Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363462303a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363462303a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: /526NnPj43Sf9Y36BU+bkRHUCfxJeT7ilehnHC3H1sg=
Subject key identifier: E7:AD:20:5A:EC:CF:7E:F5:15:BA:02:C7:5E:BD:53:87:CA:73:0F:21
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 391DFAAFEFEF2FD554F9FAE4E5C1A47495A50A37
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363462303a3a2f34382d3438203d3e203136393039.roa
Signing time: Mon 06 Jan 2025 20:20:42 +0000
ROA not before: Mon 06 Jan 2025 20:15:42 +0000
ROA not after: Mon 05 Jan 2026 20:20:42 +0000
asID: 16909
IP address blocks: 2a14:7584:64b0::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 22 Jan 2025 12:32:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:1d:fa:af:ef:ef:2f:d5:54:f9:fa:e4:e5:c1:a4:74:95:a5:0a:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Jan 6 20:15:42 2025 GMT
Not After : Jan 5 20:20:42 2026 GMT
Subject: CN=E7AD205AECCF7EF515BA02C75EBD5387CA730F21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:30:1d:9a:e2:b5:3f:df:7e:05:03:cb:0a:5e:
9f:ce:f4:2a:7e:fb:6b:81:a5:57:34:76:b9:90:56:
10:8c:bc:42:06:78:f5:ba:b7:94:c5:66:7d:ea:9a:
82:21:02:51:3e:0c:1e:b5:30:81:4d:11:f8:44:15:
cd:cb:2f:08:01:16:93:86:e1:09:45:80:66:a1:1c:
7b:79:95:50:7a:3b:ae:6c:d4:88:3f:58:61:71:a0:
46:72:31:53:93:69:0a:c2:53:53:96:ea:16:3d:75:
d2:8c:94:37:66:1e:39:0f:b4:3d:3e:7d:0b:81:16:
b6:0a:17:6e:c9:b9:af:a4:48:8d:cf:d6:c8:2e:17:
7d:02:d6:63:86:74:b3:8e:8d:b7:b0:60:ca:c9:bd:
df:98:17:1d:76:bf:0f:f7:22:93:82:2b:d1:c7:5e:
81:62:f7:bd:cb:1a:be:b1:5a:1d:70:14:2c:ab:44:
2e:d7:e1:61:26:55:71:5e:52:4d:8b:db:76:49:30:
cb:80:20:bb:9b:92:8c:1b:f2:2d:43:28:02:08:11:
52:13:56:4a:6c:ae:cc:9a:63:6f:24:c8:5d:9d:22:
70:e5:95:3f:ba:ca:8d:e1:e0:53:2a:5a:db:8f:ee:
f5:a1:4a:21:d5:45:4d:b5:a2:c5:24:22:59:6e:6b:
e4:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:AD:20:5A:EC:CF:7E:F5:15:BA:02:C7:5E:BD:53:87:CA:73:0F:21
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363462303a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:64b0::/48
Signature Algorithm: sha256WithRSAEncryption
05:b2:90:35:10:81:a4:0c:b5:52:df:da:2e:8d:80:9e:73:a6:
07:ff:db:71:53:d5:23:71:95:42:37:fd:7d:b5:8b:36:ae:3d:
8f:3d:4c:5c:eb:29:77:ab:c6:ab:57:fa:16:d6:d4:6f:8c:d7:
21:97:bc:e2:f1:06:df:8d:01:c5:77:8c:d2:e2:b9:a8:71:31:
f1:38:72:12:e6:b4:8a:9f:4a:c6:6c:b6:bd:3d:27:53:27:45:
1c:87:22:d7:a6:90:d8:90:f7:0c:9a:f9:bc:0d:e6:cf:fe:35:
a1:0b:82:98:38:29:5d:51:03:40:47:24:38:99:f3:ae:12:42:
77:fd:ce:53:c0:ea:4b:4b:9b:c7:1a:55:1b:23:fb:fb:8b:af:
ac:b5:e1:d1:7a:50:74:17:02:bc:e7:32:5b:31:ff:7d:ac:85:
f9:8d:af:19:0b:1a:09:e1:21:18:b6:77:05:02:99:ff:fa:59:
d6:63:19:47:7d:29:64:67:45:d6:ef:fa:ef:bc:ad:c4:a4:35:
c6:55:71:c2:45:35:ff:ec:06:df:40:bd:4b:8f:76:ff:18:bb:
e7:9d:f8:83:d6:1b:8a:ea:9b:bf:c7:2b:69:1a:f5:ba:69:b3:
40:8d:24:ee:f4:d0:19:a1:ae:57:74:04:25:e6:63:ec:0a:d8:
62:af:a4:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 06:54:47 2025 by rpki-client