Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363133663a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363133663a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: nywxEKj90KWz8Ecq2FLeFRD8MO6GiIx3V/G9mf2cMIQ=
Subject key identifier: 77:56:1F:89:B1:56:B4:93:29:A7:D2:55:FB:AD:D6:B7:52:8D:6D:47
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 692DA3F540A61891D8A8D925DAFEC6CDA6455F46
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363133663a3a2f34382d3438203d3e203136393039.roa
Signing time: Fri 11 Apr 2025 18:34:11 +0000
ROA not before: Fri 11 Apr 2025 18:29:11 +0000
ROA not after: Fri 10 Apr 2026 18:34:11 +0000
asID: 16909
IP address blocks: 2a14:7584:613f::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 18 Apr 2025 18:15:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:2d:a3:f5:40:a6:18:91:d8:a8:d9:25:da:fe:c6:cd:a6:45:5f:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Apr 11 18:29:11 2025 GMT
Not After : Apr 10 18:34:11 2026 GMT
Subject: CN=77561F89B156B49329A7D255FBADD6B7528D6D47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:45:d5:14:a3:cb:94:3a:cf:99:45:fc:d7:ab:
17:7d:a2:60:d0:52:0e:50:15:44:06:bd:ce:57:63:
4b:7d:bf:0b:2a:67:b9:10:98:28:d0:fd:b5:30:95:
fb:77:40:00:20:fc:92:75:a1:7b:15:38:70:92:f0:
36:2e:42:22:d1:67:a4:00:d6:f3:47:ec:7f:87:0c:
7f:9e:55:3e:6e:ae:77:b7:ad:72:60:4e:ba:28:4d:
1c:b3:16:fb:ad:37:8b:3a:27:31:3b:65:4d:98:da:
13:9c:73:b4:05:f9:e9:2f:f6:1e:95:96:bd:41:f0:
be:0e:92:bb:90:3d:fb:79:e8:2a:26:14:56:19:23:
85:2b:0c:37:07:5f:35:14:da:9c:78:ad:d7:6c:7f:
2b:4c:86:6f:59:31:57:d5:45:5e:95:d2:b8:9a:80:
de:b7:c4:fd:5b:a3:60:cc:0c:00:f6:79:3e:ab:43:
d1:24:75:c3:30:e7:9b:d6:f8:c1:6b:99:54:4e:f0:
c0:7d:6f:57:5c:49:a4:9a:f3:75:7a:1e:c1:2b:2a:
ad:8a:14:3c:de:17:9f:45:62:e4:54:f2:6a:ca:dd:
03:ad:40:75:52:01:08:dc:4e:86:60:55:c0:87:e1:
81:e8:01:fb:9d:13:7c:a3:d4:ae:5a:9b:e1:11:0c:
30:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:56:1F:89:B1:56:B4:93:29:A7:D2:55:FB:AD:D6:B7:52:8D:6D:47
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363133663a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:613f::/48
Signature Algorithm: sha256WithRSAEncryption
09:9d:45:20:d2:d4:89:ec:d9:61:d9:f6:53:95:f8:a3:67:2b:
18:d4:0c:49:19:81:a3:a5:b5:14:9c:ea:53:e1:58:0e:05:c4:
c4:81:a6:b6:76:27:89:4f:72:b6:af:97:5e:01:b6:58:61:b3:
ac:dc:0f:57:4a:5e:b2:e0:11:7b:37:a0:2b:4f:0b:29:f0:87:
4c:4b:22:67:ca:60:6c:c6:a8:9f:18:81:fe:6a:6c:c8:b5:59:
ce:f8:67:f4:c8:14:d1:31:66:99:87:7a:68:8e:21:cc:87:7d:
fd:36:0c:ae:db:ed:31:e2:7a:f9:33:d0:42:5b:66:66:ad:e0:
0f:a5:c9:73:ea:b9:67:cf:a3:8f:af:07:8f:90:f2:81:3c:39:
8e:fa:d8:da:04:fc:ac:7a:e6:ba:7f:45:92:36:09:53:02:fe:
73:ca:a7:d9:a5:79:b1:53:14:12:86:d2:2f:d2:4a:52:c3:66:
c1:a1:8b:3c:07:01:6e:b6:a0:27:58:a8:f3:a2:57:ee:32:58:
bc:09:d6:ed:98:97:d9:8b:76:19:5a:b1:a8:6b:92:23:77:15:
75:5a:11:a5:98:27:dc:f2:4d:81:04:5e:1c:a8:7d:66:e3:73:
97:5d:61:4e:48:93:a4:be:b2:b1:f7:20:24:9e:9d:99:7e:45:
f8:60:af:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:40:10 2025 by rpki-client