Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363137303a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363137303a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: kQXt65KXnXkspyL4ZMSbhh8krtthFSk/At8Co4e1QCE=
Subject key identifier: BC:E9:DC:52:99:02:35:36:93:AD:A1:E8:6E:3A:84:64:60:A3:30:BA
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 6509174336B3634C5699E61152726F11E86F8C9C
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363137303a3a2f34382d3438203d3e203136393039.roa
Signing time: Sat 21 Dec 2024 20:46:03 +0000
ROA not before: Sat 21 Dec 2024 20:41:03 +0000
ROA not after: Sat 20 Dec 2025 20:46:03 +0000
asID: 16909
IP address blocks: 2a14:7584:6170::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 29 Dec 2024 15:39:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:09:17:43:36:b3:63:4c:56:99:e6:11:52:72:6f:11:e8:6f:8c:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Dec 21 20:41:03 2024 GMT
Not After : Dec 20 20:46:03 2025 GMT
Subject: CN=BCE9DC529902353693ADA1E86E3A846460A330BA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:2c:2b:9c:8b:bd:5e:fd:1a:d5:b7:87:d5:fd:
d3:e2:85:ca:48:a5:74:ee:eb:5e:8d:66:69:0d:83:
26:46:84:a2:08:61:0a:f5:1b:3b:a6:e8:45:43:b2:
3d:af:b2:7d:66:90:d8:3e:90:7c:78:7c:1d:d0:31:
57:30:49:c5:30:a0:91:2e:10:25:eb:6f:53:15:c5:
70:ee:db:26:fd:5d:35:52:7e:90:ae:5b:c3:97:43:
28:a1:75:d6:3b:1f:0e:a8:6f:f4:11:d8:fe:9b:a5:
fa:47:b4:00:13:b2:f9:33:bd:23:70:ec:0b:a8:b1:
a0:cc:d0:ea:c5:95:71:85:af:e3:fc:1c:7f:27:24:
6c:28:4c:58:a3:70:d4:1c:ab:64:ae:2f:ef:87:b6:
bc:7c:e5:40:11:4f:c1:3c:f0:cf:78:71:e6:07:c4:
b2:94:f1:c7:af:ae:aa:12:d7:65:4e:2b:d5:f2:7f:
74:cd:0a:c7:85:3c:8d:33:fb:d8:ed:5a:fa:af:a3:
37:6e:41:2a:59:51:59:92:5d:2a:7c:01:de:16:8c:
58:77:89:e2:25:17:be:13:2b:cb:28:19:21:52:4d:
e1:d1:cf:63:44:b8:6e:e6:da:7f:a4:b8:a4:49:77:
75:8b:c1:c8:4c:e3:77:e9:54:a5:3e:58:89:48:c3:
d9:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:E9:DC:52:99:02:35:36:93:AD:A1:E8:6E:3A:84:64:60:A3:30:BA
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363137303a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6170::/48
Signature Algorithm: sha256WithRSAEncryption
b1:d0:c4:ff:fc:44:1d:70:13:1e:19:fc:d4:27:cc:f9:6b:26:
af:15:d3:84:7b:b7:c0:73:90:22:93:02:01:e0:54:0e:9f:9f:
d0:bb:50:27:3d:18:6e:da:b2:7a:37:99:7c:c0:dd:27:07:52:
1e:13:d3:ef:3c:ab:41:c2:24:86:fb:7e:99:0a:42:d4:16:3e:
