Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363039323a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363039323a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: dluEoGGWuIHajGJj9oQxAC2HYUJPmBb3U7RJp6ehu08=
Subject key identifier: 9C:C9:FB:B3:64:EA:F4:E4:37:72:0A:DE:3B:13:B4:17:E5:3B:5D:E7
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 6AC1C929CC5CDBFB3C6C5A23DA5DE92D855423D2
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363039323a3a2f34382d3438203d3e203136393039.roa
Signing time: Mon 10 Mar 2025 11:55:23 +0000
ROA not before: Mon 10 Mar 2025 11:50:23 +0000
ROA not after: Mon 09 Mar 2026 11:55:23 +0000
asID: 16909
IP address blocks: 2a14:7584:6092::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 16 Mar 2025 16:16:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:c1:c9:29:cc:5c:db:fb:3c:6c:5a:23:da:5d:e9:2d:85:54:23:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Mar 10 11:50:23 2025 GMT
Not After : Mar 9 11:55:23 2026 GMT
Subject: CN=9CC9FBB364EAF4E437720ADE3B13B417E53B5DE7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:8f:fa:2f:d7:33:29:a2:1b:70:4c:7b:f8:7e:
63:86:f3:b9:6b:5a:57:95:31:19:f0:82:e0:c4:81:
6c:35:25:61:2d:d7:94:e7:d1:d1:d4:7e:73:42:64:
cd:05:34:64:c9:fe:05:54:e9:64:84:d9:a2:ed:bb:
6d:c1:a8:6e:25:0b:c8:0a:a7:be:75:e2:96:c7:cf:
5f:5f:47:af:8e:71:b3:0d:c8:ae:54:f9:3c:56:fb:
e8:76:dd:75:aa:37:2a:6d:95:f7:e8:4c:18:e9:a7:
20:e8:a1:a4:d9:30:13:4f:b4:4e:9e:4c:c9:34:78:
00:ab:ea:0f:0c:b3:c2:2a:46:e7:90:c6:7a:e8:8e:
9d:c3:ca:e7:25:4b:3b:2c:d3:ba:b1:14:33:23:4b:
cf:f2:64:2a:44:bf:b9:64:dc:f4:25:da:06:59:45:
96:87:2f:4c:b2:c5:6a:50:85:dd:dd:51:d3:2c:30:
16:2a:1e:85:3a:1c:cb:c9:a0:24:c7:1b:ba:af:87:
87:5e:1e:e7:37:b9:0d:13:ce:c2:71:d7:bc:df:e7:
40:95:da:65:1a:8d:52:28:65:f0:4a:da:b7:1f:ee:
93:5b:a1:e9:1a:6c:1e:96:8c:3f:b2:1d:66:43:2c:
a8:8f:b6:44:b1:7e:41:ea:0c:2b:26:f3:ce:47:67:
0b:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:C9:FB:B3:64:EA:F4:E4:37:72:0A:DE:3B:13:B4:17:E5:3B:5D:E7
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363039323a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6092::/48
Signature Algorithm: sha256WithRSAEncryption
95:38:de:73:11:36:1a:b1:6e:b6:1c:8a:f6:8c:06:eb:5a:23:
03:29:b6:5d:75:17:9a:3f:e2:1a:ff:bd:3b:00:cf:61:a0:d9:
90:87:2c:2b:f8:3f:ea:1b:6a:8f:12:17:b5:dd:2c:cb:70:05:
4c:1d:4a:02:d4:64:35:f2:a8:e3:c0:fe:66:e4:da:42:07:08:
90:92:b9:e7:84:e8:cc:c2:7f:d7:a9:60:69:2b:5c:b5:06:a1:
3d:d0:f1:19:6c:e3:26:68:57:5c:b0:b9:f4:28:51:a6:e5:2e:
a0:14:38:cb:bb:22:41:db:af:cc:e1:e6:86:1b:57:3b:b0:84:
32:5a:6e:19:9e:81:5a:f6:f6:2f:6f:50:5b:d4:dd:94:28:21:
f4:e3:37:77:6f:d8:a8:5b:72:a4:13:42:38:b4:64:eb:d5:b7:
21:37:79:35:66:e9:da:e7:66:c8:69:08:93:d8:9d:99:65:f1:
00:96:7e:8e:65:99:79:c4:68:49:f3:6e:52:4a:a9:4a:34:b1:
85:b7:20:44:80:12:c7:15:d1:6e:a8:be:a8:c3:21:df:a9:60:
56:29:bc:93:0c:73:16:d0:4d:ca:e8:2a:f3:dd:f6:6f:bf:52:
c5:d1:fa:30:52:00:38:49:38:a5:cd:2c:04:0f:bc:57:3a:a4:
8f:61:5c:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:41:23 2025 by rpki-client