Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363431303a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363431303a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: T9IGK4dWmTTr+ToCCag4H6Z2imDcytTEBZqa0pGKCMw=
Subject key identifier: 94:C6:99:2C:4C:CC:AC:5A:1E:8F:2C:E9:7C:57:83:F0:24:1F:7D:70
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 21144C950C7E0BF6EEC1ED8DAB256CAC3C663AC7
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363431303a3a2f34382d3438203d3e203136393039.roa
Signing time: Mon 06 Jan 2025 20:19:47 +0000
ROA not before: Mon 06 Jan 2025 20:14:47 +0000
ROA not after: Mon 05 Jan 2026 20:19:47 +0000
asID: 16909
IP address blocks: 2a14:7584:6410::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 16 Jan 2025 19:28:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:14:4c:95:0c:7e:0b:f6:ee:c1:ed:8d:ab:25:6c:ac:3c:66:3a:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Jan 6 20:14:47 2025 GMT
Not After : Jan 5 20:19:47 2026 GMT
Subject: CN=94C6992C4CCCAC5A1E8F2CE97C5783F0241F7D70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:7a:96:a6:fb:8c:c9:bc:7f:1d:29:c5:cd:a7:
fc:c4:f9:5f:f9:69:2a:0a:a1:f8:38:b5:45:48:d7:
8d:da:e2:31:75:59:ef:8f:b2:c1:a0:6f:74:cf:fb:
76:8d:06:92:07:fd:12:62:19:41:f1:20:2e:29:79:
b6:6f:99:d6:ac:1b:76:35:c5:2c:07:c7:e7:54:7d:
ad:fe:1e:3c:81:6c:d8:40:a7:65:23:48:cd:2a:91:
50:4f:77:a3:cc:b0:45:cf:95:6a:43:ad:54:50:ca:
0b:29:a0:b7:59:6f:b2:91:c8:c3:85:be:53:76:2a:
e5:ad:cf:a8:25:51:20:73:8f:f8:7a:8e:47:35:0d:
1f:68:f5:72:1a:d5:39:f3:96:0e:ef:f0:6a:0a:af:
a3:14:4d:99:ae:f3:57:8b:3d:c2:a9:8b:75:2d:e6:
04:27:d3:1c:24:67:05:20:20:35:f8:5b:ab:fa:f3:
d5:ae:87:dc:3e:91:c6:03:ca:0a:43:93:9c:79:1e:
db:cf:98:83:be:24:ef:3f:a2:bc:3f:fa:22:32:3c:
66:ac:74:8c:70:12:75:5a:f5:4d:7c:91:86:f8:67:
b9:35:b7:3f:b3:98:84:75:ea:05:7d:ba:9f:51:e5:
13:c9:2c:65:e6:12:31:9f:e4:7f:80:b6:08:86:98:
1a:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:C6:99:2C:4C:CC:AC:5A:1E:8F:2C:E9:7C:57:83:F0:24:1F:7D:70
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363431303a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6410::/48
Signature Algorithm: sha256WithRSAEncryption
1f:09:2c:4f:8f:36:db:45:b4:3a:45:e9:f5:9c:68:d5:0b:23:
7c:65:7c:61:47:01:b9:09:d9:3f:01:20:83:ad:10:6d:76:2e:
d8:a9:01:fd:1f:ad:7f:2d:34:c6:44:8e:31:7a:58:c1:4a:5f:
e5:3a:8c:50:a8:0a:23:68:25:03:e0:f5:db:54:d9:fc:ed:95:
fd:ba:e6:09:20:09:d4:1d:9b:7a:54:d5:e7:e9:c2:e9:a1:76:
7f:48:3f:2a:b1:15:b1:52:cd:88:72:0b:ab:c4:02:b9:f0:c7:
87:b5:86:49:f0:5b:dc:9e:da:9c:86:7d:b9:77:58:89:a4:1b:
9c:ce:23:5f:be:d7:ce:a2:ea:1d:47:4f:48:fa:c9:f0:f2:e6:
28:cb:75:be:48:98:77:49:07:89:27:90:e3:18:ae:42:c3:7e:
e1:52:9d:4b:3f:5b:8d:dd:a2:00:31:e3:e8:7c:58:42:e1:12:
da:36:6b:59:ec:75:61:fb:11:e0:7d:1c:74:f5:aa:56:20:da:
26:7f:9d:96:cc:8c:15:1d:cc:a4:0c:99:1c:45:7a:23:09:7c:
e7:17:7b:99:1e:65:71:aa:11:00:61:1e:ba:e5:54:84:a8:c6:
26:b0:d1:b6:61:4e:2d:5c:85:f7:06:db:c2:e9:80:67:ee:5b:
ce:d2:0c:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:47:15 2025 by rpki-client