Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363037353a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363037353a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: 0dIS8ZRxJ60TutzUVXW8YO2LtBFJ5STuFDAdjxoHAV4=
Subject key identifier: 62:A9:EE:8E:0C:4F:FF:AF:B7:17:CD:A5:DC:98:65:86:7B:16:CB:3A
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 48A44B4D74CD75694BC90E1E4EF506F0E45C7BFE
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363037353a3a2f34382d3438203d3e203136393039.roa
Signing time: Mon 10 Mar 2025 11:54:00 +0000
ROA not before: Mon 10 Mar 2025 11:49:00 +0000
ROA not after: Mon 09 Mar 2026 11:54:00 +0000
asID: 16909
IP address blocks: 2a14:7584:6075::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 16 Mar 2025 16:16:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:a4:4b:4d:74:cd:75:69:4b:c9:0e:1e:4e:f5:06:f0:e4:5c:7b:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Mar 10 11:49:00 2025 GMT
Not After : Mar 9 11:54:00 2026 GMT
Subject: CN=62A9EE8E0C4FFFAFB717CDA5DC9865867B16CB3A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:8f:10:65:e7:de:b7:22:80:56:32:6f:df:a8:
ee:57:c6:de:81:1d:0c:9d:d1:78:90:02:b6:43:e5:
6b:fc:3b:9b:30:4e:a5:e8:61:73:cc:ff:c5:9d:d2:
64:9d:8b:4f:2d:40:57:16:7e:5e:9f:0c:36:d5:4d:
03:a2:73:2c:a3:9f:a1:03:fb:c7:fb:12:1c:66:ed:
e4:85:16:61:29:09:ae:e0:60:1a:22:67:31:13:ba:
18:ac:c8:35:45:3b:fa:a3:3b:59:f8:25:af:e3:68:
1e:97:36:dd:b0:4e:c5:a4:6b:80:fc:49:d9:b3:a8:
61:6c:83:33:6d:38:60:a3:54:38:87:c8:48:6c:1d:
b2:c7:4c:ab:a5:89:a4:f6:b2:dd:dd:0d:c9:6b:18:
5d:7e:93:68:17:15:7e:11:46:f2:6d:b5:ea:3d:67:
22:d3:19:88:dd:e6:47:64:a1:79:ab:d9:5b:2e:c8:
f6:11:66:5c:e9:57:31:8b:07:86:08:83:4c:fb:99:
59:cf:e0:49:f2:fe:ea:2e:b6:59:c5:84:ba:06:1c:
c0:82:e4:e1:d2:40:06:d1:30:17:94:c1:e2:76:8e:
dd:e9:f8:f6:e5:86:56:90:c4:39:ce:e1:47:5f:83:
f0:27:31:5d:73:d9:99:c8:05:02:75:37:0d:44:c3:
30:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:A9:EE:8E:0C:4F:FF:AF:B7:17:CD:A5:DC:98:65:86:7B:16:CB:3A
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363037353a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6075::/48
Signature Algorithm: sha256WithRSAEncryption
9d:29:36:93:2b:10:9d:1e:0e:b9:6f:93:88:20:9b:dd:c9:03:
a9:ff:73:55:d5:d7:8f:0a:8e:84:1a:cc:80:c2:50:f2:cd:9b:
cb:2d:a8:77:cc:f8:62:f2:d9:45:4c:26:65:31:a3:c1:64:b9:
af:87:17:8c:bf:45:af:cb:83:d6:f0:db:a1:b3:4f:2b:59:dd:
f1:25:c4:1d:28:22:a7:98:94:36:3f:d2:a9:6c:d5:29:79:e6:
d2:20:ad:21:e6:a2:d0:72:29:dc:3e:af:27:aa:55:88:47:e5:
0a:6a:34:08:5d:8e:ac:64:64:fe:6e:37:02:d1:d4:f2:88:28:
3f:2e:56:d4:3d:c9:57:52:43:43:86:39:f5:b2:aa:14:8d:91:
f3:7f:85:de:4c:96:79:07:f0:e1:fa:14:b2:52:4f:31:96:e8:
78:77:25:68:c1:73:33:2a:38:7e:f1:73:74:b3:02:06:6b:a6:
c2:fa:29:28:18:62:0a:f1:8a:8f:af:8d:f2:0d:3e:c5:a3:c9:
be:83:23:dd:70:96:63:d3:08:d9:4f:e6:ce:82:0f:45:83:e1:
4a:22:b4:dd:b0:28:ef:53:12:48:ea:43:49:57:bb:70:18:0f:
c5:f3:b5:5d:e8:05:05:d0:4f:f4:dc:c6:0e:e2:6c:cd:57:73:
e7:82:0f:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:42:13 2025 by rpki-client