Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363064303a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363064303a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: 2KnVY51oYwf15YCt004U532GZCJn9CMiyqxbeUKlRxc=
Subject key identifier: 9C:91:44:7C:44:91:AD:28:AA:3F:AB:1E:C8:BA:FD:E5:92:C0:15:83
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 50061FD9EFAA67DEEADFCEDB4BD6464E120E3A3E
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363064303a3a2f34382d3438203d3e203136393039.roa
Signing time: Fri 27 Dec 2024 18:07:39 +0000
ROA not before: Fri 27 Dec 2024 18:02:39 +0000
ROA not after: Fri 26 Dec 2025 18:07:39 +0000
asID: 16909
IP address blocks: 2a14:7584:60d0::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 30 Dec 2024 20:09:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:06:1f:d9:ef:aa:67:de:ea:df:ce:db:4b:d6:46:4e:12:0e:3a:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Dec 27 18:02:39 2024 GMT
Not After : Dec 26 18:07:39 2025 GMT
Subject: CN=9C91447C4491AD28AA3FAB1EC8BAFDE592C01583
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:b0:95:e2:f0:56:a6:8f:7c:53:63:4b:69:5d:
36:5d:dc:0b:0b:8e:70:ec:7d:4f:20:4f:b5:ff:f1:
07:c4:c3:89:9f:99:01:9f:c0:45:ba:a0:5f:58:fa:
8f:a6:b1:81:47:ba:1d:7a:0c:b1:dd:95:a0:1b:bb:
fc:b1:34:e2:82:1a:b9:7a:05:37:e9:b6:9e:18:2c:
2d:84:f2:67:f2:db:d3:f2:44:21:7a:48:4c:8e:04:
93:6c:75:fe:6e:41:ba:43:45:94:81:1d:e6:a7:c6:
4e:af:c8:95:45:55:8c:49:ff:f7:63:96:8b:39:ad:
01:d3:9d:3e:8a:2d:ec:0c:9f:4d:e4:9b:1c:6c:2b:
f5:9d:da:f5:e6:eb:43:ea:57:61:e9:bf:a3:92:0a:
b0:24:52:76:3f:f9:fb:81:f1:44:86:26:11:e9:7c:
7a:fe:d0:ae:8d:2a:68:6b:11:b4:d2:26:4c:e9:c5:
f7:fb:eb:8b:60:b8:bf:32:06:73:32:8d:37:c4:90:
9a:92:32:fd:14:aa:1e:9d:24:16:a1:cb:da:97:37:
f7:7f:33:f4:a9:f6:2b:d5:25:f7:e7:76:5c:35:de:
8a:29:37:08:d8:9b:91:ea:78:e0:0f:85:40:91:81:
67:fe:4e:b3:40:bc:e7:2d:ba:b3:09:f1:e6:a2:3c:
7c:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:91:44:7C:44:91:AD:28:AA:3F:AB:1E:C8:BA:FD:E5:92:C0:15:83
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363064303a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:60d0::/48
Signature Algorithm: sha256WithRSAEncryption
4e:10:3f:e5:d0:81:16:53:2e:cd:ce:8d:31:ad:2d:1a:72:9a:
62:85:3e:bb:f9:d2:d7:d2:57:d7:b3:a4:ab:a0:d5:39:e3:cd:
61:bf:03:3d:39:92:01:d0:ef:d3:c9:ce:cb:dd:b9:37:ff:0c:
44:5b:a2:38:05:5b:0f:ce:dc:c1:cd:9d:6b:cc:7d:a1:72:4e:
9e:a3:16:93:17:3f:e9:23:2c:0a:51:73:07:3d:66:3f:3d:8f:
f5:4a:94:5b:27:68:66:30:48:fd:3f:c7:97:59:cd:60:06:b5:
dc:ce:bc:5d:36:1e:e7:a3:9a:60:ae:03:b0:5a:74:db:39:71:
38:cb:ee:fa:d1:a8:09:bc:35:f2:52:3f:99:54:c1:30:cd:d7:
62:e0:2a:49:5a:9a:9c:93:0c:1c:60:ef:8b:68:1f:ff:be:c7:
33:83:51:77:28:25:40:b9:13:ba:b8:90:a3:1a:bf:c5:58:4c:
a2:70:70:70:0b:42:b9:90:a7:5c:1e:4d:58:98:ce:83:96:83:
e7:48:44:18:8a:1e:40:dc:29:65:79:18:c7:55:83:e2:f2:9a:
a2:72:96:7d:33:df:ac:33:e2:31:22:54:72:b8:d1:e2:b5:d9:
45:06:49:41:0c:37:31:12:fb:5c:86:99:31:c2:59:b2:b3:86:
09:27:ce:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:49:48 2025 by rpki-client