Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363336303a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363336303a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: t/5TcGITZ7R+Rzqak3p2xyhiAtPkeNqGmQIrCGN40qA=
Subject key identifier: AA:BF:F7:6D:83:85:3F:69:2A:AE:E3:26:53:D3:FE:59:BF:EF:EF:DD
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 5C2B43D69387081496A5841C893A7CC26F209CF4
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363336303a3a2f34382d3438203d3e203136393039.roa
Signing time: Mon 30 Dec 2024 21:15:19 +0000
ROA not before: Mon 30 Dec 2024 21:10:19 +0000
ROA not after: Mon 29 Dec 2025 21:15:19 +0000
asID: 16909
IP address blocks: 2a14:7584:6360::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 22 Jan 2025 12:32:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:2b:43:d6:93:87:08:14:96:a5:84:1c:89:3a:7c:c2:6f:20:9c:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Dec 30 21:10:19 2024 GMT
Not After : Dec 29 21:15:19 2025 GMT
Subject: CN=AABFF76D83853F692AAEE32653D3FE59BFEFEFDD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:3e:f1:39:61:56:c7:ed:ef:b5:d9:a8:42:5b:
ac:6e:1f:dc:63:1c:32:9f:9d:d3:a8:d7:63:ae:60:
26:30:6e:d0:38:15:5a:46:9c:dc:64:fd:ba:63:9c:
b9:92:0b:92:b3:eb:40:09:8e:19:b7:7c:c2:2b:92:
d6:e8:b8:c9:9e:f3:6f:87:30:12:00:e5:e0:55:0e:
f6:f8:65:e9:a5:38:59:a4:6b:0a:a5:d8:82:84:0f:
0c:7a:f0:ac:26:50:68:ed:cc:64:b6:75:e1:72:ff:
c8:54:aa:e1:29:e0:a1:1f:c2:3d:ca:ec:62:fc:7c:
ee:39:80:e5:b0:93:cc:7c:4c:e7:8c:4a:42:73:75:
24:90:cd:28:9e:6e:05:c1:56:05:9e:86:d4:87:ba:
32:25:ff:6f:0a:70:1d:1d:f2:37:92:c6:eb:57:f0:
c4:5d:0f:b9:7e:7e:1a:1a:2c:20:ce:40:20:80:d6:
0c:42:08:7b:d4:a7:f7:7c:98:f0:17:57:6b:7c:2d:
6f:02:78:c6:6a:2d:ed:63:34:a8:52:4b:98:b6:9d:
7f:f0:09:4d:8d:39:f5:28:1d:11:38:6a:2b:be:6f:
a4:a5:27:59:a8:68:96:e5:df:1f:c1:eb:d8:98:d7:
99:f0:d7:e6:f0:ed:29:20:f8:93:c7:56:7d:1d:5f:
d3:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:BF:F7:6D:83:85:3F:69:2A:AE:E3:26:53:D3:FE:59:BF:EF:EF:DD
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363336303a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6360::/48
Signature Algorithm: sha256WithRSAEncryption
a9:11:55:10:b6:8a:1a:b7:c4:78:f3:22:be:21:4b:62:cb:c6:
6a:fa:cb:2f:23:dd:25:78:76:5f:b3:82:e9:23:f9:75:67:5a:
10:7b:50:64:e2:6a:0d:82:a9:15:be:d5:17:45:f3:38:58:72:
40:2e:71:04:7f:a4:1b:32:9c:d8:7e:4d:7a:55:e5:f3:7d:20:
62:02:50:fc:d6:6c:e3:15:f0:52:1f:cf:fc:b1:b4:1c:56:c8:
67:24:f9:38:61:69:ac:51:e2:66:78:a7:a7:2b:13:7a:8b:13:
0d:dd:7a:be:7a:50:9f:c5:c7:ba:f4:13:28:2c:ce:e5:6e:aa:
2d:e0:20:4f:00:b2:69:09:02:d0:8a:18:d0:2c:c9:db:4e:36:
de:99:1f:c0:46:48:0f:72:21:3c:f7:66:0b:af:00:19:b8:74:
68:e2:b5:7c:40:01:6c:82:58:53:6d:23:13:a9:ec:1f:d3:e8:
d0:48:12:10:71:75:54:0f:7d:0e:32:b1:5b:e6:19:4a:5d:15:
c1:ee:c3:d6:50:1f:61:d3:25:4e:3c:fe:6e:c0:04:21:0c:1b:
b2:fa:36:62:17:3f:d8:db:60:92:8c:c1:44:b3:1c:a8:ab:a0:
28:b1:65:5b:2c:31:60:df:61:fb:e8:6d:3c:b9:2a:fe:b1:5e:
f9:f7:ab:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 06:46:35 2025 by rpki-client