Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363038383a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363038383a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: oZP+gqbRCK9xnaP1uxgxJltNQiZIzQjz/Kx/NWiZnhQ=
Subject key identifier: 1E:34:F9:39:E1:58:89:34:38:83:C4:8B:C0:61:60:DC:74:31:37:9D
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 6A07923276E608978C6EABEF330DCBA656FD1AEB
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363038383a3a2f34382d3438203d3e203136393039.roa
Signing time: Mon 10 Mar 2025 11:55:01 +0000
ROA not before: Mon 10 Mar 2025 11:50:01 +0000
ROA not after: Mon 09 Mar 2026 11:55:01 +0000
asID: 16909
IP address blocks: 2a14:7584:6088::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 16 Mar 2025 16:16:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:07:92:32:76:e6:08:97:8c:6e:ab:ef:33:0d:cb:a6:56:fd:1a:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Mar 10 11:50:01 2025 GMT
Not After : Mar 9 11:55:01 2026 GMT
Subject: CN=1E34F939E15889343883C48BC06160DC7431379D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f3:8c:cb:fe:b7:70:e7:ea:6c:b1:7a:98:a7:
1f:14:0e:14:0f:bd:20:99:54:2b:b3:75:a9:a0:1e:
25:7a:ba:60:ce:c6:81:01:8c:06:0f:d3:b2:89:65:
b8:30:cc:0a:95:07:fe:be:74:03:18:86:07:b7:29:
96:de:8f:39:03:40:b7:27:52:ac:af:af:7f:29:cd:
ef:fe:1e:82:ce:6b:65:e4:2f:a1:42:ef:3f:0d:eb:
81:9c:77:f2:18:b9:15:32:19:37:00:dc:64:6c:01:
21:49:da:26:86:3e:b9:be:d0:b1:b6:41:46:35:44:
a6:b4:fa:1f:de:fa:d3:8f:1a:0f:bb:7f:81:6c:84:
d4:86:25:02:f4:0d:cf:b5:9e:89:58:e2:7e:80:a2:
66:db:57:d0:6c:d7:77:43:aa:97:36:bc:b3:8e:dc:
7e:0a:e7:d5:61:83:1c:3d:02:c7:06:65:c9:d8:ed:
73:4e:3e:33:db:4a:71:7e:d0:0d:4e:5c:c2:2d:48:
2e:a0:96:ae:c3:7b:2c:9b:7a:36:01:63:91:c0:79:
d4:4b:03:52:20:00:f1:68:de:91:fa:63:ac:50:3d:
dc:67:2e:04:e8:03:5f:31:e9:3d:fa:68:94:f2:51:
ec:92:b8:06:fb:16:5c:34:4a:ca:1c:95:83:36:dd:
9a:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:34:F9:39:E1:58:89:34:38:83:C4:8B:C0:61:60:DC:74:31:37:9D
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363038383a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6088::/48
Signature Algorithm: sha256WithRSAEncryption
65:64:fb:73:10:a6:5f:79:15:d0:a1:73:fa:63:47:b8:e9:72:
ec:01:b8:ef:bb:e3:26:85:a9:01:6d:e1:3a:c1:0e:88:1d:d6:
b6:05:88:77:6d:2a:ee:eb:af:b4:eb:9d:cb:d7:5c:f8:8a:0a:
50:72:7a:5e:71:1a:99:26:68:60:25:35:86:aa:9c:fc:64:e5:
2d:a4:b3:87:26:2d:6b:21:ae:0a:fb:11:8a:a9:c1:49:b4:ec:
e1:96:af:4c:2a:89:44:90:a2:48:79:d5:2d:fc:39:20:93:f4:
eb:f8:45:01:36:8f:d2:42:3c:5f:6b:8d:50:08:a0:c1:0e:c6:
dd:0e:a7:8f:27:0e:34:92:fc:b6:64:31:a8:54:cb:2f:b5:e7:
2d:0f:56:07:53:eb:39:86:67:e2:1e:ed:8d:aa:2b:be:fc:06:
4c:8c:7d:b2:3a:b0:a6:30:95:68:83:9a:52:5c:7d:ca:af:c2:
93:a1:22:a1:1d:92:83:c3:11:bb:63:b0:b1:e2:17:b9:b9:65:
a5:d1:17:48:6c:25:f0:08:fa:8a:8a:b5:82:f4:18:93:d8:53:
77:3b:9d:bb:61:e3:06:d5:71:f9:4b:c9:1b:9b:f4:7d:28:3e:
75:ac:4c:5d:de:1e:a0:e0:c6:e7:e3:00:c1:31:b8:36:29:03:
9d:1f:d8:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:50:24 2025 by rpki-client