Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363165303a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363165303a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: t2TH75Xe9+bXxslxvPTjQFeNkDTKRkwEphXerZZJR/E=
Subject key identifier: C8:C6:85:6D:9E:42:8B:F7:40:EC:7D:2D:14:EA:71:80:B0:0F:A8:3F
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 1B8881DAD96C0E893EC4D264566470DB4755CB6D
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363165303a3a2f34382d3438203d3e203136393039.roa
Signing time: Mon 30 Dec 2024 20:21:44 +0000
ROA not before: Mon 30 Dec 2024 20:16:44 +0000
ROA not after: Mon 29 Dec 2025 20:21:44 +0000
asID: 16909
IP address blocks: 2a14:7584:61e0::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 14 Jan 2025 14:23:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:88:81:da:d9:6c:0e:89:3e:c4:d2:64:56:64:70:db:47:55:cb:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Dec 30 20:16:44 2024 GMT
Not After : Dec 29 20:21:44 2025 GMT
Subject: CN=C8C6856D9E428BF740EC7D2D14EA7180B00FA83F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:26:a7:20:cb:05:3d:34:dc:25:32:08:dd:05:
50:82:57:87:4c:21:7b:fd:79:34:a9:98:dc:4d:7b:
f3:5c:d0:2f:45:8f:41:eb:f5:af:63:58:34:57:ad:
eb:b2:69:25:d8:3e:76:d9:27:ce:9c:ad:e3:76:60:
b0:be:69:17:23:56:10:ea:09:7d:2b:b0:82:74:5a:
89:2f:de:3b:00:3b:d2:b8:ce:04:26:2f:1e:ae:13:
26:9e:19:4f:3e:27:91:cb:5d:e3:b2:e4:10:7c:a1:
66:3b:22:b7:0f:9b:9a:69:a6:d3:ed:47:ec:79:0f:
fa:5b:a8:87:53:bc:e1:c4:bc:fa:e4:d4:8d:2e:d7:
ef:40:40:05:0a:48:ac:a4:5c:c0:05:0f:2c:8b:80:
c0:fb:b4:96:87:69:40:fb:76:dc:0f:aa:4c:81:48:
f6:20:8f:7d:e4:6e:15:9a:cf:23:6c:2d:28:f9:2b:
68:6e:b6:5e:4f:14:fc:b1:ff:db:e9:1d:58:5a:fd:
28:17:e3:78:fe:f2:3a:4c:6f:4b:42:b2:3d:9a:b0:
18:5b:0c:df:e3:fc:67:e3:4e:f4:41:ce:44:4c:de:
4b:8a:b2:e7:51:d8:27:d9:9f:f9:77:23:ed:eb:39:
4d:9b:c9:52:a8:4f:a6:a4:db:7c:53:01:7b:01:a5:
4e:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:C6:85:6D:9E:42:8B:F7:40:EC:7D:2D:14:EA:71:80:B0:0F:A8:3F
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363165303a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:61e0::/48
Signature Algorithm: sha256WithRSAEncryption
45:39:cb:cf:8e:db:37:4c:c0:fc:8f:bd:56:ba:12:01:90:aa:
e2:7a:f7:3c:71:b2:15:a8:a8:82:28:be:2f:a5:d3:91:a1:4e:
ad:d5:41:f0:10:e2:dc:f8:b9:7c:09:ff:cf:da:65:3b:f2:50:
d7:9b:da:e1:c1:1d:fd:c8:d4:29:df:f7:50:b2:2c:bd:44:da:
d3:c5:c1:05:f8:95:48:80:8d:7e:dc:e2:c7:1b:c2:6d:46:09:
72:73:15:60:00:65:67:16:63:6f:7f:9f:b9:3a:50:d2:3c:69:
fd:1c:8a:77:be:6d:58:aa:62:0d:8f:da:52:67:44:70:b5:4e:
19:aa:61:65:59:02:4b:92:26:64:a5:ea:30:aa:be:9b:32:80:
2e:29:19:04:7e:a8:3b:b7:86:17:b0:e9:ef:ba:f0:64:1a:34:
87:41:3c:62:fd:2f:f1:fa:09:3b:c7:de:07:e0:49:a6:83:31:
2a:ce:7b:13:f9:36:fd:ca:3f:b6:4b:bb:25:77:dc:74:4a:3c:
19:c9:e9:40:c9:94:56:e3:d2:16:84:a3:48:9d:7c:bc:f2:b8:
c2:ab:fe:b5:5d:e3:c5:6e:d1:b1:45:78:00:39:ea:cc:07:7a:
40:42:c6:80:d2:ff:ec:d0:a9:f9:f4:f9:d6:ab:3a:69:4c:ba:
41:52:e7:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:49:35 2025 by rpki-client