Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363238303a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363238303a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: U7ZQ3An3vw9ltLVW8SngR16iEU2skD/v04k8feODLYQ=
Subject key identifier: 82:8F:8B:73:05:AA:B4:C2:DE:92:FB:54:FD:19:D8:E1:FE:80:DA:27
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 69EF085F4CA51E235E7A12CC0AF54E6140C70C5D
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363238303a3a2f34382d3438203d3e203136393039.roa
Signing time: Mon 30 Dec 2024 20:23:13 +0000
ROA not before: Mon 30 Dec 2024 20:18:13 +0000
ROA not after: Mon 29 Dec 2025 20:23:13 +0000
asID: 16909
IP address blocks: 2a14:7584:6280::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 14 Jan 2025 14:23:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:ef:08:5f:4c:a5:1e:23:5e:7a:12:cc:0a:f5:4e:61:40:c7:0c:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Dec 30 20:18:13 2024 GMT
Not After : Dec 29 20:23:13 2025 GMT
Subject: CN=828F8B7305AAB4C2DE92FB54FD19D8E1FE80DA27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:bf:22:b9:c1:5f:e8:46:cc:bf:d4:15:4b:55:
1a:c9:82:b9:a7:e4:74:fa:c3:a1:09:f8:bf:78:8a:
2a:d3:e1:7c:07:0b:64:9d:c6:ce:d0:02:55:38:ad:
b4:da:1e:35:84:15:25:98:52:97:78:28:02:4d:39:
bb:32:89:96:c2:c6:46:fe:c6:6f:ca:cc:14:06:da:
fc:31:6a:b6:eb:07:d6:2e:e6:4e:2e:9b:00:57:b4:
44:0f:8a:0f:c7:b3:76:50:8e:de:82:82:eb:ab:da:
06:74:3e:e4:9c:3d:c9:a0:f2:1f:14:80:75:60:b7:
6e:b2:a9:a9:96:b7:e7:ff:37:80:c4:75:a2:21:a8:
4a:c9:4b:d4:10:4e:62:e6:0f:ad:7e:08:98:37:da:
ba:85:ca:13:a1:0d:41:33:b9:7d:bc:3a:ab:68:73:
b9:51:26:6a:e7:4e:87:0d:72:10:4a:60:64:71:6f:
6d:86:54:e2:8b:9e:e5:26:89:22:f6:19:26:1f:c7:
8b:f2:e0:9d:ec:48:f5:92:0d:cf:18:a8:e6:23:ae:
ac:54:7c:31:5f:51:c1:7b:2a:23:76:47:be:5b:2d:
9a:15:ee:81:fe:25:87:ad:96:94:f0:46:6b:a3:f2:
f2:23:2a:ff:71:08:4d:7d:34:79:84:3d:f4:27:55:
e3:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:8F:8B:73:05:AA:B4:C2:DE:92:FB:54:FD:19:D8:E1:FE:80:DA:27
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363238303a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6280::/48
Signature Algorithm: sha256WithRSAEncryption
66:d4:2b:33:c3:1d:2c:95:14:76:75:a1:9f:ab:f2:13:1c:99:
5a:0a:52:95:41:0d:77:d9:52:41:4b:79:93:b6:f5:ac:bc:5b:
98:99:d7:9c:75:82:7b:c3:39:6f:b7:91:f8:48:f4:58:e5:f2:
af:16:a0:3c:55:17:80:50:f8:df:67:98:96:99:c4:1b:4f:ad:
26:d3:2b:e2:75:f1:1a:65:c4:0c:20:be:bd:cb:53:cc:14:70:
89:74:5b:a5:2e:d3:33:94:04:58:96:8c:fd:97:63:01:7d:e1:
2c:d5:e3:7f:c0:3c:b1:34:ff:0e:10:5e:79:dc:5d:1d:99:ec:
c5:82:d1:82:80:b7:f3:6b:59:c2:9b:0a:74:6b:7b:70:2e:ad:
8f:f6:f1:b7:39:b8:5d:2d:40:39:d7:d2:e1:a1:3d:00:9c:8a:
b5:39:ec:15:5e:48:cf:a7:e5:19:e3:e1:67:f4:48:51:f1:bf:
f5:f0:96:05:0c:be:2a:c2:42:8e:32:32:f1:8d:56:08:d9:d1:
c9:50:ba:d5:48:5c:54:fd:d5:a1:5f:f5:43:2d:24:43:ce:dd:
15:29:56:87:76:a0:ab:ed:9c:0f:d0:34:ef:76:0c:c0:32:a7:
ea:e3:76:9d:33:14:d1:a5:8a:b2:96:04:17:fe:87:d9:84:31:
a8:62:f1:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:50:35 2025 by rpki-client