Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363036353a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363036353a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: Nte2StB+UxqN2LXDUhsGrGOFhUpvEY3Ithy+U4cX9Pg=
Subject key identifier: CB:16:87:D4:99:34:CA:31:94:0D:3E:C2:73:9C:95:C1:2E:04:DA:F6
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 1B50ADB2AF29346D45A6E6F7ED6ECC457C283847
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363036353a3a2f34382d3438203d3e203136393039.roa
Signing time: Sun 02 Mar 2025 15:27:30 +0000
ROA not before: Sun 02 Mar 2025 15:22:30 +0000
ROA not after: Sun 01 Mar 2026 15:27:30 +0000
asID: 16909
IP address blocks: 2a14:7584:6065::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 10 Mar 2025 12:11:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:50:ad:b2:af:29:34:6d:45:a6:e6:f7:ed:6e:cc:45:7c:28:38:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Mar 2 15:22:30 2025 GMT
Not After : Mar 1 15:27:30 2026 GMT
Subject: CN=CB1687D49934CA31940D3EC2739C95C12E04DAF6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:9f:1f:b8:73:9f:fe:66:79:e6:46:91:f2:08:
92:76:c8:c1:9f:a2:23:8a:56:83:f9:26:e4:ce:d9:
c2:88:6a:5a:0c:09:2b:7d:5d:83:cc:1b:cb:bf:8f:
12:a9:e1:6f:7b:3b:22:2a:5b:12:66:64:86:ed:59:
a0:aa:ea:56:77:9f:5f:e7:83:d9:be:d2:45:9f:d4:
a7:b8:df:13:cc:1b:8a:c2:cc:51:87:b2:68:1b:bf:
0d:b6:1d:69:b3:55:c7:32:b5:fa:e7:e7:27:64:7c:
05:51:cb:33:d5:19:de:4c:f3:d2:3e:9b:f1:f9:6f:
82:fd:72:b0:4c:e7:0d:85:7c:28:df:43:ce:65:bd:
54:6e:df:cb:41:e0:2e:11:18:ed:c3:3b:4f:6e:62:
57:e7:bf:63:58:f4:96:b6:24:d0:34:a7:66:e7:ec:
f8:d2:8c:3a:c4:00:93:70:ac:93:bc:7d:6a:03:bb:
1a:43:85:e4:50:77:b7:78:e1:9a:62:1c:3e:51:ce:
d6:28:b2:d4:46:1c:59:29:22:ce:dd:2f:72:d6:18:
42:9a:5c:e8:5b:a6:94:1e:42:6c:68:b2:ac:5a:a9:
e0:20:7e:a9:2d:17:c9:e3:6c:56:d0:94:9b:f3:f2:
21:12:d8:23:25:8f:07:0a:34:d0:7d:c3:55:7a:b0:
9b:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:16:87:D4:99:34:CA:31:94:0D:3E:C2:73:9C:95:C1:2E:04:DA:F6
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363036353a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6065::/48
Signature Algorithm: sha256WithRSAEncryption
87:e8:57:bf:d9:98:0c:8e:48:2d:26:f4:0b:7d:95:b4:0d:c7:
81:0f:54:9a:a8:f2:5a:3c:69:94:cc:4f:6d:66:d7:18:d1:01:
b5:3a:14:e7:72:a2:b2:4f:7c:5f:ee:10:f6:62:0c:14:b9:c3:
df:e3:2f:eb:42:96:df:01:13:bf:4a:ab:c6:90:f3:48:71:e9:
4f:3e:3d:64:c2:f3:33:7e:35:f1:2c:86:86:fb:29:01:b4:d8:
54:5a:1a:0d:dd:02:ec:05:62:a2:18:65:a5:65:49:9e:fe:25:
ec:85:97:11:0d:17:5c:e0:8b:44:a0:07:0d:c7:41:dc:62:73:
e5:d8:65:99:6b:d6:6e:08:44:df:fc:cd:b2:5e:48:19:48:56:
50:57:79:55:18:49:d0:0c:4c:8b:a6:45:5f:ae:cd:2e:81:51:
b8:38:bb:7e:4b:48:d9:bb:4d:76:19:82:7e:a7:90:eb:b3:47:
12:7c:75:32:3c:b7:b9:a1:f9:cd:c2:51:c9:97:cd:ef:0e:7f:
8f:f0:5c:46:6f:e2:05:49:6a:08:69:ef:f9:86:1c:6f:73:71:
52:ac:54:4d:4a:d7:59:1d:a2:c1:6a:5c:21:34:c8:f3:c3:46:
55:46:83:f7:03:2c:a7:cc:0a:57:fd:5f:e3:34:b3:cf:b0:59:
34:75:ca:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:41:12 2025 by rpki-client