Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363232303a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363232303a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: 2Zgj8SUeuIV4ItMRqWJP4jA5gn95A54g3X6yrAEY7G4=
Subject key identifier: 93:BE:14:2F:2B:C5:5A:B7:E3:72:58:83:B5:C9:59:79:8C:98:B6:C1
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 24DEE95D281AD8D33AF690389E98412E11FF3208
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363232303a3a2f34382d3438203d3e203136393039.roa
Signing time: Mon 30 Dec 2024 20:23:10 +0000
ROA not before: Mon 30 Dec 2024 20:18:10 +0000
ROA not after: Mon 29 Dec 2025 20:23:10 +0000
asID: 16909
IP address blocks: 2a14:7584:6220::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 06 Jan 2025 20:19:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:de:e9:5d:28:1a:d8:d3:3a:f6:90:38:9e:98:41:2e:11:ff:32:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Dec 30 20:18:10 2024 GMT
Not After : Dec 29 20:23:10 2025 GMT
Subject: CN=93BE142F2BC55AB7E3725883B5C959798C98B6C1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a9:7d:c3:bc:fd:a0:11:6b:22:c7:54:ba:db:
bc:5e:d6:ee:e5:2a:58:5b:83:92:7d:ed:f2:12:2d:
2c:0b:35:24:4b:81:52:f7:79:e5:ee:f7:f0:ec:b0:
d9:fb:ee:49:59:e4:92:51:4c:eb:f1:24:d8:ec:69:
96:15:b2:5c:a1:2e:8a:e7:bc:9e:cc:10:5b:37:b4:
48:55:d6:c7:90:4f:d8:9f:ba:d0:2c:eb:dd:d8:44:
6e:ba:65:cf:f1:e8:6d:03:4c:12:dd:6b:1f:26:04:
e9:bb:e2:c5:1e:44:af:c3:fe:10:31:5c:5b:b0:f3:
ac:35:ac:65:79:74:6f:9d:ac:e5:9b:a8:ae:f0:2e:
45:5c:83:97:f8:27:5a:ba:33:46:f1:6d:d8:42:32:
f6:17:1b:a0:8d:60:aa:da:3b:73:20:e3:f6:2c:6d:
69:e1:4f:22:d0:cb:21:6e:a6:4b:f5:6d:d4:12:11:
09:94:21:10:18:d2:d1:a4:96:32:a0:19:ea:ca:a9:
57:26:f5:e4:cb:c4:d4:2b:bc:eb:97:21:8d:85:f6:
d2:62:1b:e4:c7:2c:c1:a0:f1:78:f0:88:43:9e:4f:
63:fc:22:dd:96:64:58:a7:d2:be:a9:08:33:9b:9c:
80:33:32:4d:c3:af:59:f1:ac:c7:c9:a1:ec:35:e3:
cd:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:BE:14:2F:2B:C5:5A:B7:E3:72:58:83:B5:C9:59:79:8C:98:B6:C1
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363232303a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6220::/48
Signature Algorithm: sha256WithRSAEncryption
9a:ba:ee:85:f1:be:54:fb:2c:9e:b6:88:20:08:16:20:dc:5d:
32:09:15:53:27:60:46:75:6f:81:fa:72:c5:c2:b5:24:28:78:
5b:4c:8f:b4:79:2e:ba:60:0c:68:7e:8d:98:46:a7:d2:4a:c8:
76:10:62:50:85:60:1b:4b:19:ca:f7:ca:02:52:04:ee:b8:03:
2c:0f:be:d7:a9:47:8d:2d:94:ef:31:d3:63:ae:c3:ac:a2:af:
c5:f4:d0:39:e8:92:10:11:b0:8a:74:77:28:a8:77:e2:04:8e:
cb:ce:7f:31:da:c6:35:98:f2:e5:6c:b8:0f:ef:c1:44:b4:d5:
23:f2:8a:a5:53:7e:1e:58:9c:c6:db:c9:e5:0b:91:12:a4:39:
68:15:26:6b:12:4a:5e:e3:91:f0:77:85:81:30:00:8d:91:58:
5d:1a:75:a2:26:bf:99:fc:fe:0a:84:4b:fd:8a:ba:f0:73:ed:
cb:44:7c:a9:ea:34:48:47:c6:93:ea:89:fb:77:35:79:05:3e:
96:30:36:27:d9:10:54:93:e7:4c:51:36:c5:b8:9e:a2:40:04:
29:7c:11:ad:fb:df:4c:07:82:62:99:dc:72:73:e7:6c:eb:c3:
64:05:c1:bf:23:b1:a7:8b:8d:3f:4f:7e:26:e2:64:79:9b:9a:
b8:a2:b5:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:45:04 2025 by rpki-client