Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363234303a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363234303a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: Y//JC0V0LhcqfUBDMy78V0YeZl/oYiRABcPBULqqzz8=
Subject key identifier: 9D:B1:F5:B2:AA:36:29:8A:3A:B7:8D:CE:EE:96:DA:05:52:39:57:16
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 2EEF0234C932D76E6F361A6A9A9C827DE20377B2
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363234303a3a2f34382d3438203d3e203136393039.roa
Signing time: Mon 30 Dec 2024 20:23:11 +0000
ROA not before: Mon 30 Dec 2024 20:18:11 +0000
ROA not after: Mon 29 Dec 2025 20:23:11 +0000
asID: 16909
IP address blocks: 2a14:7584:6240::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 06 Jan 2025 20:19:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:ef:02:34:c9:32:d7:6e:6f:36:1a:6a:9a:9c:82:7d:e2:03:77:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Dec 30 20:18:11 2024 GMT
Not After : Dec 29 20:23:11 2025 GMT
Subject: CN=9DB1F5B2AA36298A3AB78DCEEE96DA0552395716
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:06:15:11:5f:b8:aa:3d:b3:f7:d7:a1:1d:9f:
b7:66:94:5d:f2:5c:21:60:a4:91:19:d4:6d:de:ad:
2b:e7:6c:a1:d7:5f:a9:68:f1:34:64:8f:19:fc:eb:
85:18:0d:da:70:88:ef:a9:b4:a8:64:d3:32:a3:d0:
af:5d:37:6a:c6:1e:ca:6d:a8:fb:80:17:01:cb:7b:
70:49:e4:7b:5c:ef:78:74:53:35:24:0f:a6:c7:28:
b5:a1:24:a8:93:5b:94:d1:34:5b:42:a4:2c:b1:ed:
89:53:bf:26:e2:33:55:03:f2:91:d2:cb:24:28:63:
a9:02:b4:d1:da:f3:d6:44:fd:a9:bb:b0:e3:b6:b7:
3a:f5:c4:d9:22:5a:e1:73:1a:7d:fb:df:71:35:86:
fa:39:9c:1f:d1:ad:85:ce:d7:51:e9:88:a4:27:c1:
16:16:eb:4b:e5:36:20:27:61:a4:2c:a6:b7:b1:37:
cd:e0:af:be:eb:6a:da:53:a8:42:b6:5d:1d:17:9e:
d8:bb:72:0a:fa:c3:6b:b8:b6:92:0f:17:05:fb:a3:
3e:0e:76:15:9a:a9:ce:69:93:8b:7d:19:53:4d:7d:
9c:23:73:54:70:f3:4d:01:1f:10:97:d1:b3:46:af:
c0:7a:65:6f:cb:8b:c9:98:04:97:85:77:11:d3:8e:
e0:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:B1:F5:B2:AA:36:29:8A:3A:B7:8D:CE:EE:96:DA:05:52:39:57:16
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363234303a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6240::/48
Signature Algorithm: sha256WithRSAEncryption
98:42:88:30:66:65:99:40:4f:2e:c2:43:49:79:87:b6:2d:85:
88:c8:93:31:89:44:4d:1a:78:c6:15:17:b7:8a:17:6c:11:77:
39:7a:d9:16:27:03:59:ad:6f:57:fc:ac:d9:90:77:ab:52:02:
6f:af:bb:f6:11:36:df:6c:7d:85:67:71:37:21:5c:5b:91:fe:
1a:73:13:08:45:ea:b5:6b:30:31:0b:55:d8:08:79:8d:7e:f4:
b1:40:a8:96:4c:43:25:bb:7d:81:2c:7c:6b:c1:a9:4d:f1:a3:
ad:8c:73:42:06:91:1f:f9:06:73:1a:69:b5:e2:df:28:06:a2:
1c:05:76:a6:77:99:42:0b:a0:86:b2:fe:53:a0:34:d5:a8:e6:
10:d5:40:bf:96:f5:ec:fe:d3:b9:53:af:48:d0:5d:d9:4c:15:
88:3d:e8:6b:05:65:d5:4a:96:85:c0:fb:38:da:bd:d4:56:45:
f8:0e:c5:33:33:68:b9:eb:20:96:d3:ab:1b:25:80:3b:e6:40:
1a:83:90:fc:42:9d:c1:d8:22:ae:fc:17:53:6c:08:66:25:26:
3b:46:b1:7e:67:70:d1:17:25:bf:46:88:f5:99:fc:0c:b9:2d:
cd:98:87:7b:ae:63:77:cb:32:00:7f:ea:a8:12:65:e6:7d:51:
f6:52:02:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:50:25 2025 by rpki-client