Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363437303a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363437303a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: +yqZFdTdD8ARxmj0uXpGqEKBWkl7/uygJ/9cOLceWoQ=
Subject key identifier: D5:46:5D:59:A0:F1:C9:D8:B9:07:4E:C1:E2:B5:2F:67:04:63:6C:A0
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 6B38FAB8A3B7A1CCF8D04B2979FD896789BF2AE9
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363437303a3a2f34382d3438203d3e203136393039.roa
Signing time: Mon 06 Jan 2025 20:20:40 +0000
ROA not before: Mon 06 Jan 2025 20:15:40 +0000
ROA not after: Mon 05 Jan 2026 20:20:40 +0000
asID: 16909
IP address blocks: 2a14:7584:6470::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 14 Jan 2025 14:23:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:38:fa:b8:a3:b7:a1:cc:f8:d0:4b:29:79:fd:89:67:89:bf:2a:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Jan 6 20:15:40 2025 GMT
Not After : Jan 5 20:20:40 2026 GMT
Subject: CN=D5465D59A0F1C9D8B9074EC1E2B52F6704636CA0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:b5:62:27:55:55:fe:ac:24:0e:65:22:7d:1e:
d0:51:80:b6:dc:6d:ff:0a:23:5e:a8:72:7f:a9:ed:
6b:5d:ee:1c:8e:c7:b5:1a:e4:7e:77:5e:ee:11:aa:
81:dd:b8:73:6b:b4:40:6e:f1:57:3a:ab:2d:14:3c:
bc:f3:dc:dd:86:5b:81:f1:5c:b9:bf:12:9a:d8:57:
57:9a:15:5b:69:86:2b:ff:d5:3f:d0:bd:cf:ee:c7:
1b:a6:f3:ac:32:73:4d:6e:b3:9a:e3:bb:14:93:c8:
eb:40:01:49:91:41:f9:d1:69:19:f1:35:c1:02:f6:
82:9e:bd:ff:39:60:72:f0:72:5b:cd:56:fc:c2:2f:
68:37:35:1a:e5:e8:df:71:5c:dc:f8:49:04:22:12:
8a:9d:d9:78:da:f1:b4:a5:41:1f:ee:c5:3b:1f:de:
ac:aa:e2:73:93:bc:25:76:5a:44:d5:3e:f3:b0:c6:
a6:dc:55:0c:06:69:d9:6d:b7:db:d1:ad:75:9b:f0:
53:46:e1:88:8e:05:ab:97:55:99:d4:85:84:36:d4:
cd:83:ea:0c:96:b0:08:09:b0:b3:17:06:b3:90:bc:
c7:6c:fe:fe:ca:d3:6c:ca:eb:b8:31:8e:bf:ae:19:
d8:3e:25:17:d6:4b:10:90:dc:ae:51:c4:04:47:ca:
fd:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:46:5D:59:A0:F1:C9:D8:B9:07:4E:C1:E2:B5:2F:67:04:63:6C:A0
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363437303a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6470::/48
Signature Algorithm: sha256WithRSAEncryption
1c:6b:c7:00:33:c9:fd:6a:3c:02:dc:7e:c7:49:94:71:d1:d1:
e0:b7:61:62:13:d0:df:f4:f4:aa:66:d4:e6:2e:96:1f:af:91:
b0:1b:64:95:8c:b5:7d:03:76:95:54:d5:db:72:b4:33:85:0b:
99:e1:8c:b9:27:00:38:a3:a3:82:b9:a4:b5:62:b5:a5:58:f4:
e4:ef:d5:2f:e3:7d:33:5d:f9:76:57:e6:c7:39:6c:bb:6c:6e:
27:6d:69:ad:84:36:27:14:97:60:31:79:c0:4f:72:2e:54:61:
53:4f:de:44:7c:ac:b6:36:ea:80:41:ef:7a:76:61:93:1d:b6:
4e:f5:e0:ca:ac:73:b7:b6:6c:cc:72:a8:99:02:e2:25:89:03:
81:bb:51:0a:ab:79:9b:63:11:b8:dc:ff:14:8a:1f:e2:d0:b6:
4f:f7:e6:c2:13:cc:51:0e:c2:5b:3a:ed:aa:19:4c:31:01:fa:
4a:d3:37:47:df:26:5a:aa:90:bc:09:5c:2e:ee:37:4a:4f:69:
24:58:ee:39:67:5a:a6:d2:53:cf:e2:31:20:23:c0:28:da:34:
e0:2d:86:3b:f7:fa:ca:33:12:8f:b9:4a:f3:5d:d7:df:78:9a:
ba:b1:65:85:5f:81:43:ce:47:01:be:e4:be:64:dc:4a:f8:12:
30:63:b1:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:44:47 2025 by rpki-client