Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363266303a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363266303a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: Sde0C06NYJJDa/xxWFZN44jgWONeHVDiJRylT57+voo=
Subject key identifier: EE:A3:60:B7:75:8C:40:57:5B:C0:C8:B1:94:0B:6C:13:54:D8:FE:19
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 4E6CCEC9ABC90E7BF40E8613CBA80AF55FD41911
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363266303a3a2f34382d3438203d3e203136393039.roa
Signing time: Mon 30 Dec 2024 20:23:56 +0000
ROA not before: Mon 30 Dec 2024 20:18:56 +0000
ROA not after: Mon 29 Dec 2025 20:23:56 +0000
asID: 16909
IP address blocks: 2a14:7584:62f0::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 14 Jan 2025 14:23:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:6c:ce:c9:ab:c9:0e:7b:f4:0e:86:13:cb:a8:0a:f5:5f:d4:19:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Dec 30 20:18:56 2024 GMT
Not After : Dec 29 20:23:56 2025 GMT
Subject: CN=EEA360B7758C40575BC0C8B1940B6C1354D8FE19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:63:41:b5:90:dd:e8:a8:70:72:1d:9d:e6:ce:
09:ce:5d:e5:14:56:45:fa:93:ef:e7:44:63:4c:f9:
e1:97:b7:09:3d:9d:9f:10:90:c6:15:11:29:b9:73:
50:ca:98:03:ce:c5:49:cc:86:ee:3b:c4:86:bf:b3:
16:1f:20:06:bc:c8:ec:a4:6f:b5:44:66:a1:dc:49:
5a:1c:62:01:d5:71:29:53:90:8a:ec:39:7c:f0:0d:
d5:3a:a6:5a:7c:a9:06:f6:f6:17:06:38:23:9c:e0:
04:c8:73:21:a3:a5:26:6a:7c:c0:49:36:56:76:82:
f6:fc:2f:f8:93:38:a8:9b:86:15:93:89:ce:1c:87:
fc:8a:d4:2f:54:b1:17:b7:1d:5b:ce:42:79:52:1a:
18:9a:4f:1a:7b:21:69:19:88:b0:d7:30:9f:36:43:
a3:93:23:42:6d:3c:01:66:a5:ca:ed:88:06:58:33:
c4:23:63:8c:d5:03:bf:c7:4c:0d:2f:c9:16:04:4a:
9c:74:ef:0f:ee:ae:f9:ed:7d:f7:7f:62:77:40:0b:
00:44:fc:83:dd:b2:6f:83:11:bc:b0:26:94:b4:26:
bf:48:1e:cd:2c:04:ec:9c:8c:fa:1f:11:27:65:1c:
44:e1:5e:04:d4:43:42:e1:ef:77:16:3d:ef:3b:df:
f7:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:A3:60:B7:75:8C:40:57:5B:C0:C8:B1:94:0B:6C:13:54:D8:FE:19
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363266303a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:62f0::/48
Signature Algorithm: sha256WithRSAEncryption
10:5a:d7:7f:3c:14:d6:f6:0c:46:e1:6e:41:e9:6b:75:ae:22:
1b:85:0b:c5:a6:1c:59:c6:eb:06:28:46:eb:b7:90:e9:02:3e:
2a:81:94:d9:69:8c:8c:0b:09:2b:d2:b1:0f:c3:1a:94:a5:0f:
1c:fd:83:27:3c:ec:47:b2:d6:b5:d0:da:e5:2c:9a:5e:0a:fd:
