Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363062333a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363062333a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: A9oecoW28gVt3b8LHpi2oJahqfNDFLlLof9LXkBQHvk=
Subject key identifier: 04:3D:83:FC:62:AC:16:1D:CC:AE:8C:42:43:85:D3:E8:C7:9F:31:30
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 5F9AFAF6FB6D4C2B02ED994DE09073E9FCCFF4B0
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363062333a3a2f34382d3438203d3e203136393039.roa
Signing time: Sun 16 Mar 2025 15:50:52 +0000
ROA not before: Sun 16 Mar 2025 15:45:52 +0000
ROA not after: Sun 15 Mar 2026 15:50:52 +0000
asID: 16909
IP address blocks: 2a14:7584:60b3::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 26 Mar 2025 14:25:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:9a:fa:f6:fb:6d:4c:2b:02:ed:99:4d:e0:90:73:e9:fc:cf:f4:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Mar 16 15:45:52 2025 GMT
Not After : Mar 15 15:50:52 2026 GMT
Subject: CN=043D83FC62AC161DCCAE8C424385D3E8C79F3130
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b9:c7:1e:ce:86:d6:fe:e9:53:37:fe:dd:9b:
ea:90:78:66:89:41:3b:2a:4c:ab:78:55:1e:ba:43:
db:13:b0:b2:18:93:9d:33:11:58:ad:0b:3f:7a:88:
fa:86:9e:6e:e2:25:fc:93:4e:02:eb:70:34:18:ce:
56:42:c8:2f:40:58:0c:85:a6:bb:87:6d:d0:36:e2:
ef:00:09:3f:c1:e9:0b:b5:d5:14:30:7b:ca:6d:cd:
59:7d:31:36:a7:60:01:10:e8:04:81:cd:8c:12:c9:
25:e6:04:5f:89:e4:47:f2:05:cd:96:52:38:d1:67:
cf:3f:b9:fe:ba:7c:81:53:99:30:03:e1:e5:db:af:
04:09:e8:54:8e:13:78:fc:fb:6d:a2:cf:87:05:26:
a7:af:36:31:32:a5:0b:aa:95:0e:da:16:6b:da:9f:
8a:a6:41:e1:84:a8:b2:71:66:58:bc:bd:d2:5d:15:
34:cc:0f:0f:c0:eb:3f:5d:e4:b9:e3:cc:ef:a2:4d:
23:e7:42:c5:73:98:11:a6:aa:73:72:3f:20:ba:a4:
1e:89:12:f9:a4:95:67:ca:5c:06:31:89:e5:7c:72:
15:ab:90:ea:9c:cc:33:c3:c0:f8:b7:39:17:10:0e:
fb:fc:ca:c3:b7:69:30:ee:bb:a0:06:57:24:86:67:
c8:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:3D:83:FC:62:AC:16:1D:CC:AE:8C:42:43:85:D3:E8:C7:9F:31:30
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363062333a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:60b3::/48
Signature Algorithm: sha256WithRSAEncryption
af:40:85:33:f4:b0:90:53:8c:c6:6a:61:d2:60:b7:86:d1:70:
36:b8:f5:a7:8f:f2:8e:8b:eb:b4:92:df:f8:57:8e:ef:43:9c:
1c:56:e3:2a:50:6f:20:41:c1:df:1d:0b:a3:f9:64:07:5e:86:
7f:38:fe:52:19:1f:be:a2:3d:6d:fb:f1:a2:52:c9:bf:c4:8d:
a6:ca:c2:a0:23:65:e6:71:16:a0:de:a3:15:fe:11:04:04:0e:
94:f3:21:fe:4f:0a:4c:a3:db:1a:a1:dc:05:85:48:f4:78:50:
d8:09:ab:1e:d5:37:e5:e0:26:65:cf:33:a1:74:60:e2:78:ef:
52:5b:70:85:e2:37:fe:83:22:48:c1:fc:6d:50:84:0b:a9:7e:
c5:ae:76:87:38:18:85:49:f8:eb:19:7d:61:57:da:0b:5f:dc:
b4:be:f9:2c:10:e1:be:16:58:6a:99:0c:8c:da:20:02:eb:7c:
51:d3:9b:b9:d8:11:75:63:e0:be:0f:d6:ff:d0:0c:1b:34:c3:
ad:a8:f9:cc:65:1a:3b:df:25:10:44:aa:26:13:93:66:24:1c:
9f:42:47:fb:38:a2:f8:fe:89:1a:9d:cf:1e:6c:7b:e2:5c:c9:
46:ff:6e:fb:40:21:9f:8f:d6:5c:2e:e2:aa:59:24:d4:d1:3e:
25:99:4b:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:47:13 2025 by rpki-client