:26:15:e8:bc:8d:fd:b5:cd:2a:d6:c2:f7:7d:fc:
71:92:ab:fd:19:24:c0:df:98:e0:0d:89:e8:b7:61:38:cc:78:
2f:ca:ba:32:2b:d6:46:75:57:a8:2e:05:ac:68:7f:71:12:11:
65:c5:3f:6b:d6:81:77:e1:04:dc:2b:cc:28:c1:c8:1b:72:b1:
58:28:c7:9d:02:b6:e6:5e:5e:81:93:5a:1d:fa:22:94:78:d1:
a1:e5:a7:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:42:24 2025 by rpki-client