4b:46:c8:d5:12:4c:ca:d7:56:04:aa:8e:4c:2d:85:98:93:b4:
94:b8:dc:0e:a2:56:54:38:8d:e3:0f:05:ea:02:b4:8a:b3:b1:
c4:71:ea:62:94:56:0a:95:df:b7:c9:19:06:a4:d6:1d:5b:df:
d6:34:c7:bc:d2:ca:f4:34:69:22:4f:61:d8:6c:9c:a4:66:13:
c2:59:6c:2b:7c:28:a6:2b:dd:dc:35:e3:9e:e0:09:47:e4:4b:
71:33:57:75:25:cf:ae:2a:cb:76:5a:7c:b0:d1:2a:42:92:04:
b3:1b:2f:1c:a6:a3:26:b9:82:0c:74:13:9a:73:e9:6c:2c:96:
a1:3a:73:e2:9c:9c:b3:46:0b:d9:91:0f:bb:8e:62:f0:27:5b:
4a:b8:37:55:cd:2a:e9:e3:46:be:3a:87:3a:0a:fb:52:5c:67:
9b:27:83:ef:5a:cc:97:3a:cd:04:da:4b:d9:54:7a:b1:07:7d:
ae:6f:13:49
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUTmzOyavJDnv0DoYTy6gK9V/UGREwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NCMjZGNzY0MkZENkI0Q0JGMzVGQkVFNDU1RjFFRkIw
QzlGMEE0NTAeFw0yNDEyMzAyMDE4NTZaFw0yNTEyMjkyMDIzNTZaMDMxMTAvBgNV
BAMTKEVFQTM2MEI3NzU4QzQwNTc1QkMwQzhCMTk0MEI2QzEzNTREOEZFMTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiY0G1kN3oqHByHZ3mzgnOXeUU
VkX6k+/nRGNM+eGXtwk9nZ8QkMYVESm5c1DKmAPOxUnMhu47xIa/sxYfIAa8yOyk
b7VEZqHcSVocYgHVcSlTkIrsOXzwDdU6plp8qQb29hcGOCOc4ATIcyGjpSZqfMBJ
NlZ2gvb8L/iTOKibhhWTic4ch/yK1C9UsRe3HVvOQnlSGhiaTxp7IWkZiLDXMJ82
Q6OTI0JtPAFmpcrtiAZYM8QjY4zVA7/HTA0vyRYESpx07w/urvntffd/YndACwBE
/IPdsm+DEbywJpS0Jr9IHs0sBOycjPofESdlHEThXgTUQ0Lh73cWPe873/cDAgMB
AAGjggJoMIICZDAdBgNVHQ4EFgQU7qNgt3WMQFdbwMixlAtsE1TY/hkwHwYDVR0j
BBgwFoAUfLJvdkL9a0y/NfvuRV8e+wyfCkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMS83Q0IyNkY3NjQy
RkQ2QjRDQkYzNUZCRUU0NTVGMUVGQjBDOUYwQTQ1LmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdm
MzgyNC8wLzdDQjI2Rjc2NDJGRDZCNENCRjM1RkJFRTQ1NUYxRUZCMEM5RjBBNDUu
Y2VyMIGqBggrBgEFBQcBCwSBnTCBmjCBlwYIKwYBBQUHMAuGgYpyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMS8zMjYxMzEzNDNhMzczNTM4MzQzYTM2MzI2NjMwM2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzEzNjM5MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoUdYRi8DAN
BgkqhkiG9w0BAQsFAAOCAQEAEFrXfzwU1vYMRuFuQelrda4iG4ULxaYcWcbrBihG
67eQ6QI+KoGU2WmMjAsJK9KxD8MalKUPHP2DJzzsR7LWtdDa5SyaXgr9S0bI1RJM
ytdWBKqOTC2FmJO0lLjcDqJWVDiN4w8F6gK0irOxxHHqYpRWCpXft8kZBqTWHVvf
1jTHvNLK9DRpIk9h2GycpGYTwllsK3wopivd3DXjnuAJR+RLcTNXdSXPrirLdlp8
sNEqQpIEsxsvHKajJrmCDHQTmnPpbCyWoTpz4pycs0YL2ZEPu45i8CdbSrg3Vc0q
6eNGvjqHOgr7UlxnmyeD71rMlzrNBNpL2VR6sQd9rm8TSQ==
-----END CERTIFICATE-----
Generated at Sat Apr 19 00:50:36 2025 by rpki-client