Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363038663a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363038663a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: fXExwYH8V97ki1fwz+cYcOY5AL6IRPaXkxCRBJ9WEaM=
Subject key identifier: 65:F9:D1:75:08:B6:8E:E4:A9:0E:F0:57:81:0C:DD:01:CA:8A:69:3D
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 351FBCE4820C89C4E6AF52C9347B33BBB9590E64
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363038663a3a2f34382d3438203d3e203136393039.roa
Signing time: Mon 10 Mar 2025 11:55:22 +0000
ROA not before: Mon 10 Mar 2025 11:50:22 +0000
ROA not after: Mon 09 Mar 2026 11:55:22 +0000
asID: 16909
IP address blocks: 2a14:7584:608f::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 16 Mar 2025 16:16:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:1f:bc:e4:82:0c:89:c4:e6:af:52:c9:34:7b:33:bb:b9:59:0e:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Mar 10 11:50:22 2025 GMT
Not After : Mar 9 11:55:22 2026 GMT
Subject: CN=65F9D17508B68EE4A90EF057810CDD01CA8A693D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:07:8d:7d:6e:b0:15:5b:cd:ee:24:2c:59:b1:
8c:c6:9a:32:ff:ae:71:05:ca:09:7e:ea:67:45:0b:
8a:d6:f7:ad:09:00:9a:e9:52:c4:dc:ef:ec:5d:2a:
ce:24:7b:31:8d:5d:83:87:e8:60:01:69:ff:c8:4c:
7a:8f:b5:3c:da:2f:09:50:a3:da:a4:c6:dc:0c:f2:
15:e3:89:ba:5b:89:ec:26:8e:9f:47:d5:3a:f3:05:
83:32:b6:16:f8:3d:19:ea:cf:0b:92:39:e4:0e:69:
4e:2f:a0:53:1d:9f:8a:6f:d7:9c:7e:7a:f4:45:4c:
1a:92:f3:83:b9:0e:87:0d:87:21:ee:2a:99:a9:10:
7a:cf:8b:5b:b8:f0:04:44:49:75:6c:72:6f:1c:c0:
e8:d4:71:9c:b6:53:3b:9f:18:09:c6:92:75:6f:15:
e4:be:78:2f:5a:d7:5a:57:f0:29:33:08:67:ab:4b:
1b:2f:3d:33:f3:ab:97:3e:11:ce:d6:1b:03:42:76:
e8:8a:72:0c:28:2c:89:93:93:e5:f9:1b:0a:59:bc:
fe:d4:5e:a9:3f:cc:60:6d:74:0d:11:fb:5b:a8:78:
d3:e2:8c:28:a1:7d:c8:a0:12:ae:c2:7c:e1:2b:0b:
5e:66:f7:0a:48:78:79:c4:c0:63:d8:51:fc:9b:25:
ae:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:F9:D1:75:08:B6:8E:E4:A9:0E:F0:57:81:0C:DD:01:CA:8A:69:3D
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363038663a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:608f::/48
Signature Algorithm: sha256WithRSAEncryption
67:3d:e8:58:a8:05:b7:67:f8:c6:6a:31:56:83:6b:b6:33:ba:
49:3a:8c:a7:c0:9e:0c:d0:71:70:5e:5b:4b:de:b5:36:8e:73:
6f:64:34:ed:5d:8b:04:6b:24:47:f6:63:7e:68:7a:1e:2c:91:
42:2c:ba:10:c0:dc:35:81:71:ed:84:d6:5e:6f:8d:d0:08:a5:
80:90:3e:f1:1e:77:a7:d3:54:80:0a:b6:50:71:d7:25:ae:d6:
2f:bd:d3:f5:98:50:0e:af:23:23:7e:b4:9a:f1:cf:8e:ba:fd:
2d:b1:bb:dd:3c:0b:49:6e:7a:53:e3:e0:04:ca:7e:fd:3f:91:
e9:23:78:49:13:e1:97:f8:2a:b1:b9:11:42:c8:20:03:d7:1b:
b2:39:e5:2e:2c:df:e6:08:23:66:e2:b3:4e:19:33:e4:f0:cc:
ea:4d:fc:47:be:29:89:b4:14:c9:72:d9:0e:99:85:f6:96:c9:
df:67:72:4e:4f:58:74:c9:86:77:79:f4:f7:df:5d:b5:8e:d0:
00:20:d8:0d:63:f6:ff:84:49:c6:22:f8:72:2f:ed:56:b7:f8:
56:66:90:c1:16:bd:80:ae:ce:dd:e4:cb:14:8d:aa:32:66:d7:
f8:c8:4c:44:be:e0:84:c4:67:23:ab:8f:b9:0b:90:f7:59:d7:
98:a3:fe:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:47:17 2025 by rpki-client