Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363331303a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363331303a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: u5DKInAjMqLmN2KiIXZOal7lym153qu/Od0w1rHA430=
Subject key identifier: BF:4D:D3:90:E9:72:45:D6:7B:CE:18:8C:95:85:59:CC:D3:51:8B:0A
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 5DCA2AB74D425A42BC6D1C97A165AB262CE74D95
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363331303a3a2f34382d3438203d3e203136393039.roa
Signing time: Mon 30 Dec 2024 20:23:58 +0000
ROA not before: Mon 30 Dec 2024 20:18:58 +0000
ROA not after: Mon 29 Dec 2025 20:23:58 +0000
asID: 16909
IP address blocks: 2a14:7584:6310::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 14 Jan 2025 14:23:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:ca:2a:b7:4d:42:5a:42:bc:6d:1c:97:a1:65:ab:26:2c:e7:4d:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Dec 30 20:18:58 2024 GMT
Not After : Dec 29 20:23:58 2025 GMT
Subject: CN=BF4DD390E97245D67BCE188C958559CCD3518B0A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:76:19:16:fd:bc:cc:38:9e:da:72:ea:44:39:
b1:d4:8d:c8:00:fc:65:a4:ac:c4:60:48:7b:6b:42:
ec:5d:b6:77:ea:66:7a:3f:8c:d9:f3:bc:19:c0:10:
ae:6e:8e:92:8a:c3:aa:09:c2:eb:bd:ad:07:a4:7a:
59:f7:dc:8f:74:cb:e7:f4:09:f8:69:33:34:3c:1d:
59:59:47:ad:e4:78:e7:16:7e:a3:3e:96:52:d0:bb:
39:72:9e:70:fc:7b:8b:b0:d6:4a:f8:18:16:74:fb:
14:89:1d:42:ab:8d:57:78:9f:bc:1c:86:bd:53:20:
8c:90:a2:07:95:15:cf:6a:84:33:cf:8d:aa:13:73:
00:7e:c0:e5:ad:4b:a2:9f:ec:f4:a1:0b:a9:b9:69:
d9:2d:52:f0:73:c2:e3:e7:3e:59:19:7c:97:d3:82:
e2:76:34:04:56:d4:ea:87:49:f3:fc:7e:14:c3:42:
b5:cb:5d:51:bc:72:5a:f1:77:94:a0:37:6e:0f:98:
86:bd:2c:7b:76:fb:48:a1:35:3a:30:48:32:94:1d:
7b:48:3b:1b:8a:73:28:93:f5:04:9b:36:00:30:d7:
2a:2f:0e:92:d3:6d:4f:b1:bc:a2:d2:47:50:1a:05:
0c:ba:c7:49:91:ce:4f:b5:76:63:bc:bc:15:04:4f:
00:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:4D:D3:90:E9:72:45:D6:7B:CE:18:8C:95:85:59:CC:D3:51:8B:0A
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363331303a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6310::/48
Signature Algorithm: sha256WithRSAEncryption
2c:54:13:c2:1f:be:26:9b:12:92:43:37:e2:55:46:e1:6b:3d:
8d:24:c1:35:4c:ad:d9:b1:af:e1:2b:eb:b5:d9:da:ac:50:2a:
e4:88:88:a8:59:43:18:05:60:52:58:65:19:0c:7e:33:f9:cf:
e1:20:3f:98:a9:f7:dc:14:40:9d:2b:be:8c:4c:ee:4d:e5:8f:
02:b1:d0:ba:1e:71:b5:45:a7:a5:58:56:1f:02:dc:af:63:b0:
6b:6e:c6:a7:a1:b5:dd:2a:0c:94:3b:bb:8a:85:12:ba:a0:ad:
a8:1c:2d:e7:bd:9b:b1:10:30:02:bb:74:86:82:28:77:2b:11:
7e:09:07:44:77:44:11:15:10:c4:2b:22:3c:24:9b:c7:8a:6d:
a0:30:0f:78:4c:d3:36:3c:04:eb:23:29:14:32:96:4c:0f:f3:
86:ac:a9:ab:70:03:a8:53:f9:52:8f:ad:70:a2:c6:1c:c0:94:
6d:8d:38:94:66:91:1a:6d:c0:e0:a6:3d:83:39:1b:03:c4:d4:
de:56:54:b8:3a:1d:cb:67:68:40:6a:42:6f:8d:41:a1:6e:b1:
76:76:94:e7:f3:a6:b3:01:d7:f5:d1:0b:4d:32:60:4c:8d:59:
0a:c5:16:e5:07:5b:14:b0:ad:91:a1:c7:44:f1:d4:3b:d3:c9:
de:19:7e:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:51:48 2025 by rpki-client