Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363338303a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363338303a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: rxmlvZx7kICF3NckfYkT6Fs+JyUFdX9b4NCLzp1KTWA=
Subject key identifier: BE:A7:36:B8:C1:C2:84:C9:84:62:77:97:14:0F:35:BE:D6:3E:3D:7E
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 52E9B9B1B98BA125887FFEE8C0E219EEDD091A3C
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363338303a3a2f34382d3438203d3e203136393039.roa
Signing time: Mon 06 Jan 2025 20:19:44 +0000
ROA not before: Mon 06 Jan 2025 20:14:44 +0000
ROA not after: Mon 05 Jan 2026 20:19:44 +0000
asID: 16909
IP address blocks: 2a14:7584:6380::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 14 Jan 2025 14:23:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:e9:b9:b1:b9:8b:a1:25:88:7f:fe:e8:c0:e2:19:ee:dd:09:1a:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Jan 6 20:14:44 2025 GMT
Not After : Jan 5 20:19:44 2026 GMT
Subject: CN=BEA736B8C1C284C984627797140F35BED63E3D7E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e8:67:22:3e:78:36:d0:15:91:7b:67:65:d8:
0c:1d:0f:c7:79:22:d9:6c:63:a0:df:43:67:ec:01:
f3:e4:cc:f1:d6:14:67:23:3c:76:57:0f:51:b0:84:
0a:91:a9:48:09:3a:99:7c:94:97:5e:25:ce:d7:c9:
28:d7:5c:b8:d5:67:98:d1:bb:dc:db:40:73:72:68:
80:9c:ae:26:47:76:47:3c:51:4b:61:f4:3b:98:3d:
32:f5:2a:c3:f6:66:93:1a:1f:ce:cb:b0:c8:5e:30:
12:b8:8b:49:ed:3a:0b:a8:1d:73:a1:e6:96:87:df:
f7:a0:a3:21:90:1c:fe:9f:7e:07:02:23:71:db:42:
8b:23:d6:d5:c7:b2:ab:f8:9f:24:8b:be:e5:5a:cf:
80:a2:37:55:1c:fd:7d:2b:5c:e5:ef:a9:c4:dc:73:
cf:f6:7a:ba:93:df:8c:f8:48:33:d9:4b:41:33:ba:
9b:a4:0b:c4:c6:1c:7a:99:b4:00:fe:35:15:a3:c9:
8c:36:80:1a:ca:19:b0:6d:64:9e:a7:ac:c5:59:75:
a0:28:ee:18:04:b9:df:f1:71:ba:88:59:a7:12:63:
89:ea:8e:92:f3:5e:bb:cc:65:4b:40:68:4c:a9:1b:
9e:43:f4:b7:a4:de:b7:84:1b:0b:a1:88:5e:6c:f6:
20:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:A7:36:B8:C1:C2:84:C9:84:62:77:97:14:0F:35:BE:D6:3E:3D:7E
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363338303a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6380::/48
Signature Algorithm: sha256WithRSAEncryption
07:d8:5e:40:d9:0f:ff:51:91:5a:84:16:a1:d3:95:63:58:f7:
41:32:06:20:2b:31:bf:e2:36:37:c0:8f:26:6f:bc:af:df:ba:
aa:6b:12:00:0f:78:fb:a6:fd:e4:32:20:47:03:37:ef:f1:5f:
5f:48:5a:3f:05:09:3f:45:5b:94:61:8f:3f:0a:e0:b6:77:1a:
68:92:99:e8:f2:24:cd:13:97:77:90:b6:7b:0d:73:33:97:8b:
89:9a:56:34:84:ee:4c:df:10:40:9e:ee:5d:29:fa:dd:c0:91:
fd:a5:d3:1c:fb:c1:df:b2:18:fa:63:1f:93:5c:0e:d2:39:b3:
7c:03:d3:db:cb:b3:83:3f:c1:45:89:07:4e:f3:98:0f:b4:fb:
ca:f9:3f:f4:bf:3d:c3:3b:4d:74:e7:56:82:44:56:b5:55:e6:
47:95:dd:b4:23:91:ef:35:fd:76:b8:a0:e8:9f:d1:6f:9f:56:
de:9f:72:7e:d9:f5:02:76:3b:fb:e7:cb:4b:84:7a:c9:98:00:
58:1d:56:0b:e3:e3:cb:5a:f6:0c:1a:9b:66:81:c2:fd:c1:c2:
d6:95:43:da:d5:9d:a8:16:ad:e9:86:fb:b2:1f:7c:4f:11:5f:
d7:41:92:33:9b:4f:bb:34:31:15:64:4f:a5:d3:ae:64:ad:15:
f7:4b:d5:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:50:43 2025 by rpki-client