Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363263303a3a2f34342d3438203d3e203136393039.roa
File: 326131343a373538343a363263303a3a2f34342d3438203d3e203136393039.roa (raw, json)
Hash identifier: GmwD4ZePXFJv3vQcwRcOzvqIUc7f3JfumNiWqQFyfLg=
Subject key identifier: F1:B9:60:56:00:72:7D:C7:31:B3:0A:A8:E8:CA:1E:FE:ED:D8:FE:BB
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 1AB7DFA95E80CB55677485584470067491BECA60
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363263303a3a2f34342d3438203d3e203136393039.roa
Signing time: Thu 19 Dec 2024 14:32:16 +0000
ROA not before: Thu 19 Dec 2024 14:27:16 +0000
ROA not after: Thu 18 Dec 2025 14:32:16 +0000
asID: 16909
IP address blocks: 2a14:7584:62c0::/44 maxlen: 48
Validation: Failed, certificate revoked on Thu 19 Dec 2024 20:02:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:b7:df:a9:5e:80:cb:55:67:74:85:58:44:70:06:74:91:be:ca:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Dec 19 14:27:16 2024 GMT
Not After : Dec 18 14:32:16 2025 GMT
Subject: CN=F1B9605600727DC731B30AA8E8CA1EFEEDD8FEBB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:c5:6e:e9:b1:1d:2c:3a:3e:43:a9:b4:af:c9:
d0:03:bb:d0:4d:6f:9a:d3:d0:51:a6:a2:91:24:d8:
25:45:1a:20:ff:8f:bd:ea:82:0e:43:80:76:25:5d:
a0:03:70:d1:6a:ba:98:25:f3:49:da:91:0d:e8:67:
7c:57:81:0b:21:f4:ca:df:94:43:2e:f7:e9:f3:04:
4f:b9:4c:9f:0f:2f:2a:24:61:a8:e6:9d:47:5c:53:
12:74:9c:e0:07:25:de:f5:5d:a8:34:f5:9f:ad:c2:
24:4c:43:a0:ed:ee:23:cd:e2:1f:de:4c:eb:56:1f:
01:58:1b:5d:ea:29:b1:7b:a1:71:55:2b:a3:06:8c:
fe:c9:03:91:25:64:32:b7:59:bf:03:75:c9:44:f7:
ed:ea:b9:2f:23:a1:61:1d:05:4d:82:1b:c0:a0:9e:
16:35:2b:d4:bc:9a:66:bf:0d:97:f0:35:3e:24:1c:
a5:8e:4a:c8:b9:d7:f4:35:14:53:15:6f:75:48:de:
df:d6:a4:1b:9f:d1:9d:55:ea:07:81:c6:85:47:97:
92:90:dd:4f:73:94:f2:e9:6f:c4:ba:60:5b:59:7a:
88:23:43:47:9a:f0:bb:3c:14:e9:e7:d6:74:78:31:
ef:ec:54:bb:2e:91:b1:6b:4e:08:dc:9d:35:a7:58:
cf:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:B9:60:56:00:72:7D:C7:31:B3:0A:A8:E8:CA:1E:FE:ED:D8:FE:BB
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363263303a3a2f34342d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:62c0::/44
Signature Algorithm: sha256WithRSAEncryption
9e:6b:77:f9:c5:ad:67:e7:dd:9e:cf:62:4e:aa:e2:8e:a0:ea:
eb:3b:e6:e0:20:24:24:73:e7:81:d4:cb:b0:3f:75:9d:f3:35:
13:42:2d:87:ff:05:d1:ef:6d:ef:a4:87:6b:9b:e9:83:e8:86:
