Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363236303a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363236303a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: OIy0gYU+NO5GxH0RxAOrqZtytFavEipSGbTFbHWqVac=
Subject key identifier: 01:34:F9:49:63:84:6E:5D:77:9C:D2:42:9E:70:38:96:17:A5:49:09
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 69C51E335892E276D3531ED0CC7E5730D6BCB296
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363236303a3a2f34382d3438203d3e203136393039.roa
Signing time: Mon 30 Dec 2024 20:23:12 +0000
ROA not before: Mon 30 Dec 2024 20:18:12 +0000
ROA not after: Mon 29 Dec 2025 20:23:12 +0000
asID: 16909
IP address blocks: 2a14:7584:6260::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 14 Jan 2025 14:23:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:c5:1e:33:58:92:e2:76:d3:53:1e:d0:cc:7e:57:30:d6:bc:b2:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Dec 30 20:18:12 2024 GMT
Not After : Dec 29 20:23:12 2025 GMT
Subject: CN=0134F94963846E5D779CD2429E70389617A54909
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:23:db:27:5e:b3:2f:f9:c1:85:76:ab:a3:d9:
c7:96:e3:12:4c:0f:7a:59:00:7d:a2:d7:0e:f3:cc:
1b:44:79:bc:30:ac:32:3c:f0:55:fd:2f:b0:ba:ce:
74:26:73:d4:20:8a:13:f3:7a:0c:f5:27:19:b5:50:
09:b6:4a:89:c5:d0:e8:f8:f9:ec:ef:4e:75:a2:44:
24:4d:58:18:50:33:61:b8:3f:9e:52:d0:93:e2:7c:
b7:89:79:a3:6d:80:a0:b8:db:f3:4c:bc:4c:1d:2b:
8f:54:85:c3:23:c6:dc:a3:93:46:7b:ed:81:1e:67:
99:43:33:27:77:e8:86:a3:2e:5a:19:5c:9c:07:1a:
d2:23:6b:07:4a:56:32:c9:b3:71:72:ea:94:a8:f4:
a2:e8:eb:d2:9e:81:35:65:ac:13:cc:dc:5d:4f:e3:
ab:ef:79:ea:94:c3:6e:b5:f0:fa:78:1c:82:a2:f0:
f1:31:ea:8f:f9:f7:ea:f6:04:7d:99:d7:db:05:1c:
90:72:a9:23:50:63:16:3f:8c:6a:2d:83:75:be:9e:
47:da:2c:54:e4:4d:2e:85:68:3a:9c:ec:f7:94:dd:
f6:29:a6:39:5b:ae:50:a1:5c:16:6b:c7:cd:38:4f:
cf:16:e0:77:0f:0c:a8:ec:de:15:a1:8e:85:76:16:
6e:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:34:F9:49:63:84:6E:5D:77:9C:D2:42:9E:70:38:96:17:A5:49:09
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363236303a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6260::/48
Signature Algorithm: sha256WithRSAEncryption
92:33:8f:c2:23:b9:90:c7:f3:f6:bc:ed:4a:54:25:d0:f4:ce:
c3:56:de:e8:bb:37:38:1b:92:74:f6:bc:cd:f8:b1:7f:75:3e:
d5:18:2f:4c:5d:28:24:c8:0d:8a:2a:6e:1f:a5:2e:fc:9f:59:
b3:b2:95:cc:db:42:d1:05:b2:d1:a5:7d:97:2a:e6:43:08:f2:
21:b6:da:28:29:5f:4f:eb:91:4f:f2:9d:14:5b:60:ad:45:a6:
1f:b8:fd:3c:2a:32:1d:47:45:4a:fb:36:ff:38:28:80:d7:37:
ba:90:28:22:00:89:44:4d:fc:c5:cf:d9:16:a2:05:60:36:d8:
de:dc:84:64:c4:9a:af:01:ab:e4:33:47:fb:20:8c:1f:00:f6:
92:ba:d3:c9:7d:ff:f4:bb:b5:c5:91:a4:ac:b0:63:91:e7:ef:
59:65:e6:ca:30:6a:fe:37:f1:9e:36:ec:ff:46:a5:68:38:59:
6a:ff:5c:b7:e5:fb:bd:54:02:26:89:b4:b7:b3:72:20:2d:53:
27:52:8f:69:62:5f:fc:67:67:8f:44:5b:14:25:28:02:0b:56:
3b:c7:7b:44:aa:ab:6e:21:28:90:3b:e7:86:f6:29:22:83:aa:
7c:f4:27:4e:72:f9:ec:18:b9:07:ac:aa:88:e4:1d:c4:ed:b3:
b5:a3:3b:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:50:25 2025 by rpki-client