Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363439303a3a2f34342d3438203d3e203136393039.roa
File: 326131343a373538343a363439303a3a2f34342d3438203d3e203136393039.roa (raw, json)
Hash identifier: UUBwWm/wTWKWK3xjar6HW9YiqFirKpb2pfF/KABSuT0=
Subject key identifier: 14:ED:B3:AD:D5:04:D9:BD:13:CD:30:1C:2D:2C:92:AD:63:AE:06:4B
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 34BC34F158A588C23F980D3797A4D0F60CD011EF
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363439303a3a2f34342d3438203d3e203136393039.roa
Signing time: Thu 19 Dec 2024 14:32:26 +0000
ROA not before: Thu 19 Dec 2024 14:27:26 +0000
ROA not after: Thu 18 Dec 2025 14:32:26 +0000
asID: 16909
IP address blocks: 2a14:7584:6490::/44 maxlen: 48
Validation: Failed, certificate revoked on Thu 19 Dec 2024 20:02:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:bc:34:f1:58:a5:88:c2:3f:98:0d:37:97:a4:d0:f6:0c:d0:11:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Dec 19 14:27:26 2024 GMT
Not After : Dec 18 14:32:26 2025 GMT
Subject: CN=14EDB3ADD504D9BD13CD301C2D2C92AD63AE064B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:76:1f:98:00:b6:b7:b6:08:60:10:b8:bf:72:
ce:85:14:53:9e:f6:8d:12:04:c8:b6:28:58:95:58:
73:8e:5f:88:50:e9:09:99:ca:89:2c:95:d4:1b:24:
1c:6c:7d:b0:fb:f8:98:21:3f:4d:42:cd:8f:ed:6f:
7d:d1:21:76:3a:b2:56:40:5c:1a:0d:9c:e6:7f:4c:
e5:11:22:55:cc:c6:56:cb:7a:60:95:62:dc:e6:f7:
16:a0:f8:23:58:d6:c0:3c:87:82:0d:7f:16:42:a7:
8b:a3:9d:41:05:92:67:7e:1a:aa:6a:73:e3:c5:9f:
de:32:ea:93:7f:42:ac:d6:a1:1b:da:3b:c5:0c:32:
21:c6:63:d3:38:30:fa:f3:97:95:cb:2d:8e:e0:22:
f0:1f:72:0e:55:de:0f:93:65:a8:d6:6b:db:03:9f:
f4:e5:34:15:7f:e7:ee:d4:73:a4:ed:e2:a2:46:37:
b6:8b:f2:29:99:c7:c6:cc:43:51:13:1b:02:6a:fc:
21:1a:1d:dd:27:85:be:03:8d:77:98:7a:cb:c5:d8:
cf:10:c0:45:9e:da:8e:58:c3:25:e6:58:03:6a:79:
89:b5:d0:56:92:74:7c:f7:72:19:9b:8f:88:af:5c:
44:2a:8f:9e:e3:05:6a:07:33:e2:8a:c6:23:50:3f:
58:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:ED:B3:AD:D5:04:D9:BD:13:CD:30:1C:2D:2C:92:AD:63:AE:06:4B
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363439303a3a2f34342d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6490::/44
Signature Algorithm: sha256WithRSAEncryption
58:6c:29:45:84:be:19:1d:31:16:5c:cd:4a:01:6c:b0:2d:cc:
b5:59:c0:57:c9:b2:3f:3d:14:ed:fb:fe:05:5c:1d:5d:f3:75:
60:41:d6:94:ec:67:f9:02:2d:eb:89:42:40:ed:76:8d:61:f6:
29:c9:ca:dd:c2:cf:a2:66:02:78:31:a1:9c:69:45:54:43:cc:
d7:29:c7:e5:a6:10:05:09:55:97:63:49:29:89:0f:e5:9e:ad:
29:ed:30:49:a2:65:12:7b:ed:7d:f4:1f:9e:81:28:f3:b9:85:
7e:40:ff:5a:8f:6e:54:ac:6f:9d:66:0d:41:ac:6f:2d:ec:7c:
24:da:ac:3f:60:3c:6a:4d:82:b0:f9:c0:67:f5:76:ef:e1:6f:
c6:20:81:68:6a:d4:7d:2c:c0:6a:e3:aa:fa:1f:77:6f:d4:96:
41:71:3c:4a:fa:58:69:9d:f2:56:01:5f:8a:92:ed:61:9f:74:
29:50:73:51:6c:b3:e9:9c:ab:75:a8:5c:63:3e:7e:d3:27:4d:
19:de:7d:13:83:fb:df:9b:5a:7e:c3:90:fd:e7:02:87:92:e1:
73:76:37:f4:2c:d2:ad:72:be:3f:0f:3f:6a:62:cc:3d:70:39:
b9:8f:54:72:67:4e:98:72:b5:c2:22:15:52:67:f7:02:a6:e9:
77:47:04:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:46:59 2025 by rpki-client