b6:97:d5:01:14:01:df:5a:62:63:e3:80:e3:cc:82:77:d2:b1:
99:81:ad:11:49:06:c4:1f:07:cb:36:53:0e:ad:b5:6a:f3:9e:
f3:e2:74:c7:3d:49:71:6a:59:fc:e8:82:a6:20:78:53:35:1f:
5e:39:d9:d3:07:0e:03:ca:3a:c4:7e:ce:05:67:11:57:e8:63:
cf:80:1c:68:f3:ab:10:bb:d5:02:65:86:ca:f5:d6:d3:0d:38:
3d:84:79:91:8a:09:93:d2:a7:08:ec:5b:46:64:75:03:00:24:
5e:21:d7:30:fb:8a:bd:47:31:c5:c9:5b:9d:3a:da:fb:8b:2e:
7c:b2:bf:c1:d9:65:14:c8:85:85:f9:5e:82:b7:c5:5f:2c:81:
52:be:f8:54:ae:28:6b:cf:69:98:a2:72:f0:3e:98:b0:45:01:
62:b5:fe:cc:26:5a:24:c7:55:85:ba:b8:c3:b8:47:a1:6f:e6:
c1:a3:9a:52:36:0c:74:5d:5a:b2:09:41:08:41:a8:39:a8:46:
08:b3:37:78
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUGrffqV6Ay1VndIVYRHAGdJG+ymAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NCMjZGNzY0MkZENkI0Q0JGMzVGQkVFNDU1RjFFRkIw
QzlGMEE0NTAeFw0yNDEyMTkxNDI3MTZaFw0yNTEyMTgxNDMyMTZaMDMxMTAvBgNV
BAMTKEYxQjk2MDU2MDA3MjdEQzczMUIzMEFBOEU4Q0ExRUZFRUREOEZFQkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCNxW7psR0sOj5DqbSvydADu9BN
b5rT0FGmopEk2CVFGiD/j73qgg5DgHYlXaADcNFqupgl80nakQ3oZ3xXgQsh9Mrf
lEMu9+nzBE+5TJ8PLyokYajmnUdcUxJ0nOAHJd71Xag09Z+twiRMQ6Dt7iPN4h/e
TOtWHwFYG13qKbF7oXFVK6MGjP7JA5ElZDK3Wb8DdclE9+3quS8joWEdBU2CG8Cg
nhY1K9S8mma/DZfwNT4kHKWOSsi51/Q1FFMVb3VI3t/WpBuf0Z1V6geBxoVHl5KQ
3U9zlPLpb8S6YFtZeogjQ0ea8Ls8FOnn1nR4Me/sVLsukbFrTgjcnTWnWM/ZAgMB
AAGjggJoMIICZDAdBgNVHQ4EFgQU8blgVgByfccxswqo6Moe/u3Y/rswHwYDVR0j
BBgwFoAUfLJvdkL9a0y/NfvuRV8e+wyfCkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMS83Q0IyNkY3NjQy
RkQ2QjRDQkYzNUZCRUU0NTVGMUVGQjBDOUYwQTQ1LmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdm
MzgyNC8wLzdDQjI2Rjc2NDJGRDZCNENCRjM1RkJFRTQ1NUYxRUZCMEM5RjBBNDUu
Y2VyMIGqBggrBgEFBQcBCwSBnTCBmjCBlwYIKwYBBQUHMAuGgYpyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMS8zMjYxMzEzNDNhMzczNTM4MzQzYTM2MzI2MzMwM2EzYTJm
MzQzNDJkMzQzODIwM2QzZTIwMzEzNjM5MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBCoUdYRiwDAN
BgkqhkiG9w0BAQsFAAOCAQEAnmt3+cWtZ+fdns9iTqrijqDq6zvm4CAkJHPngdTL
sD91nfM1E0Ith/8F0e9t76SHa5vpg+iGtpfVARQB31piY+OA48yCd9KxmYGtEUkG
xB8HyzZTDq21avOe8+J0xz1JcWpZ/OiCpiB4UzUfXjnZ0wcOA8o6xH7OBWcRV+hj
z4AcaPOrELvVAmWGyvXW0w04PYR5kYoJk9KnCOxbRmR1AwAkXiHXMPuKvUcxxclb
nTra+4sufLK/wdllFMiFhflegrfFXyyBUr74VK4oa89pmKJy8D6YsEUBYrX+zCZa
JMdVhbq4w7hHoW/mwaOaUjYMdF1asglBCEGoOahGCLM3eA==
-----END CERTIFICATE-----
Generated at Sat Apr 19 00:46:08 2025 by rpki-client