Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363037303a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363037303a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: WDdyTJATj/MAkSJw2B3Uwx+9NeEm9+bl6yjVEMv/Huk=
Subject key identifier: 78:F8:C9:2C:C3:21:54:32:DE:40:69:A2:0D:71:18:EC:2A:87:0C:AB
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 2ECBFCF311B12005041387C035FEFC123A09AA2B
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363037303a3a2f34382d3438203d3e203136393039.roa
Signing time: Fri 27 Dec 2024 18:05:46 +0000
ROA not before: Fri 27 Dec 2024 18:00:46 +0000
ROA not after: Fri 26 Dec 2025 18:05:46 +0000
asID: 16909
IP address blocks: 2a14:7584:6070::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 01 Jan 2025 21:53:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:cb:fc:f3:11:b1:20:05:04:13:87:c0:35:fe:fc:12:3a:09:aa:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Dec 27 18:00:46 2024 GMT
Not After : Dec 26 18:05:46 2025 GMT
Subject: CN=78F8C92CC3215432DE4069A20D7118EC2A870CAB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:11:e0:42:34:6b:54:20:34:c7:2b:b0:07:f8:
94:8b:e2:41:42:9b:12:e9:50:76:48:59:95:09:0f:
74:cc:21:d5:b8:5c:8d:9d:f2:76:5e:ab:99:bd:01:
e2:96:a8:b9:5d:b8:b4:b2:ec:b0:c4:ac:5e:29:61:
94:4e:16:ce:81:fe:b1:96:13:e7:af:8b:5e:54:3f:
67:0c:1c:48:53:36:7e:d8:9b:0a:0c:55:8a:f4:a6:
66:95:c0:d3:97:fc:b7:aa:5d:61:0d:e5:0d:05:f3:
6c:32:db:6a:a9:39:8d:19:fe:3d:fe:48:98:7b:40:
f6:3a:d8:f0:dd:c8:ef:4c:bb:e6:53:59:ab:04:8c:
d0:ef:51:bd:50:51:48:1d:94:f6:43:f6:80:cd:d5:
be:7d:66:22:32:4e:45:a8:23:34:a5:22:18:23:62:
1e:76:9a:d1:41:b3:20:6b:02:3b:1c:d9:6b:03:4d:
3a:f6:95:08:f3:46:bf:98:35:99:83:e2:44:6d:1f:
d9:ff:9f:a6:08:0f:d9:d8:6c:12:ad:84:d8:0c:34:
f8:28:8a:f7:1a:af:c4:83:e7:e3:b6:92:cd:ac:1a:
4d:c2:cd:9e:3e:13:0d:79:4d:45:49:c4:e5:d4:d1:
78:c5:4b:51:51:9e:cf:49:e1:6a:24:ff:15:58:d5:
05:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:F8:C9:2C:C3:21:54:32:DE:40:69:A2:0D:71:18:EC:2A:87:0C:AB
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363037303a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6070::/48
Signature Algorithm: sha256WithRSAEncryption
38:dc:3f:8d:b5:50:13:52:8c:70:2b:cd:4f:73:de:58:14:76:
3d:27:eb:94:8b:f7:0e:6d:a4:47:08:dd:d6:69:f1:0c:62:0c:
37:cd:00:81:43:cd:e6:95:33:fd:a5:80:d6:e0:bc:f5:80:ab:
88:fd:f4:79:c6:8c:0f:e5:05:2d:6c:21:9e:b4:9d:04:7a:c2:
aa:ad:cd:f0:08:59:12:ff:56:73:60:b4:f7:e2:0b:33:71:db:
1b:d3:3c:61:3f:93:47:78:a8:b5:0d:65:4b:6d:d6:b4:13:a9:
d0:fe:b3:31:a4:c8:1b:ad:9b:55:ff:d0:1d:b3:73:5f:88:a1:
2c:c5:c5:20:3b:b0:d8:d3:a8:52:06:e6:cf:6b:42:32:0a:8c:
65:36:76:a4:5c:7d:ac:5c:36:32:7e:dd:f3:df:f8:57:3e:45:
b7:53:1f:24:4b:f0:42:a0:5f:fd:88:bf:c4:c7:f7:1e:40:4e:
3a:8c:5e:53:69:d7:6c:c0:e3:95:d6:ca:32:0d:ee:66:be:ee:
70:21:ab:98:5a:cd:02:73:0c:06:a8:5d:e4:0b:e1:59:f9:38:
83:7d:c9:8c:7e:28:cf:10:e4:e9:de:31:f5:30:64:77:b4:a4:
2e:df:b6:9a:d9:f3:bf:8c:96:9e:b0:d7:da:4d:57:cd:10:48:
be:86:73:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:46:06 2025 by rpki-client