Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363063303a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363063303a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: xsF9jUH+e05XOgsuVigfi2UkOiaXEaANHPAQKuhrdoc=
Subject key identifier: 9F:6C:EB:6F:E6:09:8E:59:F2:F5:25:7F:6E:C3:AF:06:EB:EE:03:4B
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 2B8DFCBF32C040D12372BBDE5F2F5F91CFA447A3
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363063303a3a2f34382d3438203d3e203136393039.roa
Signing time: Fri 27 Dec 2024 18:07:31 +0000
ROA not before: Fri 27 Dec 2024 18:02:31 +0000
ROA not after: Fri 26 Dec 2025 18:07:31 +0000
asID: 16909
IP address blocks: 2a14:7584:60c0::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 01 Jan 2025 21:53:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:8d:fc:bf:32:c0:40:d1:23:72:bb:de:5f:2f:5f:91:cf:a4:47:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Dec 27 18:02:31 2024 GMT
Not After : Dec 26 18:07:31 2025 GMT
Subject: CN=9F6CEB6FE6098E59F2F5257F6EC3AF06EBEE034B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:21:a0:9e:ca:af:c9:bb:a2:18:49:2e:b5:64:
00:2f:11:80:7d:5d:e4:0c:4f:ed:29:a2:ef:11:c1:
68:5e:d0:b5:dc:06:4b:6f:91:3c:e6:40:2a:4e:b7:
31:5f:83:cd:f3:5c:3f:fa:17:5f:90:1e:a1:64:88:
c1:63:ce:19:7b:92:af:be:9d:c1:a4:b1:a5:02:c2:
47:07:07:f2:50:ba:53:65:a8:73:d5:d7:9e:09:d8:
79:73:6f:67:f2:fe:37:ac:f5:ea:41:a5:eb:8d:2e:
f8:12:d8:62:6a:97:35:2a:04:59:1e:09:f2:1b:45:
19:4a:29:ed:12:31:83:46:9c:cc:00:db:1d:c1:fb:
a7:52:41:4b:52:dc:ef:59:e3:5e:e8:76:09:6c:53:
0d:fb:dc:e4:be:87:68:52:96:c1:b8:90:4e:41:ff:
5c:fb:1b:81:c9:76:e8:7c:08:40:fc:99:d4:04:18:
45:6d:9d:5e:6a:d8:86:11:4f:7c:af:be:1b:20:e8:
6c:cc:73:e3:31:07:72:5b:85:99:22:90:14:44:48:
2f:8e:8a:3a:45:6b:b0:52:07:bd:42:8a:6c:9f:00:
b7:4f:73:ae:30:86:de:3e:a7:7f:a8:9e:55:3a:37:
4b:40:30:b4:17:93:09:3b:74:ce:19:1b:04:4e:30:
05:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:6C:EB:6F:E6:09:8E:59:F2:F5:25:7F:6E:C3:AF:06:EB:EE:03:4B
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363063303a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:60c0::/48
Signature Algorithm: sha256WithRSAEncryption
8c:2a:82:82:a2:df:81:40:a6:e7:3e:cd:70:a6:c9:d5:b4:dd:
ac:f9:2f:23:dc:9d:1c:9f:a2:c0:f0:99:1f:20:74:c4:23:21:
8c:93:2a:ac:c7:10:fd:0d:25:18:c4:fa:17:56:d2:35:10:8a:
0e:86:89:f8:c3:32:a9:52:4e:58:68:67:8e:fa:31:bd:18:51:
