Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363436303a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363436303a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: pqOXntXcX+rgmGjxkkah8DH+AO6ig7Lwe22opRMglGs=
Subject key identifier: 26:18:26:B8:83:0D:BB:7D:6D:E3:8A:18:BD:22:85:4F:89:B8:7A:F0
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 56BFD261ABD4EA2D574A95B6359E8F3D4B4A1BB0
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363436303a3a2f34382d3438203d3e203136393039.roa
Signing time: Mon 06 Jan 2025 20:20:39 +0000
ROA not before: Mon 06 Jan 2025 20:15:39 +0000
ROA not after: Mon 05 Jan 2026 20:20:39 +0000
asID: 16909
IP address blocks: 2a14:7584:6460::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 16 Jan 2025 19:25:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:bf:d2:61:ab:d4:ea:2d:57:4a:95:b6:35:9e:8f:3d:4b:4a:1b:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Jan 6 20:15:39 2025 GMT
Not After : Jan 5 20:20:39 2026 GMT
Subject: CN=261826B8830DBB7D6DE38A18BD22854F89B87AF0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:92:be:19:53:7c:15:b4:ca:9b:90:83:af:25:
a7:dd:6b:f7:31:c6:0b:c2:de:49:cc:f4:8b:ef:07:
76:8d:6d:e5:02:73:75:4d:c0:e8:2c:cf:ed:9b:70:
42:30:dd:75:21:18:01:9b:19:1c:16:a4:89:90:f6:
5a:be:98:8e:5f:5d:2e:1e:4a:30:fa:ba:18:fd:56:
1c:b6:87:b9:6f:58:5e:61:e0:d5:9f:e5:8b:65:4e:
cc:41:81:bb:19:4b:73:c1:31:d7:9e:46:e0:dc:e8:
5e:bb:88:72:9a:7c:ac:f9:51:89:ab:81:56:55:ef:
a2:fd:40:5b:b9:7c:f9:53:3e:6a:b8:44:e1:d5:d9:
ef:15:36:f8:93:b1:35:c8:91:99:92:64:3e:23:ff:
35:95:b7:e9:54:fc:4a:bf:2a:7a:db:9a:99:bc:90:
96:7f:cd:aa:a3:55:c4:5e:c6:5f:80:2d:97:2a:68:
16:41:74:c2:54:cc:0f:25:64:67:05:3e:3b:c7:05:
57:ac:07:88:a5:fe:7b:4b:3d:7b:a4:db:47:43:6a:
96:3c:a2:ed:5c:46:85:91:53:b4:3e:3a:de:a7:46:
25:07:6a:fb:cc:68:14:5a:88:fb:2d:17:a1:58:af:
5e:1a:34:8c:4f:e4:6b:f2:4d:74:de:af:49:3b:d6:
d7:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:18:26:B8:83:0D:BB:7D:6D:E3:8A:18:BD:22:85:4F:89:B8:7A:F0
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363436303a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6460::/48
Signature Algorithm: sha256WithRSAEncryption
4f:28:bc:23:85:30:87:02:af:cd:2c:63:a0:ef:fc:25:a4:9f:
0b:de:6c:53:0d:bb:2b:2b:ff:a1:9d:22:19:c4:b7:e8:22:fa:
f2:18:0a:d7:3f:07:b2:58:e5:13:95:92:60:be:11:6c:83:90:
4b:09:fa:78:7f:2e:a1:ae:e5:bb:7d:ad:73:a8:44:36:96:d4:
b5:ab:69:50:4d:26:93:55:fe:6e:e8:c7:70:61:04:ea:6f:62:
01:81:1b:c5:0d:a8:59:66:62:ac:d6:48:98:63:01:a2:d5:6b:
86:c2:87:5c:ac:1c:a9:52:4f:c3:8d:ce:f5:8b:19:f6:c6:6f:
e9:4a:fc:6c:58:f5:fc:99:b2:49:1e:0f:b1:4a:2d:d1:75:d5:
a5:4e:46:77:ea:a5:8f:bb:c3:0b:d2:bd:57:2a:59:e7:0d:46:
08:b4:2c:a5:2d:c9:99:ba:c6:b1:66:4a:84:d2:01:cf:1a:a7:
59:3a:2e:76:9b:5a:09:69:15:6d:05:1c:31:16:b1:ba:4a:5c:
2f:f9:13:3b:19:68:5d:1d:af:f9:c3:56:3c:df:0c:d6:f8:0f:
99:05:15:a0:fb:63:4c:b8:9c:da:f8:11:6a:d9:30:b6:3a:82:
bc:24:ef:94:1c:2a:b8:98:f3:d4:2f:1f:06:2c:fb:99:e5:e7:
e8:a7:ff:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:47:06 2025 by rpki-client