Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363361303a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363361303a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: WgnCniGVJehV4YoWpomahKHmsFgwoZ6R2uNUkoH0+d0=
Subject key identifier: A7:F3:EA:60:53:C7:B4:28:1A:87:85:2E:7C:9D:E3:CC:20:73:47:AD
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 535858D778F7CCDD6E4CAFD9A3B91ED4BA0FF44F
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363361303a3a2f34382d3438203d3e203136393039.roa
Signing time: Tue 24 Dec 2024 20:50:46 +0000
ROA not before: Tue 24 Dec 2024 20:45:46 +0000
ROA not after: Tue 23 Dec 2025 20:50:46 +0000
asID: 16909
IP address blocks: 2a14:7584:63a0::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 29 Dec 2024 15:40:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:58:58:d7:78:f7:cc:dd:6e:4c:af:d9:a3:b9:1e:d4:ba:0f:f4:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Dec 24 20:45:46 2024 GMT
Not After : Dec 23 20:50:46 2025 GMT
Subject: CN=A7F3EA6053C7B4281A87852E7C9DE3CC207347AD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:89:25:cf:29:6d:d2:33:c8:01:cb:32:1c:b8:
a3:03:51:40:10:b7:dd:d1:a2:4d:7d:89:bc:77:3a:
7b:c8:ee:e0:18:b2:ca:4f:d0:e1:89:c3:cf:30:fa:
2d:06:32:a8:55:11:63:a6:03:7a:bc:b6:c4:b6:a7:
f2:e4:89:0a:a1:c2:db:2a:9a:97:6c:0e:03:a7:8a:
0e:be:c9:62:33:00:17:8e:6e:d3:4b:79:f0:a8:ba:
a6:09:46:ed:9b:14:8d:ef:50:18:15:50:b9:3c:90:
4e:da:fd:d2:2a:83:97:0d:d1:a0:6f:98:1f:04:1c:
ba:03:c0:da:7d:11:1a:32:69:69:30:50:86:de:98:
2e:d7:38:bf:49:be:d8:df:ba:a1:e8:7b:fe:a0:a0:
c5:d1:9b:02:25:33:5d:d0:25:db:20:5b:93:bb:df:
2a:dc:61:59:6f:7e:ba:8d:96:98:e4:c9:8d:05:8f:
07:bf:67:3f:e4:89:9f:ca:7d:1d:0e:a9:bf:b6:89:
f2:64:c8:ab:4e:7b:40:83:f2:a3:8c:bd:53:b7:ed:
7c:c5:50:fe:d9:f4:32:1a:b1:61:e6:d2:73:33:1a:
af:99:bb:ff:be:54:dc:56:4e:6c:1b:ea:4b:85:fe:
54:ae:4a:e0:4b:dd:46:0e:2f:13:10:7e:13:4f:56:
e0:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:F3:EA:60:53:C7:B4:28:1A:87:85:2E:7C:9D:E3:CC:20:73:47:AD
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363361303a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:63a0::/48
Signature Algorithm: sha256WithRSAEncryption
04:1f:18:f1:f2:38:90:d6:08:6b:11:bf:a3:ef:f5:6e:68:00:
96:8e:4b:37:23:fc:a9:78:9b:e1:3d:96:14:70:69:de:06:9b:
4a:4a:89:21:c8:60:c7:d6:f7:94:c5:be:10:93:9e:4b:48:58:
13:2c:d0:87:d5:53:14:11:0c:e4:f4:64:be:ff:dd:4a:71:5d:
1e:2e:28:21:92:5e:c3:2f:45:23:e0:17:df:e6:22:d3:72:e6:
81:51:d0:c5:19:a3:79:41:77:31:9b:f9:6a:bc:83:bc:3a:ca:
13:36:6a:4b:18:a8:3b:9d:22:1b:be:a2:1f:0e:65:67:85:a5:
0a:76:a4:13:ca:6a:db:ec:4e:2b:31:90:69:d6:0f:57:9f:72:
ff:ed:5f:84:5c:26:6f:d9:62:3b:a2:8a:4d:0d:4f:21:4d:00:
9e:06:6e:60:54:0e:cd:5a:56:e5:bc:08:3d:0f:c5:2d:a9:20:
4f:eb:fb:55:24:b3:ae:e2:5b:c2:5a:c8:92:e0:ee:e9:b3:06:
f1:3d:3a:d3:fa:43:02:0e:16:05:da:73:ba:00:39:d3:33:36:
52:0c:4b:94:ed:a8:7b:59:1b:0f:52:66:f3:46:b1:2d:0f:92:
9f:ee:47:ad:40:58:dc:a5:1a:ed:df:f9:63:e5:39:53:9c:6e:
3e:79:dc:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:50:41 2025 by rpki-client