2d:7d:72:d1:fd:89:75:06:24:ef:0b:1e:1e:88:bd:21:49:6e:
d0:c8:02:f0:d7:54:56:53:23:4c:e0:a3:5e:7e:eb:93:69:7c:
cf:d6:58:00:5a:0f:4e:8e:45:4a:55:07:83:ab:36:fa:af:8a:
30:8f:ce:0b:8c:47:cb:e1:64:6c:32:93:ba:64:00:30:89:ff:
c4:47:b1:05:27:c3:76:e2:ce:5b:2e:11:aa:be:49:39:98:5e:
f1:d9:23:21:bd:75:32:ac:75:f4:ab:1c:e1:a7:08:bf:a2:77:
51:00:4c:d1:92:d5:27:79:21:77:75:b3:40:fc:2f:2b:9a:cb:
36:16:18:4b:4e:46:86:01:b2:e7:78:bc:04:aa:23:6f:47:a2:
3f:d9:fe:0b:0e:cb:32:02:64:d8:2e:87:90:16:b8:0a:76:73:
8d:18:fe:59:4a:d8:36:c4:4a:ca:b4:88:4a:f9:f3:5e:a6:49:
4a:06:57:bb
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUZQkXQzazY0xWmeYRUnJvEehvjJwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NCMjZGNzY0MkZENkI0Q0JGMzVGQkVFNDU1RjFFRkIw
QzlGMEE0NTAeFw0yNDEyMjEyMDQxMDNaFw0yNTEyMjAyMDQ2MDNaMDMxMTAvBgNV
BAMTKEJDRTlEQzUyOTkwMjM1MzY5M0FEQTFFODZFM0E4NDY0NjBBMzMwQkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMLCuci71e/RrVt4fV/dPihcpI
pXTu616NZmkNgyZGhKIIYQr1Gzum6EVDsj2vsn1mkNg+kHx4fB3QMVcwScUwoJEu
ECXrb1MVxXDu2yb9XTVSfpCuW8OXQyihddY7Hw6ob/QR2P6bpfpHtAATsvkzvSNw
7AuosaDM0OrFlXGFr+P8HH8nJGwoTFijcNQcq2SuL++Htrx85UART8E88M94ceYH
xLKU8cevrqoS12VOK9Xyf3TNCseFPI0z+9jtWvqvozduQSpZUVmSXSp8Ad4WjFh3
ieIlF74TK8soGSFSTeHRz2NEuG7m2n+kuKRJd3WLwchM43fpVKU+WIlIw9nXAgMB
AAGjggJoMIICZDAdBgNVHQ4EFgQUvOncUpkCNTaTraHobjqEZGCjMLowHwYDVR0j
BBgwFoAUfLJvdkL9a0y/NfvuRV8e+wyfCkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMS83Q0IyNkY3NjQy
RkQ2QjRDQkYzNUZCRUU0NTVGMUVGQjBDOUYwQTQ1LmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdm
MzgyNC8wLzdDQjI2Rjc2NDJGRDZCNENCRjM1RkJFRTQ1NUYxRUZCMEM5RjBBNDUu
Y2VyMIGqBggrBgEFBQcBCwSBnTCBmjCBlwYIKwYBBQUHMAuGgYpyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMS8zMjYxMzEzNDNhMzczNTM4MzQzYTM2MzEzNzMwM2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzEzNjM5MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoUdYRhcDAN
BgkqhkiG9w0BAQsFAAOCAQEAsdDE//xEHXATHhn81CfM+WsmrxXThHu3wHOQIpMC
AeBUDp+f0LtQJz0YbtqyejeZfMDdJwdSHhPT7zyrQcIkhvt+mQpC1BY+LX1y0f2J
dQYk7wseHoi9IUlu0MgC8NdUVlMjTOCjXn7rk2l8z9ZYAFoPTo5FSlUHg6s2+q+K
MI/OC4xHy+FkbDKTumQAMIn/xEexBSfDduLOWy4Rqr5JOZhe8dkjIb11Mqx19Ksc
4acIv6J3UQBM0ZLVJ3khd3WzQPwvK5rLNhYYS05GhgGy53i8BKojb0eiP9n+Cw7L
MgJk2C6HkBa4CnZzjRj+WUrYNsRKyrSISvnzXqZJSgZXuw==
-----END CERTIFICATE-----
Generated at Sat Apr 19 00:50:36 2025 by rpki-client