ee:b9:65:cb:e2:b3:1d:d4:82:ea:7b:bb:a3:57:b1:88:68:48:
d6:91:da:a9:74:27:84:64:87:3e:64:5a:da:30:08:be:2b:61:
df:b9:b3:e5:64:ae:dc:55:89:da:4d:18:de:d4:3f:e6:21:73:
b4:6a:55:32:87:fb:85:5f:d0:d8:c3:a5:e9:dd:c0:04:f8:2a:
11:57:fd:60:92:5d:82:87:37:72:b2:28:7c:8e:32:bf:bc:5a:
fe:a5:56:7a:4e:0b:6c:5a:de:28:a2:5a:cb:92:7f:da:5f:f9:
94:38:d4:42:ca:85:2f:98:21:f0:1c:1e:4e:0c:71:11:fd:65:
92:d2:4c:7b:6e:55:ec:10:3b:80:91:67:56:b4:68:62:a5:d3:
b9:27:d5:e9:8c:0e:ca:33:9f:c9:cc:1a:db:98:0e:45:53:c0:
e0:76:2e:c1:13:9d:3b:f5:28:ee:7e:6c:d6:f6:e3:64:01:e7:
cb:7d:92:a5
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUK438vzLAQNEjcrveXy9fkc+kR6MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NCMjZGNzY0MkZENkI0Q0JGMzVGQkVFNDU1RjFFRkIw
QzlGMEE0NTAeFw0yNDEyMjcxODAyMzFaFw0yNTEyMjYxODA3MzFaMDMxMTAvBgNV
BAMTKDlGNkNFQjZGRTYwOThFNTlGMkY1MjU3RjZFQzNBRjA2RUJFRTAzNEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGIaCeyq/Ju6IYSS61ZAAvEYB9
XeQMT+0pou8RwWhe0LXcBktvkTzmQCpOtzFfg83zXD/6F1+QHqFkiMFjzhl7kq++
ncGksaUCwkcHB/JQulNlqHPV154J2Hlzb2fy/jes9epBpeuNLvgS2GJqlzUqBFke
CfIbRRlKKe0SMYNGnMwA2x3B+6dSQUtS3O9Z417odglsUw373OS+h2hSlsG4kE5B
/1z7G4HJduh8CED8mdQEGEVtnV5q2IYRT3yvvhsg6GzMc+MxB3JbhZkikBRESC+O
ijpFa7BSB71CimyfALdPc64wht4+p3+onlU6N0tAMLQXkwk7dM4ZGwROMAXtAgMB
AAGjggJoMIICZDAdBgNVHQ4EFgQUn2zrb+YJjlny9SV/bsOvBuvuA0swHwYDVR0j
BBgwFoAUfLJvdkL9a0y/NfvuRV8e+wyfCkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMS83Q0IyNkY3NjQy
RkQ2QjRDQkYzNUZCRUU0NTVGMUVGQjBDOUYwQTQ1LmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdm
MzgyNC8wLzdDQjI2Rjc2NDJGRDZCNENCRjM1RkJFRTQ1NUYxRUZCMEM5RjBBNDUu
Y2VyMIGqBggrBgEFBQcBCwSBnTCBmjCBlwYIKwYBBQUHMAuGgYpyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMS8zMjYxMzEzNDNhMzczNTM4MzQzYTM2MzA2MzMwM2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzEzNjM5MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoUdYRgwDAN
BgkqhkiG9w0BAQsFAAOCAQEAjCqCgqLfgUCm5z7NcKbJ1bTdrPkvI9ydHJ+iwPCZ
HyB0xCMhjJMqrMcQ/Q0lGMT6F1bSNRCKDoaJ+MMyqVJOWGhnjvoxvRhR7rlly+Kz
HdSC6nu7o1exiGhI1pHaqXQnhGSHPmRa2jAIvith37mz5WSu3FWJ2k0Y3tQ/5iFz
tGpVMof7hV/Q2MOl6d3ABPgqEVf9YJJdgoc3crIofI4yv7xa/qVWek4LbFreKKJa
y5J/2l/5lDjUQsqFL5gh8BweTgxxEf1lktJMe25V7BA7gJFnVrRoYqXTuSfV6YwO
yjOfycwa25gORVPA4HYuwROdO/Uo7n5s1vbjZAHny32SpQ==
-----END CERTIFICATE-----
Generated at Sat Apr 19 00:47:08 2025 by rpki-client