Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363036333a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363036333a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: dxFOe9TfSU2+aWgR1CIJLnJTqkk/uJQviet6gSmeYsk=
Subject key identifier: 4A:F1:E8:41:95:2B:2C:C9:01:6C:BB:6B:8F:18:DF:B4:BC:AA:BB:A0
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 3EA0664E6980495F8EC09558C7700E65CCF7A837
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363036333a3a2f34382d3438203d3e203136393039.roa
Signing time: Sun 02 Mar 2025 15:27:29 +0000
ROA not before: Sun 02 Mar 2025 15:22:29 +0000
ROA not after: Sun 01 Mar 2026 15:27:29 +0000
asID: 16909
IP address blocks: 2a14:7584:6063::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 10 Mar 2025 12:11:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:a0:66:4e:69:80:49:5f:8e:c0:95:58:c7:70:0e:65:cc:f7:a8:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Mar 2 15:22:29 2025 GMT
Not After : Mar 1 15:27:29 2026 GMT
Subject: CN=4AF1E841952B2CC9016CBB6B8F18DFB4BCAABBA0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:b7:f1:d2:ea:7b:fe:ce:ea:8f:af:bd:9e:d7:
28:e0:86:47:c0:e5:7b:8e:ff:6f:50:5d:0e:94:c4:
99:94:b7:17:27:de:3c:bc:ad:a2:a7:17:46:e3:96:
6b:19:3e:9d:e7:f4:34:f0:4f:d0:28:fa:cf:b1:41:
f9:21:a6:fc:5d:25:8b:95:0d:ae:56:5c:b1:a0:a9:
f9:9c:65:6c:98:42:22:4e:83:7d:70:73:1c:54:81:
dd:40:9b:d1:19:c0:3b:54:e5:7a:7a:d0:48:b4:23:
83:3b:e4:0b:4e:2e:d2:74:5c:64:ad:05:fa:8a:2c:
af:02:75:2e:be:e8:44:1f:81:5a:b3:e7:5d:32:1e:
3a:a6:0a:70:fd:98:35:57:97:d2:dc:a4:83:7c:06:
12:be:2a:ea:26:66:f1:3d:c0:43:7b:99:88:6f:9e:
7b:f9:ff:f0:ee:91:8c:9c:66:b1:32:93:f1:2d:8d:
43:6e:61:ea:e6:9c:a2:c6:dc:a8:d8:d0:dd:0a:55:
f0:9c:72:a1:65:2c:d3:81:31:b1:6c:2d:04:ca:c9:
08:a3:64:0c:95:d6:83:fc:86:b1:06:f2:2f:a6:0e:
cc:0f:55:68:2e:5c:eb:d5:f7:34:7a:47:63:2b:f1:
9b:8b:af:a8:ef:57:ab:39:1e:0e:c6:bd:66:99:28:
5d:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:F1:E8:41:95:2B:2C:C9:01:6C:BB:6B:8F:18:DF:B4:BC:AA:BB:A0
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363036333a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6063::/48
Signature Algorithm: sha256WithRSAEncryption
5c:29:bb:3d:07:0f:ef:f7:47:76:ba:d6:e5:7d:d4:74:f4:cd:
14:92:fc:1a:a9:af:a5:0b:03:e6:77:1b:bd:0d:57:fe:5c:70:
5f:70:98:d6:fa:e2:ea:e4:22:75:3d:76:cf:63:4f:32:86:1a:
2f:74:34:66:6b:2f:cb:0d:87:6a:b1:bb:80:b7:82:61:91:4f:
9c:41:74:71:dd:9d:cc:f8:9c:2b:cc:c9:78:b4:57:31:5d:ad:
e5:b5:a4:a1:22:cd:c5:98:87:3d:3a:c6:c9:17:aa:7f:5a:b7:
c6:f3:42:eb:61:59:97:24:0e:42:24:93:ca:8a:0c:1f:dd:d2:
89:13:d4:53:8c:da:60:a0:1b:f2:ef:a2:22:b9:6a:8d:df:65:
81:ab:58:32:12:45:cb:25:5a:8e:a9:b9:25:fe:42:cd:1f:fb:
84:91:5e:ba:38:52:fa:52:b4:d0:5f:b3:59:e0:67:31:36:df:
b0:7f:3a:28:62:83:ad:40:3a:04:28:bc:28:50:a4:68:8a:1f:
fe:72:e3:78:3e:f0:d7:90:b8:27:84:d1:79:a0:0b:4f:fe:06:
9d:c2:75:19:1e:89:12:6d:de:1e:f5:2f:4d:f6:78:fc:85:b3:
da:54:a0:9d:e5:14:dc:d4:c1:a2:bc:8d:79:e1:ff:44:6c:e1:
48:b9:bc:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:42:15 2025 by rpki-client