Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363038373a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363038373a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: AxZiYWTJv++UMVnynmpHRsZ9KUp3/1yxptvsX9X5W0A=
Subject key identifier: 5B:B5:3A:AB:66:B6:13:8B:A8:1A:DD:43:63:DD:35:79:76:4C:2E:EA
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 2D28E522ECA10F48E100F49FD2D8A81197F23478
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363038373a3a2f34382d3438203d3e203136393039.roa
Signing time: Mon 10 Mar 2025 11:55:01 +0000
ROA not before: Mon 10 Mar 2025 11:50:01 +0000
ROA not after: Mon 09 Mar 2026 11:55:01 +0000
asID: 16909
IP address blocks: 2a14:7584:6087::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 16 Mar 2025 16:16:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:28:e5:22:ec:a1:0f:48:e1:00:f4:9f:d2:d8:a8:11:97:f2:34:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Mar 10 11:50:01 2025 GMT
Not After : Mar 9 11:55:01 2026 GMT
Subject: CN=5BB53AAB66B6138BA81ADD4363DD3579764C2EEA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:24:ee:ab:c7:f9:b8:47:09:a9:07:8e:d2:9b:
15:6f:80:72:ca:55:b1:a4:13:f9:80:b3:a3:6d:32:
0a:82:b0:12:9e:34:8e:4e:5d:d4:27:60:f6:64:cb:
e8:48:bf:20:37:5d:4b:62:14:14:0b:4c:c0:7b:07:
fa:4a:f9:f9:2f:22:f4:32:b0:bc:24:25:1e:3d:94:
6f:33:42:b7:d3:02:03:b5:55:05:6e:19:9b:6a:b1:
e3:26:4f:37:c8:63:00:e3:47:c1:19:c0:eb:83:16:
b0:25:8f:c3:25:f5:d0:47:3c:57:ee:19:b9:ce:d5:
c7:b0:6f:ed:bf:08:b2:1a:eb:6a:0a:59:bd:00:14:
dc:df:57:0a:cf:d6:12:3a:48:5e:c1:1e:3a:3a:c5:
85:56:9c:36:9e:56:f9:a3:c2:38:bb:a9:2f:15:7b:
be:2f:a1:84:3c:a5:04:9f:85:b5:66:b6:71:40:55:
84:a1:ce:34:3e:20:9d:cf:49:78:de:2c:75:4f:8f:
f7:bb:42:e2:cb:0d:01:5f:2e:eb:c2:3e:65:b3:86:
5c:de:d1:4d:c0:ed:14:00:43:71:49:e0:1f:1f:6c:
34:c1:57:0f:67:c0:e1:fe:04:fd:b9:8f:fb:1a:44:
36:11:f7:9d:fa:f5:9d:f8:ef:dd:d2:ce:0a:3e:a9:
ba:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:B5:3A:AB:66:B6:13:8B:A8:1A:DD:43:63:DD:35:79:76:4C:2E:EA
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363038373a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6087::/48
Signature Algorithm: sha256WithRSAEncryption
49:d1:9e:71:aa:76:09:49:13:f2:b1:2d:a6:a0:59:8b:90:fb:
62:59:c7:33:18:8b:70:1f:71:bf:b4:15:74:38:5b:8f:64:f4:
c4:4a:f9:d0:79:d9:51:7f:d1:60:93:40:e3:d7:ad:0b:97:71:
80:d8:15:ec:7a:93:ff:1b:96:72:0e:85:c4:dc:b4:60:c5:66:
03:a5:a0:0d:91:e2:15:cb:24:31:f2:3e:90:56:1f:42:29:cc:
df:ef:41:75:34:75:15:63:e0:0e:53:66:15:58:8a:f1:48:42:
4a:44:58:88:78:a7:fc:5f:07:79:23:1b:59:a8:a8:3b:8c:e4:
90:45:0e:41:20:13:df:5a:0f:91:cf:a5:5a:8f:da:bb:ca:25:
b6:6e:65:b7:2c:77:b5:d2:b7:c8:84:6a:1f:99:4e:e3:14:1a:
5c:75:f4:01:b2:ad:61:f7:bb:29:7e:fd:57:1a:ac:b3:3a:f5:
9e:a3:04:14:7f:5e:0d:f0:0a:d4:e8:b6:64:fa:73:80:c3:02:
59:55:25:ea:ac:d7:e3:d2:96:f1:8e:e1:e9:29:cc:af:b4:0d:
4c:ba:f8:ed:5e:9b:03:e3:45:57:43:92:ab:d9:83:cb:39:aa:
e9:49:75:f4:41:68:be:a9:f7:53:74:ab:92:d6:8f:c1:ab:31:
60:2b:c9:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:47:07 2025 by rpki-client