Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363130303a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363130303a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: v5eR+CMQySgSKRBAyQwyy4tsODJIE4ClIwkbjevmPxc=
Subject key identifier: BE:27:30:BD:E5:94:67:73:74:4B:8C:BC:7C:C5:A8:CE:A3:15:67:96
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 27432945227CE68724E393B6DC7418E65BD3B8BB
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363130303a3a2f34382d3438203d3e203136393039.roa
Signing time: Fri 27 Dec 2024 18:04:30 +0000
ROA not before: Fri 27 Dec 2024 17:59:30 +0000
ROA not after: Fri 26 Dec 2025 18:04:30 +0000
asID: 16909
IP address blocks: 2a14:7584:6100::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 03 Jan 2025 18:43:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:43:29:45:22:7c:e6:87:24:e3:93:b6:dc:74:18:e6:5b:d3:b8:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Dec 27 17:59:30 2024 GMT
Not After : Dec 26 18:04:30 2025 GMT
Subject: CN=BE2730BDE5946773744B8CBC7CC5A8CEA3156796
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:e5:ee:05:ff:47:38:a0:b1:e3:1c:55:56:d6:
59:7f:c9:3f:e9:fe:a9:78:2b:c2:e6:cf:59:a9:1d:
94:c5:9c:bb:cc:61:7b:1b:61:13:22:9a:45:17:2d:
8c:72:4b:11:82:f0:7e:ea:27:fa:c1:da:24:b8:59:
60:93:c9:15:82:29:b7:c2:ac:a3:e5:9a:e7:2a:24:
c4:c9:7c:0f:a1:9d:a0:d2:7f:6f:c0:29:d4:65:f9:
fd:42:45:c0:26:ad:5e:39:7c:8a:4e:a1:26:2c:b9:
57:2f:c5:19:47:ab:59:e1:a2:f5:ba:23:ed:c6:16:
9c:d5:42:f9:c5:77:a1:17:6d:7f:37:66:18:5b:98:
bf:05:1a:ad:39:ee:2f:3e:7d:ae:03:be:f0:44:6d:
4c:45:14:f0:31:2b:45:7c:05:75:9b:ab:fd:a1:60:
8c:e0:76:a1:bf:2c:89:11:ef:73:23:27:a7:ab:1c:
01:a5:ab:e8:f4:c0:86:5b:53:bd:f0:3d:94:40:e4:
51:8c:66:1d:8b:9b:3e:2a:13:bd:4f:11:7a:b2:f1:
34:3f:dc:bf:3d:19:be:f5:44:db:ea:c2:13:dd:22:
62:96:8c:db:48:a5:89:3e:64:a5:1e:01:17:eb:53:
de:a3:20:90:2f:98:c1:d0:26:a1:9f:08:ab:99:57:
b2:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:27:30:BD:E5:94:67:73:74:4B:8C:BC:7C:C5:A8:CE:A3:15:67:96
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363130303a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6100::/48
Signature Algorithm: sha256WithRSAEncryption
9c:06:2f:a5:5e:23:7d:af:d6:9c:48:1e:b4:8d:8a:13:40:12:
01:07:ad:bd:00:6c:36:9e:1b:a8:1c:47:1d:e5:38:35:e9:3d:
95:2f:ad:78:11:6c:65:e6:60:72:9c:1f:c7:1b:e6:b4:65:bd:
3a:35:94:f2:1b:68:15:11:da:5c:e2:ae:42:c8:02:05:5b:63:
d5:10:7f:29:36:74:bc:4b:55:b4:7e:2e:d3:1d:f8:37:5e:fa:
d3:f0:e2:9b:bf:fa:2a:a9:51:1f:e9:f6:9b:4b:95:85:c4:45:
db:76:ea:1b:25:fc:29:a4:f3:14:a3:53:e8:ad:f3:f2:4e:53:
3c:71:9e:5d:d1:63:e3:e8:e8:9e:46:50:a6:ed:10:36:57:90:
d5:23:6b:82:7e:40:94:6c:d9:3b:04:69:1e:05:d3:e2:6e:e1:
1b:f6:ba:db:b6:0e:f2:ab:59:89:d9:66:e1:4d:0b:a7:ef:08:
8c:12:3e:bf:6e:84:9b:51:54:00:3f:67:2d:a4:2e:f3:a1:c4:
03:bf:83:65:a2:95:d2:e3:21:cc:16:7a:26:60:64:76:3f:d8:
a2:c4:32:ae:3f:4b:dd:22:62:96:e0:4d:28:f5:a8:c3:d5:72:
16:63:94:9a:bb:42:fc:1c:b0:9c:b7:8d:a4:0d:68:c7:e2:79:
af:84:07:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:49:46 2025 by rpki-client