Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363365303a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363365303a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: 2HZqV/dIlIENVNiMkMcK657yUpoqTGeJ6myL8ZebuaA=
Subject key identifier: 1A:1C:CA:02:77:8A:E8:60:D4:04:88:A5:88:77:7C:D4:98:C5:87:E9
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 2560B693B812DBF85D83184664D5A97632A09AEC
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363365303a3a2f34382d3438203d3e203136393039.roa
Signing time: Mon 06 Jan 2025 20:19:45 +0000
ROA not before: Mon 06 Jan 2025 20:14:45 +0000
ROA not after: Mon 05 Jan 2026 20:19:45 +0000
asID: 16909
IP address blocks: 2a14:7584:63e0::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 16 Jan 2025 19:25:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:60:b6:93:b8:12:db:f8:5d:83:18:46:64:d5:a9:76:32:a0:9a:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Jan 6 20:14:45 2025 GMT
Not After : Jan 5 20:19:45 2026 GMT
Subject: CN=1A1CCA02778AE860D40488A588777CD498C587E9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:cc:e4:2a:73:dc:fb:be:cf:82:ad:36:db:96:
ed:fc:d8:23:da:ef:b1:14:ec:a5:97:c2:df:d8:a1:
20:ea:bc:c5:06:cf:67:6c:5c:63:bb:5e:d4:64:76:
f2:1d:aa:35:c8:f2:98:3f:78:5c:45:d5:5e:8f:8e:
81:cd:2f:fb:8f:4a:9a:63:de:cf:59:c5:41:c7:f0:
76:5a:21:5c:97:3c:b8:aa:c7:96:b6:5e:10:60:25:
7a:74:0b:c1:98:87:39:3d:85:e9:5e:00:c9:e2:36:
53:42:b2:34:f6:18:e0:86:3d:93:83:12:15:00:a6:
bd:17:b6:22:d3:73:ab:ab:71:87:9b:56:29:cf:15:
97:55:0f:b7:08:87:08:a0:98:a1:d7:53:51:66:34:
db:5b:06:59:bd:ab:18:0d:67:76:7a:54:5f:4e:07:
14:fb:e7:67:cf:00:4d:cf:fa:43:96:3d:12:40:82:
60:91:e1:5f:e3:1e:8c:cd:e0:6b:53:bc:09:4e:d6:
cf:62:49:bd:10:50:30:d4:7e:5b:c5:5f:a1:07:3b:
3b:46:1d:d8:d8:55:9c:e7:54:dd:ab:df:82:9f:96:
06:07:8b:6b:fd:2d:48:57:42:cc:f1:ee:c0:26:9f:
74:64:b8:aa:94:c5:c7:be:4e:df:28:49:99:49:bc:
47:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:1C:CA:02:77:8A:E8:60:D4:04:88:A5:88:77:7C:D4:98:C5:87:E9
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363365303a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:63e0::/48
Signature Algorithm: sha256WithRSAEncryption
1e:4f:f7:1f:62:a0:69:40:b5:fa:86:ee:2e:97:87:16:54:33:
33:01:4e:df:df:dc:f6:b2:ed:44:ae:c3:85:1b:7e:10:26:58:
38:a1:fd:31:ed:fa:b5:80:c8:54:b5:4c:1a:9d:b7:b3:a0:ed:
d3:7c:77:95:56:41:71:77:ef:ad:5d:ba:f2:7c:c7:fd:10:c3:
c8:61:f8:33:80:a4:c6:bd:da:1a:84:b9:ae:aa:13:77:af:e3:
5a:26:6c:7e:9d:9d:0e:22:52:ae:50:1c:e5:4a:9e:85:f7:42:
89:f3:54:91:87:de:e0:5f:51:fb:89:05:86:38:ee:0e:97:3e:
d2:86:87:83:5d:eb:19:08:f1:9f:c6:ac:92:6c:d2:71:8d:c1:
7e:ff:07:ec:88:e8:be:ae:c7:3e:01:69:ed:96:6c:cd:26:f5:
d0:8e:28:d4:a0:71:d5:6d:1f:b1:f1:5d:01:53:1c:d4:67:a7:
68:8c:a6:11:e9:36:c5:65:60:0c:16:c8:ae:c9:9b:a8:e2:d8:
42:38:28:c9:9e:56:ac:7a:2d:8c:f7:5c:a2:cf:79:2d:81:be:
7d:b7:ae:5b:a0:60:b2:5a:dd:24:82:37:d9:67:43:f6:d9:5d:
1e:b7:01:f7:93:bc:b7:2c:3c:c2:d3:5b:7e:30:9b:09:41:23:
e1:2f:59:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:50:41 2025 by rpki-client