Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363337303a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363337303a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: ow5gmhD6j+8+pSmEdO70+H00PXwqodynizVRSxnutsk=
Subject key identifier: 33:BF:01:5C:B7:16:9E:91:F8:1A:E7:12:72:6B:C0:41:B1:83:91:C1
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 491780336634324A96E6503FF9904BD723A42BE6
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363337303a3a2f34382d3438203d3e203136393039.roa
Signing time: Mon 30 Dec 2024 21:15:20 +0000
ROA not before: Mon 30 Dec 2024 21:10:20 +0000
ROA not after: Mon 29 Dec 2025 21:15:20 +0000
asID: 16909
IP address blocks: 2a14:7584:6370::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 22 Jan 2025 12:32:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:17:80:33:66:34:32:4a:96:e6:50:3f:f9:90:4b:d7:23:a4:2b:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Dec 30 21:10:20 2024 GMT
Not After : Dec 29 21:15:20 2025 GMT
Subject: CN=33BF015CB7169E91F81AE712726BC041B18391C1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:1f:81:dd:27:bb:a7:fd:a9:9f:ed:c7:2e:88:
cd:db:ca:6d:03:39:d8:1d:8b:c7:13:05:06:2a:a9:
f9:09:92:c0:ab:21:4f:9e:1e:25:82:ba:98:72:9b:
e9:b9:ae:ff:71:07:a7:ce:4b:1f:c6:ba:a1:ac:db:
db:81:3c:f8:02:7f:0d:0f:df:d3:eb:37:a1:f3:26:
1a:01:56:41:f4:cb:0c:62:ea:2a:6c:ee:e3:7d:29:
e3:22:f2:31:4d:76:8f:6b:13:ae:9f:69:f0:9f:70:
53:88:ff:62:19:7b:c3:45:aa:de:11:0b:fd:e0:45:
e8:a6:f1:f8:9e:55:80:32:c3:b8:36:9d:45:b9:29:
87:20:0e:14:53:93:f8:78:31:64:c0:81:5e:cb:46:
9a:8a:8f:33:95:8b:ca:21:85:75:13:dc:d6:77:f8:
1b:d6:2c:28:0f:a2:7e:ea:48:5a:0e:d2:fa:86:08:
74:5b:c6:8d:85:5f:4b:d3:34:e0:13:e4:0a:03:ee:
96:14:82:b0:bd:83:a3:cf:b1:37:8a:b8:38:d9:ec:
81:09:f9:25:d9:34:da:aa:3b:07:09:ef:ad:c2:9d:
0a:8c:68:b4:8c:72:43:8b:bb:ff:1c:df:4e:f8:75:
82:b6:97:25:b5:9e:33:c8:31:55:f3:26:99:9c:ce:
1d:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:BF:01:5C:B7:16:9E:91:F8:1A:E7:12:72:6B:C0:41:B1:83:91:C1
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363337303a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6370::/48
Signature Algorithm: sha256WithRSAEncryption
08:aa:9c:3d:69:1e:e2:89:19:05:d8:3b:ba:ad:de:21:bd:7c:
4b:05:c4:b6:1b:ce:f8:9f:29:f2:6f:36:df:a6:99:be:45:30:
e5:f0:2b:44:70:41:43:9e:97:fc:d3:e4:56:ff:f1:bf:c7:bf:
5a:ab:46:7d:d8:e6:2b:1c:98:89:f4:d3:95:e2:61:d5:ab:9c:
32:f0:6d:c9:fa:75:aa:19:ff:ed:be:2e:ff:ae:f4:ee:b4:61:
4b:d8:51:da:d5:8e:f8:32:17:33:df:b9:4f:ec:2e:34:97:10:
6f:6f:04:60:55:6c:aa:4e:92:50:9e:8c:75:33:e0:d5:47:da:
e9:f0:8e:6d:e9:6f:70:fe:00:da:80:9c:24:03:de:b4:d9:76:
fd:29:f2:c2:93:9d:b0:bf:74:ae:17:d2:e4:f7:87:59:99:1f:
92:8d:70:4c:f0:4d:f4:8e:80:56:b8:ce:0e:eb:77:36:7e:00:
f1:0c:e4:45:f5:a1:28:32:84:57:c7:ba:85:16:9f:2e:95:01:
90:87:a6:9c:1c:d0:0b:5f:a3:a4:00:98:e6:01:66:d4:b7:dd:
9f:4e:84:33:0c:fc:be:29:c6:a9:31:8d:98:90:49:2a:c0:70:
0f:11:99:82:05:93:23:91:ca:d5:c1:39:8c:d0:9a:82:21:92:
e5:4b:2e:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 06:58:10 2025 by rpki-client