Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363038363a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363038363a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: 1rBUyuYGN0la7kiXAS84skroe3o/dJFTe1+tXcJbnTs=
Subject key identifier: D6:AD:B3:17:2F:68:DC:D9:80:1A:B2:7D:0E:6A:3F:BB:97:69:7A:DB
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 75DC3A856D8A8DCC10D4A86BF43F73D7FB212237
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363038363a3a2f34382d3438203d3e203136393039.roa
Signing time: Mon 10 Mar 2025 11:55:00 +0000
ROA not before: Mon 10 Mar 2025 11:50:00 +0000
ROA not after: Mon 09 Mar 2026 11:55:00 +0000
asID: 16909
IP address blocks: 2a14:7584:6086::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 16 Mar 2025 16:16:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:dc:3a:85:6d:8a:8d:cc:10:d4:a8:6b:f4:3f:73:d7:fb:21:22:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Mar 10 11:50:00 2025 GMT
Not After : Mar 9 11:55:00 2026 GMT
Subject: CN=D6ADB3172F68DCD9801AB27D0E6A3FBB97697ADB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:2b:1f:11:15:40:d5:90:7a:9d:5e:4b:60:d2:
fa:4e:6f:59:c7:22:7a:dc:f2:d0:b0:6c:0b:69:d1:
e0:cd:f4:0d:74:23:a8:21:d0:0b:d6:35:4b:7c:e2:
14:a5:7d:ba:11:d7:84:45:73:f3:b8:ee:72:fa:92:
af:23:0d:d5:a5:4d:46:51:d5:53:13:9e:96:d2:72:
44:6d:14:47:92:0d:0c:2f:b2:19:c1:f1:0b:30:bf:
f6:05:5d:1f:c4:17:cc:8c:19:af:86:b2:04:b8:60:
30:35:f7:a4:6e:6b:82:2c:b4:a4:db:a4:9c:1b:dc:
53:49:b4:c6:e5:0b:e0:3b:a5:64:d1:cf:06:32:b9:
dd:b1:57:f9:3b:8b:26:05:57:92:38:6d:89:e5:45:
78:d9:95:a7:97:24:df:6d:d2:36:99:a4:b0:ee:5a:
ef:3c:38:da:a7:ae:cd:91:fb:5a:67:dc:27:d8:88:
72:b7:aa:4d:07:03:bd:cf:31:36:20:3a:55:d5:5d:
71:75:eb:c7:36:12:a7:2b:86:2b:84:6c:54:e1:18:
be:8e:77:34:f3:90:c9:b1:2d:9e:89:83:5a:0d:04:
ce:83:56:a1:89:d4:fa:66:0b:33:ab:f0:e8:cf:4a:
af:31:7e:09:f5:d0:2b:bc:f7:0b:17:63:f1:18:be:
c9:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:AD:B3:17:2F:68:DC:D9:80:1A:B2:7D:0E:6A:3F:BB:97:69:7A:DB
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363038363a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6086::/48
Signature Algorithm: sha256WithRSAEncryption
76:b4:b0:95:67:dd:98:54:8f:51:80:9e:58:06:c2:e7:a6:d0:
c3:82:36:41:96:89:d1:70:f3:d7:17:4e:b5:93:8e:bf:5c:6b:
ef:b6:ba:18:bf:0c:e0:bd:51:77:65:47:e2:f5:65:26:18:ad:
12:97:34:fb:3c:fb:31:3b:1b:75:36:e4:a5:17:fe:28:a1:f8:
e5:15:04:4b:08:73:6b:5e:da:e4:ef:7a:bc:21:7c:cf:d8:ba:
e6:93:fc:3a:b5:21:f4:11:be:06:00:51:d3:5d:7e:ca:b5:e1:
b9:03:27:a1:f4:f1:43:55:51:02:66:64:65:0b:db:27:5d:37:
ce:62:cf:73:32:45:28:f1:4d:a3:58:7b:ef:77:ce:08:4d:d0:
24:9c:e8:2a:ab:7f:b6:11:8d:9d:f8:dd:94:bb:d4:3a:b4:1a:
00:74:2a:c5:cf:d5:9c:85:01:da:ea:6a:c2:4d:bc:38:3a:d4:
e9:c1:aa:f5:9f:3c:62:28:d2:38:68:85:78:b1:23:20:7f:18:
a0:fd:fa:6e:eb:6e:b0:11:46:0a:49:0d:4d:c7:cb:8a:f9:c3:
c5:0d:a5:46:f4:af:8b:06:7b:42:2b:f6:d5:0a:33:55:ca:5d:
73:99:e1:47:2d:54:7a:01:a2:8d:43:e3:30:9f:d5:f9:40:d5:
e0:a1:b6:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:49:33 2025 by rpki-client