Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363532303a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363532303a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: 0weHnmyiMnupO7YyAM0woZHKUCoA1n6BJH/Nt/WZLNI=
Subject key identifier: 1B:EC:E7:C8:DD:31:88:8E:6A:67:60:C3:F2:F1:03:19:A7:F0:41:39
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 5C5490FC5CD7ACA1BE84A01D1EEC7AA11452235C
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363532303a3a2f34382d3438203d3e203136393039.roa
Signing time: Mon 06 Jan 2025 20:21:27 +0000
ROA not before: Mon 06 Jan 2025 20:16:27 +0000
ROA not after: Mon 05 Jan 2026 20:21:27 +0000
asID: 16909
IP address blocks: 2a14:7584:6520::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 16 Jan 2025 19:26:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:54:90:fc:5c:d7:ac:a1:be:84:a0:1d:1e:ec:7a:a1:14:52:23:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Jan 6 20:16:27 2025 GMT
Not After : Jan 5 20:21:27 2026 GMT
Subject: CN=1BECE7C8DD31888E6A6760C3F2F10319A7F04139
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:fa:d9:f2:e3:8f:69:2b:55:65:10:40:78:ef:
a8:6b:6b:0e:9d:e8:ef:5b:b5:eb:3d:f6:57:41:65:
fc:01:a5:79:26:4a:23:ac:16:bc:25:e0:c7:c6:21:
16:84:ce:cb:ca:9a:99:3e:18:f9:a0:46:f3:b0:35:
a5:1b:22:58:f4:a1:02:72:a7:d0:bc:a1:39:dd:74:
82:01:2e:9e:9f:c3:b5:0c:6f:e8:cf:e6:59:74:9a:
90:eb:3c:64:a5:14:7d:d5:b7:8f:c4:23:03:8d:01:
04:97:c9:6e:6b:6d:40:73:b1:35:1a:40:db:5a:3f:
c4:f7:30:6c:94:91:d1:f8:82:16:a9:fa:25:d9:8c:
aa:d8:7b:42:30:78:b5:5d:01:95:6b:b2:85:2c:58:
23:76:24:cb:d6:48:79:7d:f6:bf:7c:9d:67:55:f8:
1d:9b:7b:76:29:61:71:74:de:e6:f4:f6:40:ec:fd:
c4:be:65:1f:14:53:cb:9f:da:69:c1:fe:d9:21:62:
d4:b7:ef:cf:2d:44:ce:56:10:1b:38:86:86:fe:cf:
b9:5e:aa:0f:b6:e1:1e:4a:bb:ee:84:3b:d0:30:c5:
5c:80:7c:40:49:6c:9b:d6:59:5d:f8:ce:e8:2f:98:
a1:ec:20:e3:9e:5d:67:04:84:14:d6:fd:5d:fd:99:
31:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:EC:E7:C8:DD:31:88:8E:6A:67:60:C3:F2:F1:03:19:A7:F0:41:39
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363532303a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6520::/48
Signature Algorithm: sha256WithRSAEncryption
b1:dc:e2:e4:17:66:f4:54:00:5c:90:de:c0:6e:85:00:04:5c:
b7:da:11:46:da:ef:26:ce:14:f2:94:e4:a5:ff:d4:b0:7c:9c:
b4:48:8e:ac:22:31:47:fb:94:e5:10:09:5e:1f:fc:4b:7b:6a:
95:be:90:a4:ea:5a:dc:0b:5d:7c:6e:ef:62:3f:d3:77:4b:00:
5c:97:cb:e0:6e:b3:dc:a5:58:3f:2c:79:99:41:e6:ee:36:ee:
11:9f:95:6f:e4:9b:df:29:06:1e:bc:72:29:a7:56:45:6c:99:
b6:4e:cf:0d:21:82:65:29:b9:38:fd:83:27:f9:aa:46:0c:37:
9a:a4:01:47:14:ab:d5:7c:e9:1e:1e:30:1b:3e:8d:20:ba:08:
90:09:7b:ea:38:0b:45:dd:a8:26:8a:ad:b9:69:28:a5:2b:ee:
94:87:b5:41:dc:40:56:ec:b3:a2:f0:65:9c:7b:bc:b9:5f:7a:
86:a1:d3:76:e6:ab:6c:84:11:93:76:74:7b:83:4d:e8:eb:b9:
e7:43:8c:d1:f9:3e:36:05:68:22:c6:14:0f:e6:3a:0f:01:29:
e8:ec:8c:3b:f3:9d:c3:00:f7:63:1e:56:05:29:c2:02:86:9b:
18:97:09:71:83:55:9f:83:e9:7f:46:9f:20:26:6d:cf:0c:bc:
e6:56:18:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:44:53 2025 by rpki-client