Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363164303a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363164303a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: KfijGP6JAYdXys0wP2nxrOYurawmQje35NP+LdWWGVA=
Subject key identifier: 19:D9:E3:22:74:BA:EA:91:1D:C1:A5:59:47:66:30:C0:BD:DE:A8:BB
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 0AC15A44422925DDB55EAFBEEEB2A61F7DAE48AA
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363164303a3a2f34382d3438203d3e203136393039.roa
Signing time: Thu 19 Dec 2024 20:48:01 +0000
ROA not before: Thu 19 Dec 2024 20:43:01 +0000
ROA not after: Thu 18 Dec 2025 20:48:01 +0000
asID: 16909
IP address blocks: 2a14:7584:61d0::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 24 Dec 2024 20:48:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:c1:5a:44:42:29:25:dd:b5:5e:af:be:ee:b2:a6:1f:7d:ae:48:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Dec 19 20:43:01 2024 GMT
Not After : Dec 18 20:48:01 2025 GMT
Subject: CN=19D9E32274BAEA911DC1A559476630C0BDDEA8BB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:94:2e:33:60:e7:39:cc:54:2d:1f:3b:5e:f6:
48:23:5b:b3:d5:29:ac:3d:7f:49:2c:20:f5:6b:10:
ec:83:e3:1a:46:0e:31:ac:62:86:f8:3a:aa:92:29:
44:b5:47:c9:a7:00:4e:53:e0:57:1a:c1:5a:39:bb:
f9:35:a5:88:18:c8:63:2d:6c:be:64:ef:94:a3:9b:
cc:5f:99:60:bc:a9:57:c5:0a:77:a1:9a:43:d5:a2:
9c:38:a7:a1:34:21:af:7f:e4:55:79:53:01:35:db:
de:51:a3:51:c0:d7:02:5b:09:21:44:16:f5:53:d0:
8d:93:77:32:ae:c9:aa:1f:a8:77:91:41:d6:8e:83:
d6:f4:2b:6b:32:f0:0e:45:fe:55:14:36:48:88:71:
27:12:0a:72:6e:72:0f:42:80:c2:63:11:bb:80:45:
ec:e6:38:3c:55:2c:ab:78:99:cb:06:35:e4:53:42:
3c:7d:e3:94:23:e2:75:c8:5d:c7:8f:26:9a:04:40:
7b:4c:4f:0c:9a:14:80:41:15:f8:81:18:40:03:70:
87:43:76:22:d8:c4:48:d6:e0:0c:6d:96:91:3c:4a:
06:40:45:4d:14:a3:d6:4b:3f:57:a7:f8:8e:82:d5:
57:5d:ca:35:e5:3b:55:6d:ef:fd:72:5c:12:b3:9d:
09:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:D9:E3:22:74:BA:EA:91:1D:C1:A5:59:47:66:30:C0:BD:DE:A8:BB
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363164303a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:61d0::/48
Signature Algorithm: sha256WithRSAEncryption
92:22:56:cc:6c:92:87:a6:3d:a1:b1:91:9b:25:b8:30:bb:ee:
f0:13:f7:bc:8f:01:07:d3:82:6c:82:66:c8:dc:df:53:35:4e:
73:31:c6:8e:8d:98:4c:53:1d:e2:62:3f:13:a9:dc:1c:93:ca:
66:0d:e8:78:d4:7c:41:be:d9:b0:c1:6d:cd:ac:d7:f6:6c:c7:
a7:a6:ef:b8:4c:08:2e:bf:d2:23:a6:bf:39:4f:f7:d5:39:ff:
eb:1b:25:97:63:64:5d:f6:d9:70:5c:b8:39:71:f3:61:8c:af:
38:96:b7:c1:71:c2:b2:1e:83:b3:a7:b7:d7:b6:0f:fa:3a:fd:
be:b6:ca:54:7b:26:d2:e0:eb:6c:87:5f:b2:df:40:9e:fa:fe:
3e:aa:15:c9:30:c7:8c:69:05:7f:ec:8e:8b:7e:f9:e3:a4:09:
e3:40:8c:73:3e:1b:e9:3f:03:fd:8b:df:5a:18:27:8c:91:6d:
f0:68:1c:7a:4a:ec:06:1b:59:f5:fe:29:d4:ac:b9:c0:d4:07:
ce:22:08:28:7a:4e:d0:dc:e1:0c:77:f9:1b:85:7b:88:2d:3c:
84:b7:75:dd:5a:8c:7d:bd:d8:d9:6a:2c:db:b5:1e:dc:0e:81:
75:ff:5e:c3:d4:5a:32:33:55:db:3a:29:c6:ba:80:ab:58:c5:
a3:68:da:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:49:38 2025 by rpki-client