Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363066303a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363066303a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: EYWjTdig5grdolu/yQWKMTEgagccyos1mqrshvlep+4=
Subject key identifier: BD:AE:1B:7F:62:C2:25:B6:F7:B6:43:05:50:E7:F6:98:8A:71:D5:A7
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 37F23DAB8385962FB67648A23D9ACD86A776B381
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363066303a3a2f34382d3438203d3e203136393039.roa
Signing time: Fri 27 Dec 2024 18:04:03 +0000
ROA not before: Fri 27 Dec 2024 17:59:03 +0000
ROA not after: Fri 26 Dec 2025 18:04:03 +0000
asID: 16909
IP address blocks: 2a14:7584:60f0::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 01 Jan 2025 21:53:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:f2:3d:ab:83:85:96:2f:b6:76:48:a2:3d:9a:cd:86:a7:76:b3:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Dec 27 17:59:03 2024 GMT
Not After : Dec 26 18:04:03 2025 GMT
Subject: CN=BDAE1B7F62C225B6F7B6430550E7F6988A71D5A7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:fe:4c:f4:9d:1d:73:14:aa:95:71:23:af:35:
22:f5:64:ac:78:a3:02:da:70:28:69:dc:a8:24:b2:
7a:77:6b:b8:9f:bb:e5:58:08:78:15:68:dd:84:64:
c0:74:79:30:14:f2:20:ba:fb:bb:9e:c4:ba:00:c7:
35:10:1f:96:31:cb:cb:dc:37:ac:2b:db:a7:3e:c8:
19:0b:74:ae:d5:13:da:74:0c:08:b2:09:e9:84:f1:
fb:03:50:b0:54:32:53:9b:4a:25:65:f2:70:60:b8:
58:cb:a6:12:95:f7:a0:e5:e7:cb:d6:74:d4:99:d1:
23:f8:05:93:b7:ca:29:1f:27:e2:91:89:49:75:04:
3a:82:31:a9:54:f9:5a:3d:e7:2a:c0:15:3f:0d:e1:
79:9d:59:86:c7:f2:fc:d0:69:53:89:e5:a9:4d:60:
58:1b:c7:c9:c2:cd:4b:69:0f:04:71:5b:1c:a0:17:
2b:53:14:5a:cc:37:42:14:dd:3e:39:67:ec:5d:0b:
a1:50:cf:ad:f2:9e:ed:36:1c:de:49:46:47:05:9b:
36:60:00:50:91:72:54:05:7d:07:44:5e:5c:fa:52:
0e:5e:30:0a:88:ba:42:60:1a:d9:b5:7c:23:86:78:
1e:e4:67:57:b3:14:be:a6:d3:c5:1b:76:f0:7b:0c:
0c:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:AE:1B:7F:62:C2:25:B6:F7:B6:43:05:50:E7:F6:98:8A:71:D5:A7
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363066303a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:60f0::/48
Signature Algorithm: sha256WithRSAEncryption
0b:f0:1f:fe:3a:c5:1e:02:24:ec:48:64:d4:7c:29:ad:ac:4b:
b7:c8:0f:f5:b2:cb:76:5c:1f:b5:5e:8f:94:af:c5:be:dc:4e:
67:a4:84:a6:ad:4f:0a:b9:96:37:d7:13:16:a1:eb:30:db:bb:
f3:4d:aa:3f:3c:5e:80:61:8c:76:de:73:9b:77:37:1a:6e:22:
