Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363061303a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363061303a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: en55/NfmQoT5wyT+x86E5XZ/035KGU5I7zeEgZxna3M=
Subject key identifier: EE:5A:B4:17:75:F4:21:55:95:F3:8D:CF:A3:CC:35:62:E5:4A:63:BB
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 22F6709D7FE7686CD194EF4919216F67973892D5
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363061303a3a2f34382d3438203d3e203136393039.roa
Signing time: Mon 30 Dec 2024 20:21:39 +0000
ROA not before: Mon 30 Dec 2024 20:16:39 +0000
ROA not after: Mon 29 Dec 2025 20:21:39 +0000
asID: 16909
IP address blocks: 2a14:7584:60a0::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 06 Jan 2025 20:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:f6:70:9d:7f:e7:68:6c:d1:94:ef:49:19:21:6f:67:97:38:92:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Dec 30 20:16:39 2024 GMT
Not After : Dec 29 20:21:39 2025 GMT
Subject: CN=EE5AB41775F4215595F38DCFA3CC3562E54A63BB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:3b:4d:75:46:36:4d:8f:7c:05:28:a9:f7:46:
1a:21:3c:6c:dd:ca:f6:32:8b:4e:51:4c:4c:22:16:
75:6c:fa:da:37:95:40:4a:3e:99:0d:7f:80:cf:46:
3c:ed:88:df:d6:b6:ae:95:96:54:83:6d:60:bd:59:
7f:42:bc:b7:03:9d:84:34:78:8a:60:e0:c3:39:2b:
5c:c7:47:aa:19:62:9c:f6:22:e8:45:13:49:10:3a:
24:dd:22:05:aa:8a:a8:02:0d:93:1c:dd:75:9b:7d:
b8:7e:17:fd:f8:3e:0f:2d:bc:af:a5:5d:4a:a0:e4:
67:bf:97:54:0c:78:ba:83:86:65:24:74:c6:c4:9b:
74:f6:a3:3f:53:c9:98:e7:30:ae:3e:d1:e0:37:f8:
43:27:a1:2b:67:31:f6:42:c8:c6:5c:a3:4f:3b:16:
2e:6c:c3:e5:46:88:f5:93:40:44:ad:0a:35:c5:64:
d6:f6:08:08:64:23:a8:06:01:02:e9:48:7f:7f:41:
a0:f3:94:46:db:3a:5c:6e:e5:09:a6:e4:fa:e9:71:
f4:05:eb:07:70:62:0c:77:ea:a3:32:1a:66:b7:24:
8a:c9:89:1e:cf:94:3f:a4:04:de:60:cd:81:08:a0:
27:30:ff:77:80:96:51:25:9f:18:1f:03:ed:9e:08:
87:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:5A:B4:17:75:F4:21:55:95:F3:8D:CF:A3:CC:35:62:E5:4A:63:BB
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363061303a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:60a0::/48
Signature Algorithm: sha256WithRSAEncryption
8e:c1:81:4e:3c:80:78:aa:a9:a9:88:4a:72:ff:81:39:1b:be:
3b:6d:76:7d:83:1e:1e:5b:23:00:d3:fc:90:f2:41:9b:12:f8:
76:82:35:cd:b6:2f:bc:59:a9:7d:79:69:4c:e8:18:91:4e:08:
9f:bb:e6:62:5d:e4:1d:bf:3c:3c:28:84:0a:7a:6f:d1:85:9d:
55:85:f3:af:ce:e5:bf:e8:66:99:32:b0:8e:41:dd:d0:ea:af:
50:4b:cb:27:ce:3d:12:e8:26:d9:45:02:dd:45:cb:7c:0e:b0:
4f:bc:fe:c0:7f:63:58:b5:cb:24:21:cc:5c:44:99:6a:cf:fa:
21:49:82:80:a9:f5:a0:11:ea:f4:b9:1e:57:8e:4b:42:7c:1d:
f4:52:0f:5b:76:e9:58:a1:9f:06:65:d4:b0:ba:1f:5d:c6:b9:
29:59:6e:1f:58:02:17:49:26:a1:d4:70:2a:d8:38:87:2b:30:
d6:5d:f1:dd:57:89:56:57:33:ff:ff:04:0d:2e:6a:75:6d:40:
23:b6:87:fc:66:4f:12:f7:5d:15:ef:1e:55:04:e4:32:82:b2:
fd:0a:99:97:30:b0:f7:d7:00:fc:60:16:ac:47:e3:54:72:93:
26:11:52:89:01:f9:e9:28:c0:76:79:ca:ad:02:b0:4c:34:90:
81:65:18:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:44:46 2025 by rpki-client