Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363133313a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363133313a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: kb4KssEWVs00TYEs9cYYhyK0Y85+aLVKXk0Ji9K0vAA=
Subject key identifier: 0C:F1:B4:E2:71:EF:4D:EC:11:4D:5B:63:E9:08:6D:74:14:51:C5:EF
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 53EEF28D74E0BB6856603A7D203EC964C47E9A15
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363133313a3a2f34382d3438203d3e203136393039.roa
Signing time: Fri 11 Apr 2025 18:33:04 +0000
ROA not before: Fri 11 Apr 2025 18:28:04 +0000
ROA not after: Fri 10 Apr 2026 18:33:04 +0000
asID: 16909
IP address blocks: 2a14:7584:6131::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 18 Apr 2025 18:15:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:ee:f2:8d:74:e0:bb:68:56:60:3a:7d:20:3e:c9:64:c4:7e:9a:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Apr 11 18:28:04 2025 GMT
Not After : Apr 10 18:33:04 2026 GMT
Subject: CN=0CF1B4E271EF4DEC114D5B63E9086D741451C5EF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:c6:a4:13:fc:2d:29:15:2a:11:4e:1e:34:39:
1e:be:35:6d:20:44:a0:ed:12:80:47:1e:95:b6:d2:
ae:27:dc:35:39:14:e6:00:6d:93:7f:df:17:56:83:
59:40:3b:de:42:13:74:a2:00:63:8e:12:79:38:ae:
ad:99:58:35:2e:a6:d3:fd:cb:74:c4:0a:90:7f:e3:
cb:6a:36:90:09:9a:4c:de:8c:2b:9e:aa:35:72:38:
ec:c5:ea:45:ce:8b:c6:12:18:c9:7d:cc:fb:f6:07:
0f:61:3e:65:a3:97:38:aa:39:85:68:ec:e9:ed:59:
75:61:c2:22:2b:66:e1:a6:af:10:e1:6f:03:b0:3d:
ce:0c:c3:54:f1:56:de:14:d9:24:23:94:99:3f:e3:
39:1a:97:25:2f:84:74:ba:3b:a2:68:a6:ef:e9:73:
7e:0c:d6:2c:94:3b:85:01:2b:35:b7:82:81:9f:ce:
58:25:f9:9e:9e:07:4c:59:c1:2a:02:7d:56:26:34:
68:f0:be:5c:cf:82:ef:14:49:e7:a8:4d:88:3d:aa:
75:57:30:72:01:80:0a:15:78:a4:8b:4a:a2:2e:93:
0e:3d:d6:a7:d1:53:1e:a5:52:cb:05:e1:cc:2d:cd:
00:ef:1a:f6:b6:6c:85:35:fd:af:27:f0:6f:21:68:
76:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:F1:B4:E2:71:EF:4D:EC:11:4D:5B:63:E9:08:6D:74:14:51:C5:EF
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363133313a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6131::/48
Signature Algorithm: sha256WithRSAEncryption
90:8c:ff:e8:96:3c:31:19:f3:d4:61:c5:86:10:2c:41:b6:6d:
aa:43:ee:6d:7c:b0:34:3c:ee:71:63:bb:03:d5:3c:f3:ea:64:
ea:2e:98:c0:64:b4:e0:ce:aa:bf:fa:13:47:5d:a9:51:0d:7f:
61:df:90:a1:29:b0:e5:30:7d:34:0f:dd:fb:ed:34:55:51:78:
d4:ee:ce:10:2a:35:8b:f2:9a:7c:a9:1a:64:8b:0e:37:87:2d:
3a:5c:89:3b:b8:1f:26:f7:92:15:af:f0:9f:61:22:fd:5a:1d:
02:99:da:82:13:86:96:49:1c:a7:23:15:bb:c7:20:b7:16:81:
ac:95:ee:cb:29:cc:40:26:c4:75:91:a4:9e:ea:fb:77:5b:fd:
1d:f3:b1:06:8b:78:12:51:46:e7:c6:27:9c:b4:b5:63:f9:60:
c0:8b:b4:ab:40:2e:1b:40:26:13:cb:e4:38:bf:f2:61:08:8a:
3e:f2:78:87:52:ce:e7:13:35:ba:02:85:fe:1a:76:f4:2b:b4:
27:ee:90:24:e2:bd:4e:ea:d7:40:ab:8c:88:d5:cd:ce:e2:97:
fd:12:a6:d3:70:1a:e4:e2:26:19:92:91:b6:84:52:e4:8d:0e:
94:dd:c9:39:fa:71:d0:d1:a7:76:58:f0:7c:58:92:0f:3c:a5:
9d:b2:cf:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:38:22 2025 by rpki-client