Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363061383a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363061383a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: ErN3hOG3wiG2awa3WHZg/6+DWM9Edg4vodnZ+VwboGA=
Subject key identifier: E7:A7:A0:8C:46:2C:F8:86:7D:D3:16:B1:37:09:2F:49:2F:CF:37:93
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 01DC100A3F5A7B2901FC9BA924804714C806A534
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363061383a3a2f34382d3438203d3e203136393039.roa
Signing time: Sun 16 Mar 2025 15:50:02 +0000
ROA not before: Sun 16 Mar 2025 15:45:02 +0000
ROA not after: Sun 15 Mar 2026 15:50:02 +0000
asID: 16909
IP address blocks: 2a14:7584:60a8::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 26 Mar 2025 14:25:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:dc:10:0a:3f:5a:7b:29:01:fc:9b:a9:24:80:47:14:c8:06:a5:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Mar 16 15:45:02 2025 GMT
Not After : Mar 15 15:50:02 2026 GMT
Subject: CN=E7A7A08C462CF8867DD316B137092F492FCF3793
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:f8:a6:f9:bd:72:aa:d3:d3:7b:e8:db:4a:1c:
50:af:6e:39:9c:a8:99:12:16:e3:71:1e:e8:58:45:
b3:cd:57:27:ba:8c:d2:c8:a4:75:4e:8b:75:9e:2c:
37:90:83:fe:1f:2b:a7:b8:2f:0d:6f:8b:c2:d9:c1:
6a:3d:c8:6f:ce:f5:42:ee:f6:f2:f8:a8:c5:88:ee:
13:b0:48:28:a8:36:e3:93:a8:95:26:b3:9c:4a:67:
9b:01:2d:da:60:d4:c1:bf:20:f9:91:a3:96:62:5c:
5a:ac:d6:42:18:f4:b8:10:ee:89:db:0e:b4:f4:e3:
5e:17:11:0d:b2:5a:d0:44:7a:65:fa:34:2d:3f:40:
6c:74:54:6a:d0:21:2e:c7:66:35:82:8c:f1:29:3a:
5b:04:3a:d7:cf:d3:f2:fe:ae:27:6f:b2:ee:4a:b7:
4b:b2:00:c5:5a:29:d3:c3:26:0e:be:20:af:9f:07:
e7:92:1d:bc:dc:8d:08:c6:2f:3a:31:13:1d:41:d1:
5e:95:ee:70:84:39:21:3f:ff:d1:92:e6:08:34:54:
16:1a:3a:c3:d0:4a:61:6c:2d:e3:37:b3:27:66:4a:
c6:cd:55:81:cc:9a:1b:79:74:fd:a7:9f:b2:9a:0d:
b6:4c:5f:26:e4:79:0a:09:bd:39:c2:66:96:84:6a:
0e:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:A7:A0:8C:46:2C:F8:86:7D:D3:16:B1:37:09:2F:49:2F:CF:37:93
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363061383a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:60a8::/48
Signature Algorithm: sha256WithRSAEncryption
66:c9:d9:35:69:b5:dc:2e:2f:58:2a:75:a8:57:cf:68:9b:3c:
ec:8b:be:06:f7:d5:bf:4f:6a:31:37:f1:9e:1c:fb:42:69:c2:
0f:de:22:b3:76:06:c2:2b:d5:11:24:0a:61:48:6f:ba:2a:f0:
cb:58:ac:e0:28:b4:0b:5a:90:03:17:e4:bc:d0:9f:a1:20:ed:
b0:42:49:25:2c:1f:67:59:45:ae:21:3f:65:17:40:4a:0c:6a:
80:f2:2c:fa:87:e8:1c:36:25:fe:03:24:4e:47:80:50:93:5d:
b3:4a:04:2e:0e:e0:7b:21:06:f8:73:51:f3:19:77:26:82:80:
75:1e:fa:b2:1b:2f:0c:91:d4:94:32:6c:e3:c0:66:cf:ff:ac:
ec:b7:56:ab:be:31:96:6c:a8:57:82:95:48:5e:6a:e9:f0:f5:
95:15:81:1f:51:ee:19:4e:e8:fa:0e:55:c1:8a:31:17:c7:b9:
16:c3:08:11:bd:08:ad:77:4f:d5:2a:6b:04:82:d2:41:3d:43:
36:e5:e6:f9:ee:1d:39:2e:e5:23:ac:70:3a:f6:d6:14:8d:55:
16:c8:85:11:2f:49:9d:15:c7:5c:fd:38:46:e4:f1:0b:a4:92:
64:9e:f0:03:05:18:f3:88:2d:7f:2e:f5:c3:e9:8c:c6:8b:e5:
92:d2:11:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:47:12 2025 by rpki-client