Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363036343a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363036343a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: RGty3XMr7cDb1D0S983UzgGtnBe1E0IVcG1xcKiCl7I=
Subject key identifier: 5A:98:70:69:7F:A4:39:88:27:84:80:9C:82:4C:52:1C:BF:B1:00:BA
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 5BDF799CE0538B83DC2FBDC649019CF7E1CC6DBA
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363036343a3a2f34382d3438203d3e203136393039.roa
Signing time: Sun 02 Mar 2025 15:27:29 +0000
ROA not before: Sun 02 Mar 2025 15:22:29 +0000
ROA not after: Sun 01 Mar 2026 15:27:29 +0000
asID: 16909
IP address blocks: 2a14:7584:6064::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 10 Mar 2025 12:11:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:df:79:9c:e0:53:8b:83:dc:2f:bd:c6:49:01:9c:f7:e1:cc:6d:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Mar 2 15:22:29 2025 GMT
Not After : Mar 1 15:27:29 2026 GMT
Subject: CN=5A9870697FA439882784809C824C521CBFB100BA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:7a:48:f1:10:64:d3:a0:84:24:fc:bf:b9:cf:
c3:47:b7:1c:c6:78:29:82:e1:78:fc:60:cb:f6:e0:
19:0a:f2:fd:c7:67:4a:dc:7b:b9:f3:b2:c4:fb:68:
02:17:88:6d:c4:fe:b5:1c:02:0b:7a:6c:b7:cb:33:
c4:cf:af:b5:d4:c8:9d:e3:5c:20:9f:e5:9e:6e:3f:
ed:d5:fb:c0:41:77:6b:1d:71:44:fe:61:79:39:54:
86:98:3d:06:e5:9f:f0:a3:8a:84:fb:2c:44:31:55:
1f:16:3b:b4:b4:e9:b4:76:04:6d:63:d9:6b:66:30:
57:6a:9f:05:64:e5:68:02:d6:68:6c:bb:b2:c9:81:
a5:82:8c:0b:0e:d2:60:86:5d:44:d2:d3:18:55:36:
e2:1a:ac:fd:06:4d:4f:a7:04:c1:9f:8b:64:44:d4:
bb:34:82:a7:12:2d:af:29:12:3e:a3:cc:15:21:72:
13:11:90:b8:3f:3c:ba:08:77:66:f1:93:bc:fd:51:
79:8c:a4:2b:8c:1b:20:da:7d:1f:c6:23:dd:e8:0b:
78:c6:8d:d6:8e:36:e1:b8:a2:04:a2:53:c0:2b:29:
c7:12:c8:f0:8b:b4:ca:24:c7:8e:f2:e8:c1:e4:f2:
a0:ef:80:46:1e:8e:a7:9f:02:7c:be:39:ec:e4:8b:
b9:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:98:70:69:7F:A4:39:88:27:84:80:9C:82:4C:52:1C:BF:B1:00:BA
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363036343a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6064::/48
Signature Algorithm: sha256WithRSAEncryption
89:86:53:63:73:4d:3f:74:89:b1:46:6f:4e:e9:7b:d9:24:97:
38:fa:7b:ba:aa:2b:ba:ae:ac:8b:09:ea:2d:c1:b2:39:75:82:
52:ec:c8:be:f1:cf:de:07:a2:f8:6c:08:f4:eb:f2:7e:d4:03:
56:0b:f3:f0:24:13:56:93:89:49:db:75:06:2e:b6:68:a1:ad:
d4:f2:70:18:b6:3c:7a:df:eb:68:33:13:46:f1:b8:a1:31:10:
da:b1:81:f8:e8:d7:88:ca:eb:4f:56:96:42:bb:97:85:38:a3:
d1:2c:d5:cb:b2:1b:2b:a2:0b:80:99:17:8a:1b:1c:d0:20:bb:
83:fb:31:29:ca:b8:ec:3c:ab:d4:07:24:43:fc:5f:be:29:4b:
a2:f7:c0:f1:bc:71:b8:3d:1c:53:72:b2:a8:d2:09:ad:39:3c:
49:f7:34:d1:1f:17:b0:c8:32:38:ed:35:dc:ab:53:92:80:f2:
46:d6:10:5c:3f:16:c7:3c:1c:98:ac:87:68:a0:57:fd:18:aa:
1d:0c:18:0f:f2:75:6c:4a:9c:d7:b8:4f:71:2d:26:2c:ce:77:
96:93:43:b7:11:e5:18:4f:50:93:e0:85:d5:6c:fa:1f:45:5d:
5c:4a:d2:a9:7a:32:a1:3a:db:1b:05:d0:f3:f5:64:16:cf:1a:
9f:c9:f4:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:42:24 2025 by rpki-client