Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363332303a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363332303a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: 76iOT942awZ/ghptD7ihinJnNA6LmXkoRzocauAQF0s=
Subject key identifier: 50:F2:59:2B:1B:54:A5:C0:44:83:B3:86:DB:37:8B:C1:66:5F:0A:CB
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 6D2C27848709CBD01AF8306A7FC7CE57646CC735
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363332303a3a2f34382d3438203d3e203136393039.roa
Signing time: Mon 30 Dec 2024 21:15:18 +0000
ROA not before: Mon 30 Dec 2024 21:10:18 +0000
ROA not after: Mon 29 Dec 2025 21:15:18 +0000
asID: 16909
IP address blocks: 2a14:7584:6320::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 22 Jan 2025 12:32:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:2c:27:84:87:09:cb:d0:1a:f8:30:6a:7f:c7:ce:57:64:6c:c7:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Dec 30 21:10:18 2024 GMT
Not After : Dec 29 21:15:18 2025 GMT
Subject: CN=50F2592B1B54A5C04483B386DB378BC1665F0ACB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:91:d9:e6:e4:93:c8:0b:0a:0c:4c:62:f4:1c:
fd:9f:09:ba:58:bf:02:62:32:8a:ad:ef:a2:19:51:
63:03:09:78:60:92:d3:e8:dc:60:cf:86:3a:c2:be:
61:79:d5:ca:57:a8:a2:67:6b:60:ef:b9:1f:13:fd:
75:da:38:0a:ef:e2:4c:34:1e:bb:23:4b:46:a1:80:
1b:c2:0b:47:f4:03:aa:dc:10:13:1b:30:78:95:60:
6e:8f:8f:77:b4:4a:49:d0:54:97:2c:9c:e7:6e:43:
d5:00:75:69:36:e2:9f:5d:b9:f6:02:8b:14:5f:46:
1c:37:1c:f3:22:46:8e:c0:dd:55:0a:a9:06:27:94:
0e:7d:f5:2c:81:d1:f1:b8:50:88:0e:8d:2c:a9:ff:
35:10:a2:5a:56:dd:56:2c:35:eb:cc:88:2b:49:7d:
19:b1:a3:a8:9e:31:d7:81:16:9f:b5:e6:a0:a1:9a:
6e:57:0d:fb:b6:57:cf:76:52:96:84:f4:70:9b:52:
4a:21:cc:25:0d:5d:dd:67:f3:a1:a7:3c:54:b1:ce:
e0:ef:37:d4:fe:3d:34:5e:95:99:1d:39:de:1d:f1:
69:3d:a8:c6:9c:e2:c7:d2:9c:1b:ee:48:24:42:32:
7c:96:81:f2:ca:69:1d:f5:f7:07:63:b8:a5:a3:de:
36:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:F2:59:2B:1B:54:A5:C0:44:83:B3:86:DB:37:8B:C1:66:5F:0A:CB
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363332303a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6320::/48
Signature Algorithm: sha256WithRSAEncryption
5d:78:ce:d1:41:25:c4:b7:23:69:38:b5:ac:27:45:9d:db:8f:
b6:d5:eb:53:bd:9c:f3:3f:e6:12:5e:1d:fa:57:35:ea:71:14:
6f:2e:f1:77:2a:78:98:0d:3b:d1:63:b4:2c:15:9c:f6:7c:ec:
52:5a:c7:25:a6:22:53:5b:19:36:d1:24:88:12:8c:90:a6:23:
5d:3e:61:d3:6c:ed:e8:fd:48:05:a9:83:eb:f9:b7:12:4e:57:
e7:9d:5a:6e:9c:a1:bb:29:a5:97:fa:e5:f2:f3:d6:55:aa:89:
bf:b5:20:9d:da:b6:6c:f2:da:ca:db:70:88:f5:01:62:97:80:
72:7e:91:b1:14:82:f5:11:28:3f:a9:22:07:be:f0:50:4b:be:
2d:4e:1c:5e:13:33:94:49:f5:d5:10:9c:b7:fd:b1:35:61:60:
75:c3:66:f1:b6:38:1f:a3:f4:e3:f9:55:89:d5:9d:c7:22:ab:
df:62:95:da:43:c3:aa:5d:ac:4d:9f:22:67:ee:16:83:93:e9:
55:a0:e8:ef:37:06:1a:1b:9a:7d:62:26:a0:59:9c:12:7e:df:
43:1f:61:84:83:50:99:72:b8:99:2b:ec:5d:17:d0:0a:92:78:
f0:6e:b9:74:03:fd:a9:f1:05:98:58:3b:f8:98:14:ca:e3:49:
1e:12:c3:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 06:57:38 2025 by rpki-client