Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363037323a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363037323a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: PcLMyZrOsYPuc98HQ8NfJTn8GKBvUIansVMJXWJ/5z0=
Subject key identifier: 4C:3E:CD:D9:FB:04:33:41:41:5F:4B:01:1C:4C:CB:CC:BC:E4:F1:8F
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 53619F0C299FE3C42E1E944A15E45CE00856E40A
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363037323a3a2f34382d3438203d3e203136393039.roa
Signing time: Mon 10 Mar 2025 11:53:57 +0000
ROA not before: Mon 10 Mar 2025 11:48:57 +0000
ROA not after: Mon 09 Mar 2026 11:53:57 +0000
asID: 16909
IP address blocks: 2a14:7584:6072::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 16 Mar 2025 16:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:61:9f:0c:29:9f:e3:c4:2e:1e:94:4a:15:e4:5c:e0:08:56:e4:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Mar 10 11:48:57 2025 GMT
Not After : Mar 9 11:53:57 2026 GMT
Subject: CN=4C3ECDD9FB043341415F4B011C4CCBCCBCE4F18F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:81:b1:3b:fd:f4:36:b0:af:57:28:e1:8c:d8:
c1:34:df:bb:58:5e:e7:95:f9:c9:73:7a:e9:96:0d:
22:f4:3b:e7:40:83:5b:ea:07:a3:6d:0b:25:63:c8:
74:bb:34:03:3b:51:1b:12:9e:70:3a:9c:17:e5:fd:
28:3a:a9:5e:17:12:4a:d1:6f:75:53:12:a9:eb:50:
fd:99:85:eb:74:c8:c0:b3:0b:e6:ec:c0:d4:ae:11:
38:5e:b5:6a:18:00:1d:99:22:d1:0f:4b:07:65:6f:
24:69:10:6e:89:25:95:ca:b6:f3:42:3d:1a:e7:c5:
c5:ac:c6:41:10:36:0c:90:83:8b:b8:29:95:06:0c:
e0:02:57:fe:44:87:52:98:37:8f:59:bd:79:ad:0d:
9f:5c:c2:46:b6:01:63:5a:04:1d:18:4c:29:e3:7d:
b6:1d:d1:50:4d:6a:d3:8b:bd:40:82:92:9f:a1:a1:
41:9c:9d:e2:fa:02:fc:79:3c:c3:19:8d:2c:2a:fe:
43:c4:a7:d1:52:39:43:88:41:96:93:cb:9d:cd:a1:
4f:37:c9:64:e2:47:7c:c2:4e:c1:5a:27:2a:46:88:
1e:e9:86:a2:1c:80:7e:82:79:48:bf:00:f0:24:d8:
6e:81:15:55:35:f5:67:0a:87:8b:7e:30:6e:f5:49:
af:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:3E:CD:D9:FB:04:33:41:41:5F:4B:01:1C:4C:CB:CC:BC:E4:F1:8F
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363037323a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6072::/48
Signature Algorithm: sha256WithRSAEncryption
45:a9:80:ce:28:84:91:48:91:75:29:a7:a7:e3:f9:5f:81:5a:
a1:1f:3b:22:48:a5:d6:df:c6:c5:d7:23:f3:a3:63:ee:cd:ed:
a7:9c:09:35:b2:07:39:ff:49:c4:e8:a8:8e:88:a1:09:d6:42:
60:55:16:9d:5b:5f:ea:54:1d:19:32:8d:f8:64:fd:3a:37:6a:
85:d4:ad:d2:89:b3:97:ab:dd:83:8c:30:c2:f7:fd:a8:72:02:
bc:b8:8f:55:88:ec:56:b5:a4:08:31:c5:ad:22:f3:fb:fc:0f:
e8:e2:45:6e:dd:cd:66:99:b8:bd:e8:f5:e1:16:72:3f:93:72:
00:17:f6:f5:a7:6c:50:6b:e9:b1:90:81:b6:ac:02:02:4d:89:
c8:e2:37:d1:7b:b5:eb:54:6f:31:79:dc:eb:dd:9b:e8:11:77:
96:0d:d6:8d:24:e1:bf:70:15:d5:23:4c:d4:64:d5:29:4d:fa:
32:cb:64:ad:de:79:a8:c8:0b:bc:bb:5e:ca:8f:d4:0a:5b:fb:
7c:31:79:2e:05:e3:9a:66:26:17:2a:af:09:bc:6a:ee:a8:5d:
43:83:98:ce:be:79:a9:42:d6:38:db:54:99:33:57:b7:c3:ea:
9a:1d:ba:fd:5e:57:04:f6:45:f2:47:4b:e3:b0:6b:18:63:65:
41:82:17:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:42:13 2025 by rpki-client