Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363038653a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363038653a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: QnLEdF5ag0QLyiJpCra0Z4KvnqldzeSO7zr7W/zeyBY=
Subject key identifier: EA:B8:8B:DB:04:32:BB:12:C1:08:F6:CE:AA:AC:79:90:88:FE:0B:57
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 3C06CB51580929C075813C75900EE1322C3A9110
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363038653a3a2f34382d3438203d3e203136393039.roa
Signing time: Mon 10 Mar 2025 11:55:21 +0000
ROA not before: Mon 10 Mar 2025 11:50:21 +0000
ROA not after: Mon 09 Mar 2026 11:55:21 +0000
asID: 16909
IP address blocks: 2a14:7584:608e::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 16 Mar 2025 16:16:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:06:cb:51:58:09:29:c0:75:81:3c:75:90:0e:e1:32:2c:3a:91:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Mar 10 11:50:21 2025 GMT
Not After : Mar 9 11:55:21 2026 GMT
Subject: CN=EAB88BDB0432BB12C108F6CEAAAC799088FE0B57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ae:ab:6c:06:1e:bb:a8:b4:44:da:4d:35:ba:
a6:ac:0c:09:18:56:e8:7f:f9:1c:af:09:1b:f7:1b:
90:b0:f6:14:49:c9:cb:03:ed:4a:12:a8:1e:01:44:
37:5c:55:7a:43:b2:01:f2:04:c5:7f:d1:5f:75:ad:
28:f7:2b:ce:49:ca:90:67:ce:c2:8d:c8:7d:7e:34:
1f:a2:77:98:c2:37:d9:96:c0:1a:17:72:20:7c:42:
bc:1d:88:69:0b:bb:05:1d:b1:29:d0:b1:fa:8d:ef:
ea:1b:8d:8f:a7:37:01:f6:12:d8:b0:50:a0:c6:c9:
80:f1:fa:85:dd:73:4d:fe:6b:da:60:fe:e7:f7:bc:
5f:6f:b1:67:96:de:98:30:89:0a:49:b4:e7:7c:00:
ac:60:a7:01:7d:74:c4:ff:f3:9a:4f:22:66:a1:3f:
da:8c:52:40:64:85:a2:94:ea:f5:df:15:16:3b:29:
87:88:da:18:1b:09:e8:a2:be:e9:16:80:72:53:4c:
a4:56:e7:3a:9a:88:c6:0c:89:04:db:32:6e:10:58:
9d:1b:13:a7:59:77:f4:04:0a:e2:c7:0d:21:97:72:
da:c9:40:d5:6f:66:36:2a:53:4b:3d:00:59:4c:c2:
44:8d:9a:a3:9d:c0:d0:39:22:44:82:ba:3d:c5:c3:
7f:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:B8:8B:DB:04:32:BB:12:C1:08:F6:CE:AA:AC:79:90:88:FE:0B:57
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363038653a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:608e::/48
Signature Algorithm: sha256WithRSAEncryption
3e:04:f6:30:2f:a4:25:74:ec:7e:93:e8:37:bb:09:c4:c6:2b:
c6:99:15:ed:aa:a0:a9:c5:35:2b:5b:25:3c:c8:3c:71:02:db:
a5:db:a4:38:46:ea:fb:e4:89:60:6a:54:f4:a8:52:b9:9a:8f:
72:0d:33:9b:de:0f:35:c0:54:00:5a:71:b1:58:c1:02:ea:c4:
0e:89:6f:a7:fc:df:e3:d6:9d:f8:60:3e:45:84:32:eb:43:ab:
1f:0d:db:4c:6f:23:8d:47:8e:59:b8:6c:83:98:46:b7:55:1f:
da:23:e3:1e:7e:e2:23:d2:4a:2e:f8:41:05:23:70:0f:9f:dd:
40:55:9c:f2:ea:dc:fc:87:62:13:d7:fe:da:fd:c1:c4:57:ff:
97:a5:75:22:a4:24:7f:fa:08:54:41:2c:dd:44:a6:6c:ef:97:
cb:11:0c:3b:89:d1:f5:f0:85:e6:e9:98:6a:a1:31:6a:26:36:
f2:3e:0e:f5:bd:63:73:72:d3:e6:e0:85:89:af:b0:85:6d:5b:
8c:27:2b:62:e7:e2:66:63:ad:f9:c3:bf:3c:77:39:b4:70:f5:
eb:e6:6f:96:ca:db:c7:f5:8c:e3:40:af:c5:13:7a:02:67:80:
15:74:36:33:5e:c6:59:61:fb:67:7c:43:ed:c1:81:16:6a:af:
6c:77:a8:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:42:09 2025 by rpki-client