Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363065303a3a2f34342d3438203d3e203136393039.roa
File: 326131343a373538343a363065303a3a2f34342d3438203d3e203136393039.roa (raw, json)
Hash identifier: XiMJN3vw9HOmlS8PeDBWHjZOSHIyHUSP1YvPtWujbKg=
Subject key identifier: 4B:CF:06:71:BD:A8:B4:7A:3E:BA:AF:E3:AE:1E:98:80:CA:0D:3F:57
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 4BBFDCE755744A62A0DA3BBB72616CB97D9792B1
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363065303a3a2f34342d3438203d3e203136393039.roa
Signing time: Thu 19 Dec 2024 14:32:04 +0000
ROA not before: Thu 19 Dec 2024 14:27:04 +0000
ROA not after: Thu 18 Dec 2025 14:32:04 +0000
asID: 16909
IP address blocks: 2a14:7584:60e0::/44 maxlen: 48
Validation: Failed, certificate revoked on Thu 19 Dec 2024 20:02:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:bf:dc:e7:55:74:4a:62:a0:da:3b:bb:72:61:6c:b9:7d:97:92:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Dec 19 14:27:04 2024 GMT
Not After : Dec 18 14:32:04 2025 GMT
Subject: CN=4BCF0671BDA8B47A3EBAAFE3AE1E9880CA0D3F57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:4e:d9:cc:2c:df:bc:94:e2:af:62:a3:9a:46:
cd:6f:bf:8e:ee:6c:e7:56:67:53:b9:db:19:c4:e7:
5e:8e:35:8a:9d:fc:cf:43:ec:56:22:7a:47:7b:f7:
79:00:c7:c6:96:af:59:4e:83:95:45:f3:8b:2e:c5:
cd:fc:74:2c:7a:3a:dc:cd:5c:d5:47:51:b4:9f:62:
a5:1e:08:08:2c:e1:61:38:0f:6b:83:70:fd:39:39:
f3:a1:5b:d1:0c:df:47:57:15:38:67:59:a7:58:c2:
30:4d:f7:fd:ee:83:2b:6f:ba:93:2e:44:b1:36:4f:
31:46:6f:91:2f:00:1b:7f:74:ee:a7:3a:2c:21:f9:
83:d4:fb:b9:78:fc:01:64:00:3b:9e:85:7a:a6:59:
50:76:1e:41:e3:a5:d5:7d:67:84:82:d1:4f:0e:08:
d0:4d:76:c5:5d:9e:bb:84:95:ce:3d:9a:61:c6:f1:
e3:9c:a2:7b:be:b0:9c:53:e2:19:21:1c:1b:2b:9c:
d8:39:df:8e:0f:8f:8f:ba:1d:a9:d4:71:90:d1:da:
09:0e:4b:d5:52:78:5b:a4:23:47:94:59:8e:bf:d6:
63:1d:e0:b5:6e:4f:6c:9e:8e:42:f9:2d:70:b6:25:
e0:1b:bb:e4:49:f9:3e:98:ed:a1:12:1f:12:f3:f5:
2a:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:CF:06:71:BD:A8:B4:7A:3E:BA:AF:E3:AE:1E:98:80:CA:0D:3F:57
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363065303a3a2f34342d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:60e0::/44
Signature Algorithm: sha256WithRSAEncryption
47:10:61:3c:e0:d5:6d:ca:e9:08:bb:8a:ac:36:91:bf:ea:e8:
53:46:8b:f3:74:46:13:8e:cc:32:29:75:69:03:36:b8:65:e7:
2e:6e:3e:8c:90:33:1d:08:f6:9e:78:1f:57:a6:01:7b:55:92:
0b:78:9b:01:e7:84:d7:a9:05:b2:03:06:be:12:f1:f3:e2:84:
09:c4:c4:41:32:ed:cc:e5:9b:ec:40:0c:f4:2a:8c:d2:05:ad:
11:58:ba:9b:cb:e8:d3:42:94:f7:22:03:6b:8b:4e:09:0c:5a:
50:1a:77:07:c2:95:8c:45:5f:c1:e2:0a:3a:69:81:ac:44:a3:
a1:fe:de:71:e5:79:45:9c:e3:ed:79:a5:63:2f:ea:49:9a:a7:
5b:17:dc:16:cb:37:19:22:bc:c4:80:82:5e:f3:a9:1f:2a:e7:
a0:88:9e:bb:92:34:3b:d2:33:ff:cb:ad:e1:81:86:17:f3:4b:
93:89:58:56:ca:95:78:0c:6f:77:89:ce:4b:83:78:9c:36:f2:
47:e0:ef:f1:94:e5:06:69:74:c4:50:d2:bd:75:0e:fc:75:4f:
78:ef:a7:09:1c:27:a7:eb:71:c2:6a:8e:71:ea:7f:b5:d5:cf:
44:e1:7f:cb:a6:e0:f6:74:e6:f7:9c:77:d4:f7:94:cc:55:0f:
97:ca:8c:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:40:11 2025 by rpki-client