Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363062353a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363062353a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: 8mw6znhUWo4SG2phtVLzJ5Q11haWTE41uXiuV4b3Vzo=
Subject key identifier: 03:98:EB:A2:8F:FF:C3:5F:60:0B:5E:CC:AF:FE:C6:BE:E5:E7:93:71
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 38199A82E105C1BBB7797A2436CE9E04C0B3E97A
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363062353a3a2f34382d3438203d3e203136393039.roa
Signing time: Sun 16 Mar 2025 15:50:53 +0000
ROA not before: Sun 16 Mar 2025 15:45:53 +0000
ROA not after: Sun 15 Mar 2026 15:50:53 +0000
asID: 16909
IP address blocks: 2a14:7584:60b5::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 26 Mar 2025 14:25:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:19:9a:82:e1:05:c1:bb:b7:79:7a:24:36:ce:9e:04:c0:b3:e9:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Mar 16 15:45:53 2025 GMT
Not After : Mar 15 15:50:53 2026 GMT
Subject: CN=0398EBA28FFFC35F600B5ECCAFFEC6BEE5E79371
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c2:9d:e8:4a:db:1f:d8:53:95:ed:ac:43:eb:
a3:30:81:f8:28:b0:5a:a0:a4:d5:63:a2:0d:fc:80:
f9:2d:86:25:ff:ae:dc:87:48:f0:32:3f:ba:74:73:
30:75:3d:e9:76:d9:64:33:29:17:f6:0d:19:8c:aa:
a5:ec:92:57:1a:fd:77:bb:35:85:f2:d8:ce:d3:ae:
03:38:77:f1:1c:44:0d:f4:e6:7a:7c:72:70:54:d7:
20:5e:31:7b:f2:c8:7a:c1:16:8e:d9:ce:26:16:35:
c1:01:9b:d5:87:08:24:db:24:d7:a2:f2:79:62:8f:
4f:f3:d7:c2:eb:4a:58:1d:0d:6b:f4:c9:d2:75:e1:
14:09:c5:81:8d:c4:5d:22:cc:10:7a:92:ea:3d:2b:
f0:f0:46:19:fb:c0:51:4e:49:ae:b3:cd:60:cd:86:
b0:d6:94:8a:0a:de:85:9f:7c:a8:8b:0e:75:5e:30:
61:5f:60:5f:88:c3:da:42:cb:53:fd:39:7b:45:5d:
d6:08:e7:75:c2:19:b5:cb:b2:29:64:0e:f5:a7:24:
be:f9:ce:84:24:c5:92:9b:d5:db:11:1f:84:77:9a:
10:79:49:a1:1c:5f:22:02:44:31:f8:0f:cc:35:99:
ea:df:83:43:53:24:a0:13:b0:be:94:03:9b:88:30:
59:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:98:EB:A2:8F:FF:C3:5F:60:0B:5E:CC:AF:FE:C6:BE:E5:E7:93:71
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363062353a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:60b5::/48
Signature Algorithm: sha256WithRSAEncryption
22:93:45:df:9d:e4:ed:2d:b5:a7:04:a6:03:b4:02:35:6b:a1:
8f:65:b5:5e:33:5d:73:90:0c:71:c5:e8:ce:ce:e5:5a:38:14:
10:24:f8:4d:74:11:2b:bb:41:29:bb:37:f7:06:94:e7:d0:4c:
48:08:68:d6:3e:b7:57:ed:03:aa:7f:ce:1f:a0:7c:78:b9:dc:
3e:b8:69:be:74:4e:14:5b:7e:ef:2c:9a:37:68:f3:d9:f4:31:
b2:cd:91:19:3f:74:c5:d7:1b:6d:c6:f8:2e:99:d8:1d:0e:80:
be:a4:33:b3:99:28:29:27:5a:53:78:ab:df:85:0f:fe:a5:c9:
0c:16:d2:e1:c5:ca:d1:69:99:41:52:73:3f:43:1c:d0:e8:1a:
66:3e:8f:64:e0:25:8a:d3:0b:3a:73:13:5b:0f:ee:b4:6f:fb:
c5:1a:6b:50:c0:00:70:e2:c2:a7:3d:40:fb:66:1e:28:5b:59:
c3:56:90:3d:35:a9:7a:a1:63:71:af:3e:86:6e:d6:8f:b9:e0:
b1:a7:83:4b:ec:7e:d6:3c:1f:ed:3a:c8:9c:1f:e8:b4:b9:24:
14:49:55:25:11:d3:b8:31:5b:38:fa:06:05:15:bb:18:82:12:
c6:11:41:3e:5e:07:82:76:21:78:1c:ae:47:cd:a5:c6:1f:bf:
45:27:fd:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:47:05 2025 by rpki-client