Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363038643a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363038643a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: x8IKp1P4DTa6cTrsW8FyH55ejCzn4TYw6HzCYPDbLpI=
Subject key identifier: 0E:DF:9B:CF:DF:56:EC:B3:2D:ED:FF:FD:6C:CA:E1:5D:D7:5D:2F:B2
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 0CA2829E4A1935F4B50234871165E6913FDC61CB
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363038643a3a2f34382d3438203d3e203136393039.roa
Signing time: Mon 10 Mar 2025 11:55:20 +0000
ROA not before: Mon 10 Mar 2025 11:50:20 +0000
ROA not after: Mon 09 Mar 2026 11:55:20 +0000
asID: 16909
IP address blocks: 2a14:7584:608d::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 16 Mar 2025 16:16:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:a2:82:9e:4a:19:35:f4:b5:02:34:87:11:65:e6:91:3f:dc:61:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Mar 10 11:50:20 2025 GMT
Not After : Mar 9 11:55:20 2026 GMT
Subject: CN=0EDF9BCFDF56ECB32DEDFFFD6CCAE15DD75D2FB2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:38:c9:73:7c:e5:62:9a:ea:59:53:8a:f0:0a:
b7:b4:37:2d:43:8f:da:5d:95:d7:54:3b:0f:aa:29:
c0:75:4e:ef:70:7e:8d:43:fb:21:1e:35:af:73:98:
13:3e:b8:36:8f:c5:30:8d:fd:1a:38:32:ed:03:33:
b2:48:d4:57:40:33:36:68:17:12:16:ef:9a:be:87:
ec:ab:79:df:a7:7a:36:99:a5:55:e8:f4:dc:65:91:
dc:24:e1:89:a1:c4:31:0f:cc:16:6b:a5:b2:60:9d:
99:41:5f:e0:e3:d1:db:d0:d2:27:10:d5:ca:ce:66:
a4:ac:67:cf:da:de:51:6d:06:bc:fb:cd:18:51:fc:
51:e6:78:60:a2:fc:5d:cf:ee:6f:2f:5a:30:c2:1c:
a6:be:77:3a:09:81:34:34:8b:ce:21:97:4a:24:67:
bf:1f:4a:ec:04:9a:85:7e:43:95:4d:2c:52:a7:0f:
3d:4d:b5:67:39:cc:e9:19:be:34:c3:9c:45:07:9d:
0d:ea:8a:47:e0:d3:1e:bd:0f:c6:7e:82:94:76:89:
04:af:f8:28:69:15:e3:67:c1:b0:5f:0c:2c:ec:03:
34:30:27:e7:13:ab:fe:b3:2c:7d:da:b9:4d:9e:a0:
0d:93:04:ad:4b:46:20:33:d5:26:59:f4:4d:e5:1f:
92:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:DF:9B:CF:DF:56:EC:B3:2D:ED:FF:FD:6C:CA:E1:5D:D7:5D:2F:B2
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363038643a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:608d::/48
Signature Algorithm: sha256WithRSAEncryption
ae:a4:0b:da:24:e4:32:18:34:e5:4f:01:87:59:aa:b9:99:3f:
27:b6:e9:98:2e:7f:f0:8f:7e:0f:1d:59:c8:6f:ef:04:03:26:
dc:1e:04:70:62:08:04:44:00:30:93:18:51:27:8c:9c:1a:18:
1f:ae:d4:86:21:99:bd:5e:13:f8:d0:77:bc:8b:5a:32:94:bc:
d4:85:d6:f1:4b:e2:b6:b0:ff:09:2d:a7:41:f9:42:4b:aa:15:
ad:46:b9:8a:1c:33:f4:24:6e:f8:fb:89:25:4b:4e:9c:02:85:
93:49:6e:f9:7c:55:94:7f:cf:b0:00:21:63:ae:3a:cb:43:fd:
df:b5:40:be:bf:69:3b:35:50:bf:9d:a3:65:45:7b:23:3f:91:
96:55:a1:cb:01:d7:87:c0:69:ac:60:9b:ee:ac:27:7b:90:94:
05:e9:da:44:11:25:cd:cb:b9:48:92:96:58:fc:a5:46:3c:6b:
02:0e:fe:58:ec:1e:bc:f0:6f:b3:84:6d:f8:8d:d5:93:83:f1:
06:bb:d3:c6:a3:ef:61:df:70:98:a9:c4:6f:76:f3:0d:61:0c:
e5:aa:de:cf:13:fb:55:51:34:4a:1a:65:91:37:47:64:77:1c:
f9:ab:35:60:3c:06:e4:ef:a3:da:63:71:83:4b:2f:8b:23:4a:
fa:4c:b3:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:45:08 2025 by rpki-client