Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363531303a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363531303a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: NUpcYcChWwQcVTs9lWGyTEEw127gYX0oc2u1Oz7ZM8Y=
Subject key identifier: 93:10:D6:B3:A6:62:CF:81:08:19:26:A9:82:A4:A2:7F:9C:7D:B1:E4
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 349CC679146805F97AD159E6B0E72881780F1E1E
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363531303a3a2f34382d3438203d3e203136393039.roa
Signing time: Mon 06 Jan 2025 20:21:26 +0000
ROA not before: Mon 06 Jan 2025 20:16:26 +0000
ROA not after: Mon 05 Jan 2026 20:21:26 +0000
asID: 16909
IP address blocks: 2a14:7584:6510::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 14 Jan 2025 14:23:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:9c:c6:79:14:68:05:f9:7a:d1:59:e6:b0:e7:28:81:78:0f:1e:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Jan 6 20:16:26 2025 GMT
Not After : Jan 5 20:21:26 2026 GMT
Subject: CN=9310D6B3A662CF81081926A982A4A27F9C7DB1E4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:18:0e:72:86:d9:b3:6a:04:64:8a:a6:64:cb:
ba:7b:94:45:f4:db:d9:ad:88:89:79:f8:08:ff:bf:
de:56:49:aa:a0:ee:15:17:77:03:ac:82:24:75:94:
e5:8e:d2:64:c4:88:88:3a:e3:de:4d:f0:e2:f6:19:
ba:20:14:03:52:24:ae:c3:27:c1:03:bd:d4:71:2e:
5d:33:55:ab:b5:80:d3:bc:bc:27:be:1e:9f:17:ad:
97:0d:e7:7b:98:3b:a7:b1:07:e6:de:e5:6c:5e:90:
7d:7f:92:1d:66:71:8c:3a:33:90:be:db:4f:6d:c3:
65:b5:5b:42:50:11:da:d0:bb:20:89:fd:c1:9b:37:
69:1c:27:f1:e5:a1:c5:a9:b4:ec:9f:da:7e:1d:8d:
23:32:7a:9c:bb:34:31:35:e3:d4:40:63:09:a6:ed:
b2:d4:b2:a5:a3:7f:47:26:9b:aa:30:91:7d:33:9f:
d7:fe:50:6b:26:e1:5d:13:26:bb:70:87:a1:45:8f:
6b:57:a1:f9:b0:25:38:40:aa:66:a1:51:60:15:68:
a3:b5:ba:51:8d:d6:d7:8c:76:56:1b:29:53:65:33:
44:41:6c:91:d3:84:6c:f8:d4:18:e4:94:48:01:cb:
2f:15:67:7c:75:50:31:f4:48:f0:ec:11:78:ab:29:
a3:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:10:D6:B3:A6:62:CF:81:08:19:26:A9:82:A4:A2:7F:9C:7D:B1:E4
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363531303a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6510::/48
Signature Algorithm: sha256WithRSAEncryption
ad:e8:ea:7a:b4:21:e6:db:d3:ab:e7:e0:dc:30:1a:b0:bc:6d:
c8:00:2b:cf:e4:8f:77:dd:58:ac:42:cb:de:e4:b6:d0:dc:b1:
68:bc:8c:88:d1:f1:5f:b0:8b:71:25:e9:7e:b2:cc:28:d3:1d:
2a:98:c9:91:77:99:36:66:26:84:4c:fd:15:d7:ed:68:37:aa:
f6:81:78:fa:42:a0:fb:f3:a0:fb:25:fb:44:3f:f3:be:4a:d0:
6b:12:32:49:3d:6c:66:3e:70:84:15:93:f8:27:00:3b:4f:9c:
c3:99:0c:0b:7e:64:61:5e:56:bd:7a:14:49:eb:fa:1d:fc:f6:
c2:3e:10:10:80:3f:ab:db:bb:89:ac:93:9f:0b:19:92:86:79:
a8:9e:8f:01:d2:bc:67:bb:10:a0:07:80:0f:17:e2:e7:b5:5e:
e9:81:93:79:38:07:e8:70:a1:7d:6f:f7:d1:49:b5:d6:bd:85:
23:16:ec:1d:8b:0e:ae:56:3e:1b:49:51:5b:e5:6e:72:ba:8d:
57:ed:20:8f:23:15:51:a6:d4:e6:09:31:5b:7f:eb:af:43:f2:
33:87:81:f4:1c:00:bb:aa:e2:4c:fb:02:60:be:82:0c:6a:0b:
ac:ae:56:da:f7:2d:98:2f:c9:ee:18:af:37:99:4e:e3:67:d1:
8a:b1:57:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:42:22 2025 by rpki-client