Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363130373a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363130373a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: 84AimkRj4gSeZPLKzTejcr6UUu27br9FK0z7n/qeMIU=
Subject key identifier: 9E:F6:39:0D:F8:63:70:CF:64:12:08:52:25:BE:DF:34:0D:E1:CA:7E
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 5B4FB368A6DA2ED4C3FD37109C4A31DFDEB520D0
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363130373a3a2f34382d3438203d3e203136393039.roa
Signing time: Wed 02 Apr 2025 18:46:18 +0000
ROA not before: Wed 02 Apr 2025 18:41:18 +0000
ROA not after: Wed 01 Apr 2026 18:46:18 +0000
asID: 16909
IP address blocks: 2a14:7584:6107::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 18 Apr 2025 18:15:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:4f:b3:68:a6:da:2e:d4:c3:fd:37:10:9c:4a:31:df:de:b5:20:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Apr 2 18:41:18 2025 GMT
Not After : Apr 1 18:46:18 2026 GMT
Subject: CN=9EF6390DF86370CF6412085225BEDF340DE1CA7E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:f1:b3:f1:d8:2a:39:9c:88:7e:d6:e2:25:0e:
70:85:e7:da:61:d9:01:59:0a:20:ca:75:18:25:e4:
86:90:3f:86:02:1f:ae:51:8d:65:87:58:9c:88:43:
50:0f:fe:85:37:1c:b8:06:7d:36:17:42:ea:ae:a5:
7d:fe:65:49:be:49:c7:27:42:5f:1b:16:ec:aa:7a:
68:70:3b:17:fe:68:cc:47:9a:70:a7:5c:e8:13:8f:
5f:8a:5e:21:4f:1e:1f:0a:1f:2d:70:ba:5d:e7:4c:
55:8e:19:2f:7d:48:b3:e6:a1:26:23:4d:95:a6:b5:
79:35:84:ea:c7:1f:95:f3:70:4a:d8:af:c7:cc:40:
cc:12:e4:a2:25:1a:67:62:fd:87:27:ba:03:05:d7:
55:0a:38:50:18:de:bb:64:bb:52:2d:06:6e:2a:91:
36:35:21:db:f2:f1:53:8b:fb:29:18:a5:b8:0d:29:
f4:5b:59:b3:fc:e7:30:66:c7:96:1b:a8:55:3b:dc:
04:aa:4f:db:0a:0c:e0:62:12:2e:17:a0:e2:52:41:
d9:9f:c9:45:df:a5:5a:b8:be:a4:2a:ea:57:fe:3c:
18:e8:fc:27:1e:86:d3:c5:ad:2e:e4:b6:31:7d:b2:
79:a4:f1:31:87:d8:f8:33:41:ef:3d:92:8b:ad:ea:
47:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:F6:39:0D:F8:63:70:CF:64:12:08:52:25:BE:DF:34:0D:E1:CA:7E
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363130373a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6107::/48
Signature Algorithm: sha256WithRSAEncryption
a3:a5:6c:8e:b5:e0:8e:6e:a1:16:ef:d8:e5:80:61:a0:c1:92:
ec:fc:ed:be:ed:4a:7d:69:82:2a:74:00:4c:0a:67:bc:e0:cf:
9a:51:61:a0:9e:30:c3:6d:0e:06:4a:49:8c:6e:41:7d:da:47:
8a:12:3e:d2:30:35:af:43:90:1f:4c:d3:08:0c:c7:ae:ce:fb:
6f:37:ac:81:a6:8c:e9:31:50:5f:14:28:ab:c7:17:ef:a9:b1:
06:6c:86:c3:8b:21:d5:88:8a:f7:f5:64:5f:48:25:a7:07:cf:
de:fc:98:b5:1d:4e:38:b2:83:da:f6:90:9b:c0:71:cd:0c:f8:
36:b7:5f:84:16:62:a3:36:1b:7c:b4:25:90:87:61:d5:7e:63:
cf:fd:52:e9:0f:7e:75:5b:58:d1:d7:70:b7:5d:03:0c:ef:0b:
82:64:ea:42:8e:37:81:43:85:59:65:e2:c9:56:fe:f2:90:42:
c2:e0:82:7b:45:b6:49:a8:8b:bb:30:ef:24:40:85:02:19:41:
b9:2d:13:ac:f0:9d:96:3d:38:64:f2:ae:2d:bb:88:c9:0e:38:
8e:4a:7c:7f:a0:20:cc:40:39:db:9b:34:94:ef:ab:9b:72:b0:
60:fa:52:ed:f5:58:72:bb:5f:f5:23:f7:c3:25:a9:14:a3:40:
fd:c5:a7:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:45:51 2025 by rpki-client