Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363139303a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363139303a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: lcyNWJKePFLCg/wmvl5rcF/bgxzR0qzLz3MkidJNf18=
Subject key identifier: 5D:D9:A4:20:4E:DD:3E:65:B6:E7:2F:16:E4:46:FB:6D:03:F7:DC:49
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 6CA966ADB9F25956B18DBC75561008BB057F9676
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363139303a3a2f34382d3438203d3e203136393039.roa
Signing time: Thu 19 Dec 2024 21:04:51 +0000
ROA not before: Thu 19 Dec 2024 20:59:51 +0000
ROA not after: Thu 18 Dec 2025 21:04:51 +0000
asID: 16909
IP address blocks: 2a14:7584:6190::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 24 Dec 2024 21:05:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:a9:66:ad:b9:f2:59:56:b1:8d:bc:75:56:10:08:bb:05:7f:96:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Dec 19 20:59:51 2024 GMT
Not After : Dec 18 21:04:51 2025 GMT
Subject: CN=5DD9A4204EDD3E65B6E72F16E446FB6D03F7DC49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b2:8e:d5:ad:a8:96:67:3f:20:6f:45:31:3d:
5f:c3:43:65:62:9b:a4:0e:38:7b:a6:60:8f:a0:10:
e0:4f:ee:6e:4e:a7:79:0e:5b:48:27:47:35:73:95:
eb:79:c1:5a:07:f5:7f:84:ac:dc:04:b1:41:c9:f0:
a3:90:7d:d5:00:d2:e6:93:49:57:8e:9c:0e:4e:10:
9b:b3:c2:2e:32:6b:23:2f:aa:9e:91:33:f6:d1:b2:
0f:40:40:1f:00:44:01:ff:ea:74:ef:fc:34:42:a3:
2b:ec:5a:04:7a:08:d3:f2:88:d1:de:66:b6:ce:b2:
ca:b8:59:06:86:3b:e9:b5:41:48:64:77:df:fb:94:
69:6a:a7:7b:5b:7d:3e:bc:58:2e:37:91:0c:d5:c6:
da:96:4a:2f:dd:a6:0a:eb:cf:d7:a2:f8:ad:d4:d9:
4c:9c:08:34:c8:fa:b5:46:05:4e:c5:6b:15:11:ca:
2c:f2:70:45:4c:8f:82:88:64:68:89:f6:74:6d:52:
64:fc:69:86:16:a0:80:14:47:a3:06:9e:f6:15:6e:
dc:b9:c1:57:a2:7b:6d:fe:96:75:33:92:4b:c0:d9:
ba:a6:c3:23:6c:fc:f7:dd:bf:c3:cc:28:d9:fd:1c:
5d:dd:aa:2e:c9:31:e2:e6:00:7e:70:d3:85:6f:47:
23:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:D9:A4:20:4E:DD:3E:65:B6:E7:2F:16:E4:46:FB:6D:03:F7:DC:49
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363139303a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6190::/48
Signature Algorithm: sha256WithRSAEncryption
31:5c:2e:d7:3a:60:0e:fe:0b:fa:c4:3d:6b:f4:7d:b0:2b:41:
16:3a:a1:43:24:6a:87:58:15:51:3d:92:20:0d:0c:c0:2f:8f:
a8:4e:08:2b:55:6f:67:b8:a9:5e:67:2f:5a:dd:5e:5e:7c:70:
4a:28:be:3b:72:8a:70:02:14:c0:a8:ec:a8:12:2c:7d:69:fa:
75:9b:d5:bc:26:a8:75:f1:65:a0:9f:e0:62:a9:62:54:72:57:
8a:30:a9:b9:0b:0a:e1:9e:57:46:9c:ed:d7:65:c8:69:91:10:
bd:05:3f:de:80:6b:4d:16:e4:48:a2:89:4a:1e:98:a7:e2:ae:
ba:e5:2f:8f:ea:08:30:18:c3:17:db:e8:91:cc:6a:69:0b:57:
fc:0a:af:e6:ae:1b:d4:d6:36:21:0f:a4:eb:7f:9e:d0:d2:52:
08:59:43:b2:64:69:3f:bc:a1:ab:d8:a7:59:bc:06:3a:da:04:
a7:08:9b:ef:e6:67:9d:86:6b:be:63:76:0a:be:3d:c6:50:38:
2e:3d:56:46:20:3b:d4:f5:0a:5e:24:c5:60:ee:57:3e:00:26:
a1:80:28:7a:b4:bc:cd:33:a1:8b:e5:fb:39:60:2c:39:60:b6:
63:eb:f6:e0:b0:2a:64:3b:94:00:77:76:32:51:d9:91:92:da:
e9:0c:3e:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:50:23 2025 by rpki-client