Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363366303a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363366303a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: 3/NYKfNhAri43JwxlhHqz/3q6Q0MZo4+jeYLNQSCvVo=
Subject key identifier: A0:13:64:7C:A4:4B:2E:5E:98:37:66:49:35:57:BF:F3:6B:DD:A1:2C
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 250C197C2616B709B1EFDC080B50B4B12D77CEE8
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363366303a3a2f34382d3438203d3e203136393039.roa
Signing time: Mon 06 Jan 2025 20:19:46 +0000
ROA not before: Mon 06 Jan 2025 20:14:46 +0000
ROA not after: Mon 05 Jan 2026 20:19:46 +0000
asID: 16909
IP address blocks: 2a14:7584:63f0::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 16 Jan 2025 19:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:0c:19:7c:26:16:b7:09:b1:ef:dc:08:0b:50:b4:b1:2d:77:ce:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Jan 6 20:14:46 2025 GMT
Not After : Jan 5 20:19:46 2026 GMT
Subject: CN=A013647CA44B2E5E983766493557BFF36BDDA12C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:41:ee:be:97:ca:51:c3:f0:bf:ff:28:42:15:
49:b4:bb:91:3f:c5:de:9a:e6:f1:dc:b3:b3:71:12:
15:4d:fd:53:43:97:66:20:41:53:a0:22:bd:54:c5:
06:bd:a0:50:37:d6:f5:d3:2e:f0:b8:b9:b0:e3:d6:
87:67:9f:5a:84:9c:2d:85:d3:75:08:37:e6:0a:0e:
b8:bd:b9:9d:22:3b:37:45:a6:e5:0a:cb:0d:eb:42:
a3:cf:da:69:15:3f:07:7a:88:ea:b4:15:f7:64:3e:
ce:fb:d9:a4:d6:d4:9c:06:2e:33:d4:e0:98:a4:b3:
66:92:56:52:54:ac:1e:39:b4:0b:70:54:1b:74:f3:
8d:6f:2e:46:f6:70:af:ed:be:8e:fa:34:6d:b6:82:
66:37:7b:3a:30:87:ba:51:cf:9c:10:c3:3c:f4:f9:
44:2a:4e:04:a1:1b:eb:ad:57:45:a5:0b:b2:46:30:
03:40:f4:13:2a:aa:fd:71:b7:5d:f7:bc:39:67:81:
8f:18:b4:bc:aa:b9:fb:d6:cd:fa:b3:5a:6c:fd:fc:
d3:0b:74:6d:ff:27:51:72:bb:78:8d:3c:cd:be:3d:
b7:3f:3b:ae:65:b3:7c:c9:d1:76:21:0a:3e:fb:cc:
f4:be:79:0b:c7:c2:f8:90:7f:df:78:c1:33:7d:cf:
d7:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:13:64:7C:A4:4B:2E:5E:98:37:66:49:35:57:BF:F3:6B:DD:A1:2C
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363366303a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:63f0::/48
Signature Algorithm: sha256WithRSAEncryption
36:4e:2c:55:bd:0b:5d:95:db:ad:f3:e0:72:b8:48:03:16:8e:
34:6c:c4:4a:6d:ec:ca:31:ae:9e:7e:bf:48:70:09:ba:f1:dc:
64:57:5f:0f:0a:44:6b:0b:d9:3a:f6:1e:03:5e:ff:4d:42:94:
5f:ee:74:3c:0b:8b:af:3d:93:d8:e2:f0:d6:38:d6:f3:6a:a6:
0c:2b:b1:f7:0f:a0:ec:4f:a5:0e:cf:f9:87:bb:7d:0b:3e:49:
06:82:68:3a:c7:ce:13:38:75:72:4c:74:b7:77:4b:39:4a:f6:
c4:41:53:24:a6:8c:8b:4e:53:01:e9:01:74:5f:7e:62:29:7e:
3d:87:df:f5:dd:60:f0:66:8e:fd:c3:cb:98:b9:9b:cb:59:67:
9b:20:e1:d9:b3:79:97:53:f7:18:92:9c:84:d9:1f:68:d0:c4:
62:f1:6b:48:63:18:8c:2e:20:2f:f0:4e:85:81:2a:6d:38:31:
d8:41:05:b2:9a:fa:3a:32:2e:c9:3c:2f:39:82:12:fd:71:98:
f8:d2:83:c1:38:39:49:0f:c9:ae:3a:ec:27:df:ec:21:e5:36:
f1:45:d9:84:8d:1f:67:1f:c0:25:18:35:63:36:99:81:0c:7c:
da:5e:86:2a:91:4e:ce:e1:93:bf:9d:97:fb:00:6e:9c:b3:bc:
06:44:59:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:52:33 2025 by rpki-client