Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363132383a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363132383a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: vFhX+A8c0nRhjYoTJ56fwgRyczHnkcywPzHKwSerkPs=
Subject key identifier: A7:65:81:25:35:B1:EA:8F:BC:80:43:05:C2:E3:CC:E2:5C:DF:90:D8
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 4BA7B0AACE22B12EBC11BA1C453DAF229C02F039
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363132383a3a2f34382d3438203d3e203136393039.roa
Signing time: Fri 11 Apr 2025 18:32:45 +0000
ROA not before: Fri 11 Apr 2025 18:27:45 +0000
ROA not after: Fri 10 Apr 2026 18:32:45 +0000
asID: 16909
IP address blocks: 2a14:7584:6128::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 18 Apr 2025 18:15:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:a7:b0:aa:ce:22:b1:2e:bc:11:ba:1c:45:3d:af:22:9c:02:f0:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Apr 11 18:27:45 2025 GMT
Not After : Apr 10 18:32:45 2026 GMT
Subject: CN=A765812535B1EA8FBC804305C2E3CCE25CDF90D8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:9e:8c:54:50:58:ea:ca:c7:bc:97:ec:b9:a5:
8f:8a:0a:3d:94:c9:49:d7:fd:ed:41:f8:5a:16:6c:
42:09:79:d7:20:41:94:1c:61:65:44:e1:2d:22:d3:
ed:5e:3d:99:bd:41:5c:d5:2b:89:ba:4f:a0:92:02:
d4:0c:39:cd:f1:dd:19:a4:85:01:b4:a6:c7:00:6a:
aa:a2:cf:e2:5d:b2:ab:01:d9:68:38:42:93:5e:93:
9b:6e:ef:cb:81:c3:d6:2f:a6:c4:bd:86:40:68:81:
d2:e5:8b:c4:0b:b3:1a:f6:b4:b8:a2:d7:b1:2e:74:
2b:aa:02:b9:c2:84:ec:5d:00:67:2e:61:ef:38:60:
c9:87:aa:01:8d:86:17:e7:01:5f:a7:ae:57:6b:b9:
5d:08:fe:0d:f3:6a:a5:de:03:5e:45:c7:80:1f:8a:
8d:8e:af:cd:14:09:e5:23:97:c2:7a:37:be:e0:cb:
b4:d7:2d:cd:d6:63:e3:f1:e3:ea:52:80:6b:de:31:
f3:26:b2:6b:82:e4:ce:2c:65:57:44:42:52:70:47:
ac:ac:a6:24:a9:eb:17:d6:57:ec:2d:ad:fc:3c:03:
a9:a1:4d:fe:bb:98:8b:ac:03:77:f9:50:87:1c:64:
3a:b3:de:39:e7:fc:a6:ef:f0:c5:29:53:e2:65:c4:
68:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:65:81:25:35:B1:EA:8F:BC:80:43:05:C2:E3:CC:E2:5C:DF:90:D8
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363132383a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6128::/48
Signature Algorithm: sha256WithRSAEncryption
83:d5:64:4d:69:aa:9b:bd:ad:0b:00:58:1e:fd:bc:a1:71:ce:
f9:e6:00:77:bf:30:ba:86:05:6c:8d:e3:f0:80:d0:9b:9c:92:
0f:c3:90:f2:2c:43:50:5b:ca:ff:bf:85:0a:89:71:fd:97:49:
9c:c4:09:67:81:41:13:7c:f9:bf:8e:6c:57:53:51:07:dd:11:
17:71:4b:9e:fc:44:e5:d9:63:56:48:e1:43:6f:4c:2e:9b:69:
1c:8d:e0:f8:8f:61:c8:fd:63:02:d0:dd:4f:48:3b:94:70:ef:
21:eb:f8:ff:5f:54:a2:6a:a9:17:66:75:cb:9c:14:c2:41:ea:
ff:e0:7c:ff:d3:97:6d:04:dc:9e:90:59:ff:02:4f:d9:ee:65:
69:f4:b7:d5:23:77:de:d6:10:49:42:e5:ca:d6:d7:d8:c6:e4:
08:b0:cf:81:30:cd:d2:41:c5:28:1c:03:07:92:c9:9a:9e:54:
0a:d4:cd:42:67:dd:30:e4:28:a3:cd:02:ff:b5:e0:4d:31:a3:
17:c7:eb:e2:de:1a:a1:81:08:e3:ff:19:a6:40:bb:95:4f:41:
82:4f:ad:5a:b8:87:de:4e:f9:43:a9:f1:ca:81:5f:6e:96:d9:
cf:ce:b9:16:75:b0:80:d6:f2:4c:f6:1f:2e:ae:d0:5e:0b:70:
6b:c5:35:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:47:10 2025 by rpki-client