Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363038353a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363038353a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: h6YqSuN8XTAiB26F64YcYRMTxFMB1L3CoGw4SNGY9TE=
Subject key identifier: 7A:7D:4A:B7:75:3E:A9:85:BA:E8:78:89:CA:75:09:F0:84:EE:39:B5
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 3376D804128E07597AA9E4024810FF32FEA56A29
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363038353a3a2f34382d3438203d3e203136393039.roa
Signing time: Mon 10 Mar 2025 11:54:59 +0000
ROA not before: Mon 10 Mar 2025 11:49:59 +0000
ROA not after: Mon 09 Mar 2026 11:54:59 +0000
asID: 16909
IP address blocks: 2a14:7584:6085::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 16 Mar 2025 16:16:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:76:d8:04:12:8e:07:59:7a:a9:e4:02:48:10:ff:32:fe:a5:6a:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Mar 10 11:49:59 2025 GMT
Not After : Mar 9 11:54:59 2026 GMT
Subject: CN=7A7D4AB7753EA985BAE87889CA7509F084EE39B5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:9b:38:4d:91:ef:8d:f3:14:28:47:44:66:90:
fc:ca:52:f5:7c:57:a9:b1:5f:4a:f6:db:fa:da:0f:
26:57:1f:fe:c3:fb:5f:b4:09:74:c0:77:fd:7f:af:
95:ff:b0:df:35:c7:79:10:20:50:e0:1f:46:e9:c8:
a1:5c:ee:a1:05:b8:c0:1a:27:58:0f:33:30:46:8b:
7c:07:cc:e3:10:d5:2e:89:62:36:33:57:74:fa:52:
43:c0:02:55:24:47:8f:d1:a6:8b:03:21:51:85:5f:
aa:05:f0:ac:f9:33:b1:77:83:bf:a0:aa:17:e7:b4:
d2:d7:c6:1a:45:b8:82:95:cc:88:62:e5:38:b4:c0:
cd:bc:fb:71:0d:55:6c:ee:cc:9e:2f:fd:46:b9:fd:
7a:61:00:29:52:c6:ad:b0:ec:38:c7:05:10:bd:e5:
bd:64:84:f6:ad:c3:e5:8a:c0:1c:5b:02:e5:cc:28:
ae:ff:74:3a:7f:e2:6e:12:f5:28:6a:5b:eb:eb:a3:
e5:47:ad:d6:c7:8c:5f:07:2f:27:d2:a8:48:cd:e0:
b3:00:84:7f:8b:67:b7:53:c6:82:ee:c7:92:a8:a5:
ee:99:ec:13:20:73:65:46:7a:e4:57:1b:cc:1b:b4:
10:f8:d9:ca:b0:d7:96:63:53:21:d9:b7:cc:67:5b:
c8:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:7D:4A:B7:75:3E:A9:85:BA:E8:78:89:CA:75:09:F0:84:EE:39:B5
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363038353a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6085::/48
Signature Algorithm: sha256WithRSAEncryption
96:6b:da:87:61:c5:95:4f:a6:26:ef:53:52:c2:64:bb:65:d9:
ed:d1:fc:f2:ce:f1:08:02:5e:b3:4d:ac:75:c8:f5:6a:7e:95:
13:60:55:52:4c:3f:0a:91:a4:d4:72:97:0b:14:76:68:77:65:
8e:2b:5a:78:59:0c:5e:d3:ec:d5:b8:0c:78:78:e9:a4:20:65:
2b:5d:eb:e7:cf:be:98:09:88:1f:40:d7:62:9c:73:4b:4c:5f:
c4:98:9d:e5:14:8f:8d:52:66:d1:f3:fc:ed:25:d1:58:d4:11:
9c:ca:10:9d:24:a4:25:b0:81:cd:49:e9:b3:b6:5c:72:98:7f:
59:c7:ca:31:6a:cb:f5:46:78:1c:67:a3:f5:d2:11:e9:eb:43:
af:00:a1:a3:67:d1:89:d4:a9:9d:3e:41:3a:ae:3b:09:e8:a7:
c0:15:8e:83:64:9f:85:0d:24:cb:9f:a5:d7:07:6b:ce:a5:23:
ea:80:2c:37:69:d6:20:46:f4:37:e0:ba:b7:a2:98:14:af:c1:
4e:09:78:e1:e9:a3:f7:dd:0b:18:5f:de:b4:78:0b:ae:de:b8:
3a:4e:5a:d0:59:33:00:f3:1f:57:04:12:e6:dc:ab:dd:e5:b1:
62:a4:6e:3e:0c:49:5e:f7:8e:15:23:03:25:56:4b:c5:23:87:
25:14:d6:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:47:12 2025 by rpki-client