Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363131303a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363131303a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: gq4PAPAwiyGvFwKN8K+HKgHluGGzUi71Rxw2hqDSeSc=
Subject key identifier: 16:50:22:71:2E:9B:68:07:49:E7:19:CB:3E:B9:93:C4:4F:A0:63:88
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 5C64ABC19ADBE06F5317C4B5D752E087A6B0B40D
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363131303a3a2f34382d3438203d3e203136393039.roa
Signing time: Mon 30 Dec 2024 20:21:40 +0000
ROA not before: Mon 30 Dec 2024 20:16:40 +0000
ROA not after: Mon 29 Dec 2025 20:21:40 +0000
asID: 16909
IP address blocks: 2a14:7584:6110::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 06 Jan 2025 20:19:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:64:ab:c1:9a:db:e0:6f:53:17:c4:b5:d7:52:e0:87:a6:b0:b4:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Dec 30 20:16:40 2024 GMT
Not After : Dec 29 20:21:40 2025 GMT
Subject: CN=165022712E9B680749E719CB3EB993C44FA06388
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:26:96:5d:1b:f7:ac:a4:7a:f2:c2:88:d9:2d:
ff:ba:3a:c9:38:f8:8b:db:d5:03:bb:f5:8a:d4:7a:
97:b5:14:9b:45:eb:21:fb:a1:d4:93:f7:30:e8:87:
72:53:81:46:94:f6:4a:b4:61:e1:f6:d2:32:bf:ba:
2d:08:da:5d:a1:9c:79:7a:93:3f:75:4c:92:8b:0e:
30:fa:95:16:53:ed:10:90:cf:a6:af:34:d0:d6:2d:
30:ad:1d:55:2c:26:f1:ec:5d:70:0c:91:3e:72:a4:
3b:22:50:5a:72:5c:de:6d:94:2f:2a:6e:3a:d3:d4:
a0:53:c9:ae:51:d1:85:36:b0:df:77:59:30:9b:7e:
07:ed:6c:c4:5d:15:f3:a7:54:ed:f8:fb:bd:2c:9c:
9b:64:0f:32:ac:76:a0:62:c3:32:2f:ee:9f:f3:5e:
af:ef:fd:4a:38:b4:92:7c:d4:24:48:0c:d1:52:d9:
7f:8a:a9:88:f7:01:61:b7:2c:83:0a:86:18:a2:0f:
14:b8:83:3a:42:79:c0:3b:81:97:4a:47:78:27:63:
61:07:b7:d6:8b:ec:c5:a0:d8:33:c1:9a:f0:4e:8d:
d2:5e:f1:35:a8:9f:f4:c8:1b:9d:86:3e:db:01:a3:
37:93:73:22:5e:ca:95:bb:57:24:0d:55:07:89:1e:
b0:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:50:22:71:2E:9B:68:07:49:E7:19:CB:3E:B9:93:C4:4F:A0:63:88
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363131303a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6110::/48
Signature Algorithm: sha256WithRSAEncryption
31:67:0d:0e:26:b0:bb:7b:b9:99:59:30:30:8a:51:22:e3:86:
30:cb:4f:22:07:49:37:ca:3f:c2:54:30:90:2b:e0:c5:42:08:
7f:e4:b0:d4:8f:6a:f4:97:07:46:2b:a4:ae:5d:b1:6a:07:b9:
64:4e:1f:9a:40:6a:b9:8d:da:98:96:7a:06:4d:26:6a:1e:80:
31:c7:4e:57:36:d0:44:ef:1b:89:ed:7d:50:17:08:c8:71:73:
4d:2d:fa:ac:ae:03:dc:5f:c3:55:65:3a:f6:0f:cc:69:4a:92:
65:28:ef:7a:6c:6c:17:a8:ce:e2:05:d8:30:11:36:26:d2:e0:
70:4c:04:31:e1:ad:93:2c:52:04:62:36:2b:bb:be:dc:af:64:
53:9d:1c:a2:ad:39:4c:18:17:bd:73:a1:6b:ae:4f:8a:77:77:
4d:af:ee:b0:a6:48:f1:cf:95:6f:1f:ef:08:12:33:34:ac:c6:
d7:49:0d:0f:d7:5b:7f:9d:3b:7c:05:60:d1:d4:99:57:3c:60:
aa:9b:b2:3a:a7:39:15:a1:2f:23:25:6b:98:96:55:9a:ce:8a:
8c:c4:28:d6:d2:79:88:88:43:0e:1e:7d:3c:1f:17:22:87:e7:
4f:f7:4b:cf:2b:d6:78:45:d9:46:a1:a0:f1:26:2c:a8:17:01:
11:27:d9:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:46:02 2025 by rpki-client