Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363037633a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363037633a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: qwdQFg1LyJGKk07YW7FX0VmIkCdVCxK3bZvzaDOsSVE=
Subject key identifier: A3:C2:A6:AA:87:6A:23:51:C6:27:31:B2:19:D0:2A:26:85:67:28:07
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 20075A358CFC7988FB87DF69909B27CB0EE676CF
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363037633a3a2f34382d3438203d3e203136393039.roa
Signing time: Mon 10 Mar 2025 11:54:36 +0000
ROA not before: Mon 10 Mar 2025 11:49:36 +0000
ROA not after: Mon 09 Mar 2026 11:54:36 +0000
asID: 16909
IP address blocks: 2a14:7584:607c::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 16 Mar 2025 16:16:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:07:5a:35:8c:fc:79:88:fb:87:df:69:90:9b:27:cb:0e:e6:76:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Mar 10 11:49:36 2025 GMT
Not After : Mar 9 11:54:36 2026 GMT
Subject: CN=A3C2A6AA876A2351C62731B219D02A2685672807
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:38:0b:dc:52:e6:e2:35:03:13:cf:67:76:8f:
2b:76:23:6a:f1:7d:fb:b9:60:6a:3a:91:e8:81:8d:
81:17:05:46:1e:83:27:ad:93:38:78:fc:ef:ce:3b:
0e:81:df:29:26:f9:32:60:28:38:a0:94:ae:43:7a:
42:1f:b2:98:63:1b:0f:20:c5:51:bf:16:1c:17:66:
c0:4e:a4:d8:87:2c:69:ad:1a:8e:38:cc:a2:38:54:
fe:ac:b8:4e:aa:67:dc:69:cf:48:db:f2:f8:9b:69:
f9:2c:c6:83:1e:e5:19:c5:46:f2:c8:86:e4:43:ce:
4e:44:e6:aa:94:14:d1:c9:ec:8f:d8:ac:82:00:41:
8b:de:f7:e5:f2:fb:90:a4:81:6c:f7:4b:3d:0e:81:
5e:6b:7f:d1:7f:32:2c:87:69:dd:bf:02:8b:ff:77:
f8:dc:35:7f:eb:c4:00:c2:08:a3:2e:36:47:f8:7a:
e7:e3:65:1f:2a:3f:f7:11:e8:27:dc:10:93:6e:e4:
7c:22:2a:14:7e:99:a2:ae:88:de:a6:90:de:c2:27:
be:08:8b:b8:33:5c:35:93:dc:da:bf:1f:d9:9e:4a:
6b:3e:42:35:d2:90:78:2f:97:33:40:e2:d4:d4:86:
0b:da:50:f5:13:44:e4:2d:04:83:52:7e:02:61:a7:
95:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:C2:A6:AA:87:6A:23:51:C6:27:31:B2:19:D0:2A:26:85:67:28:07
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363037633a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:607c::/48
Signature Algorithm: sha256WithRSAEncryption
1f:bc:99:c9:be:59:25:6d:f5:96:75:b7:3a:f3:c1:cc:61:df:
df:4f:df:af:8d:c4:3e:f6:e7:43:3d:c3:43:c1:bc:b0:3f:8c:
b3:54:ea:d8:30:f3:e0:5f:1c:23:c3:6f:f3:53:f3:1d:d7:b4:
01:fd:85:c1:98:05:90:f5:20:9c:d2:8f:4e:84:96:09:25:9b:
ac:00:fd:eb:2e:3c:71:b6:65:77:65:d2:eb:23:c8:0a:c1:8d:
d3:91:4f:2c:e0:bb:e8:a6:d4:f8:f6:16:d1:86:aa:b9:fc:13:
eb:ad:84:15:25:67:0f:95:05:3a:cc:9c:8a:64:c0:d0:63:a2:
9d:53:18:16:4c:41:72:e3:43:0a:4a:c9:fc:fd:1c:56:4c:f7:
8e:74:a8:b4:64:33:34:89:61:7f:fd:e2:6a:b5:98:64:10:35:
18:b0:0d:95:b4:4f:df:af:0e:d3:0c:fc:a8:1f:00:98:fc:52:
1c:e4:d7:ea:5b:cc:e5:f9:44:38:55:e1:66:ad:b4:08:11:a5:
56:47:1b:bd:e6:99:35:e0:34:e1:7f:89:e3:c4:3c:65:3f:dd:
61:e8:ff:19:af:a7:83:a1:78:06:e3:06:d3:11:60:24:ae:34:
89:7f:eb:b9:b1:74:7e:4c:07:c8:36:fd:ac:60:43:95:73:92:
9a:da:35:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:40:20 2025 by rpki-client