7f:40:fd:58:84:d6:2c:43:80:9a:3c:1c:fb:c2:95:80:7a:68:
52:8d:49:ab:c1:03:52:71:a7:ce:cf:f8:40:53:fc:5f:69:54:
0f:d1:b8:89:79:a7:8c:a5:f0:11:10:1f:0d:11:c7:6e:b2:2e:
08:aa:4d:02:34:89:a9:9b:a6:3f:13:54:4c:72:34:5b:83:00:
03:90:78:4c:47:1e:0e:af:49:49:7c:c6:ab:a1:06:33:c4:8a:
22:2a:6c:52:46:90:95:89:9b:8e:59:1e:a7:5d:25:53:cc:b5:
09:7e:fb:93:1a:5f:a5:d4:1d:e0:59:6e:0c:5a:6c:b4:37:43:
a2:1f:fb:dc:8f:e2:60:30:77:c7:03:ed:51:64:e8:ab:6f:a2:
c5:7c:bd:cb:ec:98:58:12:71:70:3c:79:7c:c2:47:7c:a1:77:
5e:a2:ae:87:93:b8:aa:06:a1:d4:c1:44:5b:a7:f1:08:6a:4f:
a1:d9:d0:c0
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUN/I9q4OFli+2dkiiPZrNhqd2s4EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NCMjZGNzY0MkZENkI0Q0JGMzVGQkVFNDU1RjFFRkIw
QzlGMEE0NTAeFw0yNDEyMjcxNzU5MDNaFw0yNTEyMjYxODA0MDNaMDMxMTAvBgNV
BAMTKEJEQUUxQjdGNjJDMjI1QjZGN0I2NDMwNTUwRTdGNjk4OEE3MUQ1QTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQ/kz0nR1zFKqVcSOvNSL1ZKx4
owLacChp3Kgksnp3a7ifu+VYCHgVaN2EZMB0eTAU8iC6+7uexLoAxzUQH5Yxy8vc
N6wr26c+yBkLdK7VE9p0DAiyCemE8fsDULBUMlObSiVl8nBguFjLphKV96Dl58vW
dNSZ0SP4BZO3yikfJ+KRiUl1BDqCMalU+Vo95yrAFT8N4XmdWYbH8vzQaVOJ5alN
YFgbx8nCzUtpDwRxWxygFytTFFrMN0IU3T45Z+xdC6FQz63ynu02HN5JRkcFmzZg
AFCRclQFfQdEXlz6Ug5eMAqIukJgGtm1fCOGeB7kZ1ezFL6m08UbdvB7DAzhAgMB
AAGjggJoMIICZDAdBgNVHQ4EFgQUva4bf2LCJbb3tkMFUOf2mIpx1acwHwYDVR0j
BBgwFoAUfLJvdkL9a0y/NfvuRV8e+wyfCkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMS83Q0IyNkY3NjQy
RkQ2QjRDQkYzNUZCRUU0NTVGMUVGQjBDOUYwQTQ1LmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdm
MzgyNC8wLzdDQjI2Rjc2NDJGRDZCNENCRjM1RkJFRTQ1NUYxRUZCMEM5RjBBNDUu
Y2VyMIGqBggrBgEFBQcBCwSBnTCBmjCBlwYIKwYBBQUHMAuGgYpyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMS8zMjYxMzEzNDNhMzczNTM4MzQzYTM2MzA2NjMwM2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzEzNjM5MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoUdYRg8DAN
BgkqhkiG9w0BAQsFAAOCAQEAC/Af/jrFHgIk7Ehk1HwpraxLt8gP9bLLdlwftV6P
lK/FvtxOZ6SEpq1PCrmWN9cTFqHrMNu7802qPzxegGGMdt5zm3c3Gm4if0D9WITW
LEOAmjwc+8KVgHpoUo1Jq8EDUnGnzs/4QFP8X2lUD9G4iXmnjKXwERAfDRHHbrIu
CKpNAjSJqZumPxNUTHI0W4MAA5B4TEceDq9JSXzGq6EGM8SKIipsUkaQlYmbjlke
p10lU8y1CX77kxpfpdQd4FluDFpstDdDoh/73I/iYDB3xwPtUWToq2+ixXy9y+yY
WBJxcDx5fMJHfKF3XqKuh5O4qgah1MFEW6fxCGpPodnQwA==
-----END CERTIFICATE-----
Generated at Sat Apr 19 00:49:37 2025 by rpki-client