Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363039303a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363039303a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: u1b3Irx4ETifLzwc/WefqFBK1jrYwCK6q01p9AbLiSw=
Subject key identifier: 67:E1:EE:E7:F5:9D:E9:60:2B:9E:83:41:F6:4D:42:E9:E5:77:89:47
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 74AB5F2B889767385954F0F1BCCB246FD9C6D090
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363039303a3a2f34382d3438203d3e203136393039.roa
Signing time: Fri 27 Dec 2024 18:05:19 +0000
ROA not before: Fri 27 Dec 2024 18:00:19 +0000
ROA not after: Fri 26 Dec 2025 18:05:19 +0000
asID: 16909
IP address blocks: 2a14:7584:6090::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 01 Jan 2025 21:53:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:ab:5f:2b:88:97:67:38:59:54:f0:f1:bc:cb:24:6f:d9:c6:d0:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Dec 27 18:00:19 2024 GMT
Not After : Dec 26 18:05:19 2025 GMT
Subject: CN=67E1EEE7F59DE9602B9E8341F64D42E9E5778947
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c9:57:45:c8:a4:cb:a9:ee:9f:af:3c:4a:14:
19:8d:f1:e0:92:24:d5:e7:8f:5f:ce:21:50:fc:66:
d6:2d:58:17:ab:68:bc:43:e1:bc:c8:92:bd:36:2f:
67:eb:a1:d4:73:79:e9:94:e5:96:99:2c:a9:3e:9f:
03:50:34:27:17:69:f1:c8:28:cf:32:99:15:8b:98:
2b:c4:da:77:a5:97:5c:d8:4b:14:66:85:49:4b:0d:
6d:ea:c9:06:3b:cd:61:f8:5b:53:28:0e:84:a1:ba:
62:aa:eb:83:ba:f0:17:54:05:16:b1:ae:39:06:0c:
0d:7e:7a:6c:51:5f:e8:9e:1b:79:41:7c:33:04:a4:
c3:62:93:59:fd:38:2c:a1:4d:4f:50:67:61:39:1f:
86:e9:f9:9c:d1:f9:1f:02:ba:17:cb:78:01:35:6b:
28:35:60:8e:30:1a:c7:d5:0f:6a:1a:f3:98:7b:53:
7e:6a:c6:2f:c2:cb:e3:96:3b:c0:61:97:59:67:82:
aa:02:2a:54:3b:15:e4:29:f4:19:0f:e4:99:ac:fd:
be:de:1f:d7:45:93:61:f4:9b:39:7b:54:cf:b5:5b:
2f:4d:65:1d:40:c4:3f:88:4c:71:a9:2d:fa:1e:91:
f7:88:9b:db:33:09:cc:1a:fc:63:53:3e:72:a2:d6:
1b:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:E1:EE:E7:F5:9D:E9:60:2B:9E:83:41:F6:4D:42:E9:E5:77:89:47
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363039303a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6090::/48
Signature Algorithm: sha256WithRSAEncryption
b4:8d:4a:d4:28:e4:d6:98:f7:24:f3:f9:11:e4:10:1b:c6:a9:
02:db:8b:63:7e:f0:c5:6d:d9:07:6e:95:c8:d5:c7:dd:b1:96:
07:8f:e9:cc:15:94:20:cc:d4:3f:97:09:2f:dd:17:0c:df:a7:
5e:8a:fe:f8:9f:07:09:91:0f:8b:5d:5e:4d:5d:9d:9e:94:0e:
24:66:91:3a:3e:42:95:98:34:fd:f8:40:c1:67:fc:d2:8a:32:
91:6e:25:99:b5:01:dc:3b:d1:f2:7b:f4:eb:59:9f:f9:3e:0c:
c2:ee:ad:b4:66:91:f1:33:12:dc:b1:f6:3e:52:6a:3d:74:47:
d0:7f:ac:98:4c:41:c3:79:ec:e6:55:c9:19:94:59:73:b0:cf:
3f:a3:55:e0:d7:47:68:9f:b5:e5:4d:39:a2:b8:1b:dd:bd:2e:
39:16:0f:fd:af:de:b5:88:4e:47:75:2a:f3:74:8f:cb:e2:46:
bb:0f:41:1b:11:f0:b5:29:db:8a:4c:3f:7c:2d:06:a5:83:50:
b9:6c:05:4f:df:a5:c6:01:b8:c6:70:cd:de:64:ed:53:ef:3a:
0d:1a:2f:e5:05:36:93:19:4f:42:4b:84:e9:45:5f:54:4c:3b:
61:8c:b7:69:fa:01:68:5c:84:77:40:6c:3e:bd:85:e6:45:d0:
2e:ac:0b:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:42:23 2025 by rpki-client