Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363264303a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363264303a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: CaLASzNyX5ZXaxUBZzVDoZmum8EkIQ4HWkn7VfUuJSU=
Subject key identifier: 74:38:9F:AD:D0:66:55:DF:C3:AE:6A:1D:79:EC:71:00:16:15:A5:CE
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 408262DB3BE05DBD70E6D5DEA084ECD78C9FCB28
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363264303a3a2f34382d3438203d3e203136393039.roa
Signing time: Mon 30 Dec 2024 20:23:54 +0000
ROA not before: Mon 30 Dec 2024 20:18:54 +0000
ROA not after: Mon 29 Dec 2025 20:23:54 +0000
asID: 16909
IP address blocks: 2a14:7584:62d0::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 06 Jan 2025 20:19:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:82:62:db:3b:e0:5d:bd:70:e6:d5:de:a0:84:ec:d7:8c:9f:cb:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Dec 30 20:18:54 2024 GMT
Not After : Dec 29 20:23:54 2025 GMT
Subject: CN=74389FADD06655DFC3AE6A1D79EC71001615A5CE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:fe:68:77:da:e2:1b:f7:18:0b:64:04:4e:40:
8d:77:57:04:51:78:73:65:e1:d4:f4:31:94:da:78:
f8:95:e0:46:54:16:16:a4:3b:8d:09:6c:72:61:88:
f7:57:ef:ae:91:27:fb:8d:f7:a5:f1:42:e4:1f:8b:
a0:89:3e:90:25:ad:40:69:2c:04:71:92:b5:fe:e4:
bf:66:c6:5a:45:e5:32:0e:2f:61:97:20:8d:40:87:
07:08:4d:3c:6a:8e:ba:46:fe:20:89:5a:53:67:45:
c8:8f:6a:dd:87:99:b7:3e:88:07:43:72:61:ca:e0:
d3:0e:56:71:2b:0d:02:4c:52:2a:91:33:c3:93:2e:
c9:2e:f5:d6:ad:08:f6:de:69:bc:44:2a:38:ce:9f:
d7:c3:05:dc:68:57:41:ab:98:55:2a:fe:ae:8e:4b:
07:51:46:f3:74:91:3c:68:31:44:81:71:22:a9:8b:
1c:de:c3:31:27:23:6d:53:58:0c:d2:6a:3c:67:d9:
36:71:df:48:3f:ed:8e:9e:0c:12:80:5a:6a:a5:fb:
c6:d9:ab:bc:05:f8:e5:c6:c6:74:1e:ac:d6:cd:42:
c4:46:04:fc:8e:6e:b4:41:32:59:40:fb:e6:89:8b:
7b:7b:cd:0e:04:4c:fc:19:94:2e:13:e0:bd:e6:9a:
df:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:38:9F:AD:D0:66:55:DF:C3:AE:6A:1D:79:EC:71:00:16:15:A5:CE
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363264303a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:62d0::/48
Signature Algorithm: sha256WithRSAEncryption
22:4c:71:79:e7:14:41:d7:80:fe:88:0f:ad:e1:e5:16:70:f4:
a9:44:17:de:84:06:9f:e1:a2:eb:d9:96:70:f6:b6:79:82:6b:
10:06:32:c2:89:ed:d4:c1:44:dc:7f:4b:1c:aa:37:04:a5:2d:
50:1c:3c:e9:72:21:26:d8:b5:c0:bb:c8:3c:3c:2b:da:e6:fa:
8f:d8:03:9d:be:38:50:e9:54:e0:80:83:ad:17:b7:9d:a1:b3:
ea:fe:3f:33:1a:d7:58:94:2d:f2:9e:d2:ff:5f:9a:1a:87:c6:
bf:3c:91:a8:ee:97:64:e1:a1:93:52:92:ec:09:e2:b6:fe:0c:
46:82:96:df:5e:39:34:9d:a3:21:2d:59:86:62:91:fd:9d:51:
83:f7:76:d8:ef:2e:70:2c:2f:4f:f8:bb:5a:4d:89:5c:4b:ff:
6c:7c:c6:21:6e:35:97:12:f8:64:cc:5a:63:30:ff:f4:dd:31:
b1:28:da:91:87:79:02:9d:2a:e5:a0:22:52:64:f5:17:ad:67:
f3:6d:08:46:2c:9f:2d:40:91:f0:3c:c4:13:08:91:f7:1e:15:
2c:02:52:55:73:7f:9d:a9:e9:ec:d3:38:5b:bf:e9:46:52:67:
74:af:f8:ac:28:e7:48:72:77:87:f0:92:61:7d:54:03:91:85:
01:73:10:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:47:00 2025 by rpki-client