Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363062303a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363062303a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: zGMKd2pQw/VahmFDUQWBYy0V95P9qyAdQE73MmvuLn4=
Subject key identifier: 16:09:CD:E8:AE:03:57:C4:02:1D:BD:98:08:EA:5B:DF:DC:80:E2:9D
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 62D8E5C0EC99D0C27830FCC45C88B86A98118FC3
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363062303a3a2f34382d3438203d3e203136393039.roa
Signing time: Fri 27 Dec 2024 18:07:19 +0000
ROA not before: Fri 27 Dec 2024 18:02:19 +0000
ROA not after: Fri 26 Dec 2025 18:07:19 +0000
asID: 16909
IP address blocks: 2a14:7584:60b0::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 01 Jan 2025 21:53:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:d8:e5:c0:ec:99:d0:c2:78:30:fc:c4:5c:88:b8:6a:98:11:8f:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Dec 27 18:02:19 2024 GMT
Not After : Dec 26 18:07:19 2025 GMT
Subject: CN=1609CDE8AE0357C4021DBD9808EA5BDFDC80E29D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:71:2e:9e:fe:bf:c9:b5:00:5f:41:e2:e3:97:
6f:a2:47:02:43:e0:9b:eb:a2:16:19:8c:8b:80:63:
6a:94:41:33:b2:3d:b9:68:d2:c9:88:d2:3b:a4:04:
f9:4a:3d:0b:b0:04:7c:97:9d:e7:55:1c:91:0f:91:
ef:54:e8:3c:15:d9:3f:bf:4f:5f:ac:dd:a8:dc:a4:
12:43:89:3a:2f:1d:37:98:d7:01:63:fb:86:33:7b:
3b:02:23:93:59:4a:36:55:9d:a6:44:a4:5e:cf:52:
b8:86:66:2a:0a:50:27:c4:7c:73:8f:d3:4a:92:ff:
3c:a2:ac:ce:2c:6f:85:ce:41:83:3c:cd:f4:7c:00:
fa:d9:de:8b:46:56:e7:00:55:66:0f:ee:05:5a:54:
1f:71:ff:70:28:10:66:c4:0a:42:5e:f5:18:91:00:
f3:13:df:5f:c3:3e:76:ae:59:f8:c9:44:84:22:29:
9c:45:01:17:35:f3:64:2f:83:3e:a9:32:3d:cb:6e:
41:19:5d:b8:d8:55:5f:dd:16:b8:41:e6:4f:f5:00:
98:57:21:f2:1f:c6:1a:83:83:0a:a0:65:33:f1:c2:
39:8b:f1:df:56:64:eb:d2:54:bb:dc:b9:f6:f5:7a:
39:36:a7:45:1e:eb:00:3b:09:a9:c4:3a:40:57:9e:
b2:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:09:CD:E8:AE:03:57:C4:02:1D:BD:98:08:EA:5B:DF:DC:80:E2:9D
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363062303a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:60b0::/48
Signature Algorithm: sha256WithRSAEncryption
68:9e:92:74:85:66:00:5e:9c:6c:5b:8e:c9:69:31:6a:bd:23:
52:6d:72:cb:5d:f0:1e:08:01:a0:78:5c:14:c6:5e:cf:42:29:
21:96:ba:5c:75:d5:87:23:bc:68:3c:cc:2b:a9:8e:d7:f7:b0:
84:e1:01:6d:42:f9:18:73:67:ba:6d:2f:84:42:72:dd:ca:28:
06:4f:e1:90:c4:77:18:e5:7b:c2:91:27:20:93:1a:a0:01:bc:
89:e1:4f:63:1b:a5:3f:39:fd:11:94:1b:70:3e:5c:98:54:08:
69:54:fb:23:fe:5e:64:45:fc:25:62:ac:65:51:95:05:9e:de:
ff:96:5b:bb:0a:2c:81:99:f8:39:93:d3:4a:9b:1e:65:c7:5a:
a0:f1:75:db:09:60:e3:e8:b7:35:3a:e6:1e:97:38:40:e9:62:
c6:16:7b:ae:5c:53:24:7a:a6:c5:33:e7:f1:27:82:e0:ab:79:
55:e2:c8:17:9b:ef:9a:fa:db:ea:7c:12:18:d3:47:14:ae:43:
d0:ec:12:71:c2:69:d4:8c:53:0b:d1:ac:6d:26:89:71:67:c1:
4c:09:d4:a9:0c:a8:e9:c8:dc:86:60:cd:e5:8c:12:e5:14:c6:
60:1a:bb:8a:f0:0c:5e:38:2d:b9:31:50:14:18:8c:f0:24:32:
17:5d:e5:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:42:21 2025 by rpki-client