Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363038333a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363038333a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: m+SKBpFGpMXjDa++jrPiqXv2FmgBbDjpf0Ptg9EulUU=
Subject key identifier: 4A:E7:62:16:B1:2B:94:E0:A4:04:FB:A8:7D:C9:47:F0:41:9F:F7:4B
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 154423167E278B32B17834EA91D85C69446DD6DD
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363038333a3a2f34382d3438203d3e203136393039.roa
Signing time: Mon 10 Mar 2025 11:54:58 +0000
ROA not before: Mon 10 Mar 2025 11:49:58 +0000
ROA not after: Mon 09 Mar 2026 11:54:58 +0000
asID: 16909
IP address blocks: 2a14:7584:6083::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 16 Mar 2025 16:16:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:44:23:16:7e:27:8b:32:b1:78:34:ea:91:d8:5c:69:44:6d:d6:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Mar 10 11:49:58 2025 GMT
Not After : Mar 9 11:54:58 2026 GMT
Subject: CN=4AE76216B12B94E0A404FBA87DC947F0419FF74B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:28:6b:c0:f8:91:e6:30:c2:b8:97:00:e9:4d:
97:55:9b:e9:d1:cf:f7:e3:67:dd:6b:47:81:6b:ef:
03:61:3a:b3:93:87:c8:b6:58:0d:b1:5f:c5:ab:62:
f5:f3:15:d4:59:12:b5:79:e8:58:b0:71:d7:09:db:
f2:31:fe:d7:ec:b6:c0:fe:44:f4:4e:33:21:14:72:
76:2a:c2:18:f5:03:f1:16:49:2f:cc:03:5e:15:e3:
ea:8e:3d:83:04:a6:be:75:d2:03:28:4e:60:6e:8d:
bd:5f:8b:78:42:fb:75:e3:3d:5f:88:d1:7c:19:70:
db:e2:5e:00:20:c5:e8:94:a4:83:22:56:a9:3a:0b:
aa:d5:48:32:d3:b1:56:3a:cf:18:55:24:b2:44:35:
b9:2e:90:41:13:03:3a:e4:44:07:d9:4a:7c:2e:0e:
58:8a:e2:3a:1f:64:c8:c9:79:e1:73:6d:d4:6f:f4:
b0:e7:84:85:5d:49:88:0d:ef:75:1f:2b:58:2b:8d:
c0:bc:b0:c5:ca:fc:cc:60:82:6f:e9:5d:a0:e2:16:
6d:25:fc:dd:87:22:f2:75:00:8f:f5:54:0e:97:d8:
7f:13:d2:81:01:44:34:62:f8:9a:e2:7d:97:b6:8f:
36:f0:d0:ff:9c:4e:ec:5a:19:a9:96:16:0a:d2:e1:
c2:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:E7:62:16:B1:2B:94:E0:A4:04:FB:A8:7D:C9:47:F0:41:9F:F7:4B
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363038333a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6083::/48
Signature Algorithm: sha256WithRSAEncryption
a1:9e:fb:28:b5:db:73:ca:6d:72:61:df:4a:c4:40:ef:63:b0:
69:4d:45:6b:4c:cc:c9:55:a6:12:07:75:2d:5d:cd:40:c6:57:
dd:34:06:67:bf:4d:a5:36:41:8d:ca:9a:9c:f4:95:89:46:5e:
f6:82:ed:02:fe:ca:f6:22:1a:62:2a:c4:65:57:f7:44:6d:07:
4a:b9:69:79:63:08:9e:78:51:f5:50:fe:8a:f4:c3:e0:8c:dc:
6e:42:b6:ce:72:7a:d5:33:52:85:1a:3c:7b:0e:3d:1f:da:60:
9d:bb:b7:b3:25:ab:db:20:e8:10:04:d4:40:73:d8:fe:f3:b3:
d9:16:29:8b:7b:c2:9b:50:ee:dd:0a:63:d5:e6:af:a4:90:67:
88:f5:e5:d2:e1:f7:94:8d:83:bb:7b:63:0d:bc:d2:e7:f7:5a:
d2:5d:a7:4c:d1:b3:ee:b1:8a:65:68:d7:dd:b9:a9:a0:2a:4d:
eb:f9:e3:14:24:96:06:5c:fc:bb:fb:32:38:db:58:7a:28:1f:
32:4f:17:99:6b:a6:bb:a9:70:4c:7f:9a:9e:82:b4:16:63:50:
cc:18:02:2a:c7:6e:1f:cd:09:35:d9:c5:a8:2a:b9:47:c3:45:
24:62:06:b5:5f:f0:61:b2:a0:6b:ea:a5:e8:a9:dc:0a:2c:5a:
50:40:8b:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:49:41 2025 by rpki-client