Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363334303a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363334303a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: 5Xl/FLJVXkZV6qCz9irjNXVAIUSRboPL16dS9r+fzjw=
Subject key identifier: 18:5E:84:F5:17:3D:9A:0C:7C:09:81:6D:E2:AB:12:16:9E:56:F3:00
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 5469FE8627E7EFE1F7FA1C4A1F0F1A75B95AC9F4
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363334303a3a2f34382d3438203d3e203136393039.roa
Signing time: Sun 29 Dec 2024 15:41:17 +0000
ROA not before: Sun 29 Dec 2024 15:36:17 +0000
ROA not after: Sun 28 Dec 2025 15:41:17 +0000
asID: 16909
IP address blocks: 2a14:7584:6340::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 01 Jan 2025 21:57:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:69:fe:86:27:e7:ef:e1:f7:fa:1c:4a:1f:0f:1a:75:b9:5a:c9:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Dec 29 15:36:17 2024 GMT
Not After : Dec 28 15:41:17 2025 GMT
Subject: CN=185E84F5173D9A0C7C09816DE2AB12169E56F300
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:46:14:e0:07:87:81:aa:67:d1:21:3d:1f:39:
66:c3:df:30:7d:ea:74:60:be:a6:0d:13:7f:39:5e:
fb:1e:0a:c5:35:f6:85:03:71:a9:69:ed:3d:ad:2e:
ca:9e:31:08:ef:e8:a7:99:13:46:3e:47:b1:60:92:
f8:0f:a8:86:e7:05:4e:ff:6e:a7:82:c7:97:9d:4d:
a6:67:25:d5:aa:20:b8:f8:50:10:08:55:9c:19:90:
78:5c:ea:14:1a:f3:77:c8:f7:ac:33:80:b7:91:61:
ee:1a:6d:3d:80:62:9d:90:f6:98:22:49:b4:74:b4:
66:68:53:a3:24:a6:81:1a:9e:43:6a:1e:7e:c3:f0:
63:fa:ab:be:d9:4a:04:08:c2:19:9b:00:93:59:08:
41:e7:df:85:34:f4:53:cc:ac:da:d8:b5:76:22:87:
11:29:d0:ac:3d:22:52:b0:ce:1f:63:b2:b1:db:15:
00:90:8a:f0:66:6c:f4:e3:ce:3e:46:2c:33:73:8b:
a0:d5:92:c0:bb:16:b1:37:e9:b7:24:fa:c8:19:cd:
83:d4:89:cd:f7:8e:f0:a4:92:a3:a1:f3:fd:7c:35:
76:1a:8d:2f:88:c3:8f:0c:17:c8:58:9e:66:4f:a8:
5e:84:bb:f7:58:5f:74:d6:d5:a3:12:45:11:4f:6b:
ba:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:5E:84:F5:17:3D:9A:0C:7C:09:81:6D:E2:AB:12:16:9E:56:F3:00
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363334303a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6340::/48
Signature Algorithm: sha256WithRSAEncryption
5d:85:74:21:52:29:02:f5:6a:89:5f:aa:7e:82:bb:17:05:50:
c4:23:ec:c6:cf:43:36:67:53:11:e1:46:6e:3d:ae:b2:7e:52:
39:7c:47:a6:01:0d:a7:70:c5:9b:6a:53:23:b9:ac:dd:2b:66:
b1:f8:77:31:67:6d:37:64:1e:0a:a6:fe:bf:d8:6c:f0:e3:6e:
b9:70:b8:0c:37:20:70:30:ec:17:18:38:bf:f2:94:8e:c1:78:
d9:90:ae:6e:81:3c:ef:e2:a8:81:10:ea:5a:b0:e3:77:28:8c:
22:93:fa:18:16:fc:3f:a3:9a:81:b0:4f:cb:80:26:8d:af:56:
f2:b7:47:b4:61:67:95:6d:39:1f:78:38:25:3d:f6:c6:fd:3a:
61:65:ab:bd:0e:17:22:6a:f1:80:d4:ef:4c:b7:9f:51:3b:5f:
01:08:29:08:cf:00:01:12:65:ff:5a:11:05:fc:c9:35:eb:2c:
4d:5f:39:c7:98:be:3f:da:59:aa:e4:cc:70:b6:71:1b:16:22:
10:c7:51:c6:99:9f:9b:f0:e1:f8:72:7a:99:a9:b4:e2:08:16:
67:ab:b9:46:44:10:21:79:16:84:cb:89:ab:f5:cc:3b:d1:54:
e9:e0:c9:4f:f3:e5:f0:1f:a8:af:a5:5b:78:60:c1:97:e4:dc:
63:36:0b:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:49:40 2025 by rpki-client