Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363061643a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363061643a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: oPGhB615cc+m0ev0kLYpP7/M04cJ4kRSXVOt1nFKqMU=
Subject key identifier: 96:B1:EA:27:A2:BE:F6:F3:A6:8C:95:86:31:95:54:49:83:1E:B1:A0
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 6A12A5C087276FD9E96450419CD30E080B0ACC3D
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363061643a3a2f34382d3438203d3e203136393039.roa
Signing time: Sun 16 Mar 2025 15:50:06 +0000
ROA not before: Sun 16 Mar 2025 15:45:06 +0000
ROA not after: Sun 15 Mar 2026 15:50:06 +0000
asID: 16909
IP address blocks: 2a14:7584:60ad::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 26 Mar 2025 14:25:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:12:a5:c0:87:27:6f:d9:e9:64:50:41:9c:d3:0e:08:0b:0a:cc:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Mar 16 15:45:06 2025 GMT
Not After : Mar 15 15:50:06 2026 GMT
Subject: CN=96B1EA27A2BEF6F3A68C958631955449831EB1A0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:ea:90:06:64:14:f9:35:82:d0:f9:7a:4c:57:
da:ad:49:ff:63:bb:d0:de:3d:70:c5:a9:98:b2:f8:
ad:1e:f8:93:e3:6b:66:e2:95:49:7f:23:80:43:dc:
3c:33:4f:7f:f9:f4:4e:17:2e:5f:5a:2d:00:10:ca:
91:bc:f8:91:20:b5:12:44:1a:32:f9:32:9b:26:66:
5e:9d:e0:3c:c6:20:c8:16:a6:8c:9e:9d:93:64:2d:
0e:2c:a5:50:b2:c3:fb:d7:0d:28:5f:1f:0f:0a:c5:
cd:a9:a2:0c:dc:a1:c3:cb:dc:d5:92:de:fc:52:95:
a5:d5:e5:60:4f:ad:35:21:0e:74:e8:2a:55:17:4b:
98:e9:1b:ca:64:a6:31:51:b4:ab:a8:fa:dc:ec:e7:
6b:cf:84:81:b9:ae:b9:cc:eb:f6:e1:0c:01:a9:2b:
0c:e6:f1:bd:61:26:be:6b:f0:ea:00:31:27:cc:6a:
0b:c7:c8:e7:99:ec:b5:43:90:cf:e9:e8:35:7a:db:
ba:d5:e8:93:55:cb:2f:36:33:43:6c:c2:6d:13:d9:
9d:36:2c:24:20:e2:17:4d:98:42:a1:a6:00:3c:49:
ca:ea:ac:da:32:4b:7e:ff:fc:e8:8a:bd:83:b8:39:
06:b2:94:9f:67:f9:23:92:37:79:a8:e8:a7:81:59:
42:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:B1:EA:27:A2:BE:F6:F3:A6:8C:95:86:31:95:54:49:83:1E:B1:A0
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363061643a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:60ad::/48
Signature Algorithm: sha256WithRSAEncryption
2b:9d:0c:e7:f5:ff:77:ea:77:da:84:34:76:1e:4c:c0:26:e1:
85:f1:42:10:91:e1:34:24:e7:6a:64:2a:13:c4:c7:ff:34:1c:
59:04:dd:89:3e:6e:6a:9c:23:f0:32:7a:0e:b8:7b:92:73:a5:
cf:77:ca:70:67:03:5d:73:14:a9:31:8d:c8:5a:21:01:b2:b5:
e8:26:7c:a4:8b:ce:4d:04:4f:e9:d9:2c:33:80:32:07:f3:49:
17:9d:b2:aa:b7:c2:b0:15:95:62:84:bd:45:df:0f:da:3d:c2:
60:2d:4a:82:f2:f0:64:96:fa:60:20:3a:0f:5a:fc:12:05:5f:
e0:d5:e0:0e:85:db:16:92:85:e9:8c:76:64:50:db:96:d9:f8:
4d:48:bb:33:b4:f5:bc:d8:f9:f6:ef:90:8d:3a:fc:a4:9e:2b:
a4:20:79:a1:70:5b:91:e2:0e:2e:36:ca:e6:6a:4f:0a:ab:1e:
a2:20:be:01:4c:ec:42:e4:c1:76:c3:f1:01:10:4a:60:d5:a4:
73:8b:f9:fa:a7:7e:35:6e:7d:de:02:91:06:75:12:fe:51:fb:
75:b3:8d:35:cf:91:fb:18:1a:ae:aa:f9:c0:72:2b:c1:3a:d3:
e0:b8:22:4c:ba:81:3c:f3:9f:09:5e:f3:d0:6b:57:a0:40:49:
8e:3d:13:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:47:13 2025 by rpki-client