Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363534303a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363534303a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: E0dtlGbs6FGgAb2OW7k2D6tHo7efFZNl8jp8DXkv3LY=
Subject key identifier: C3:25:FD:2E:E9:D0:63:C8:AF:61:8D:F1:C7:4C:ED:93:0B:82:80:05
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 6B0E26E6C60220B225B32FDED6BC2CC2183DEBA2
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363534303a3a2f34382d3438203d3e203136393039.roa
Signing time: Mon 06 Jan 2025 20:21:28 +0000
ROA not before: Mon 06 Jan 2025 20:16:28 +0000
ROA not after: Mon 05 Jan 2026 20:21:28 +0000
asID: 16909
IP address blocks: 2a14:7584:6540::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 22 Jan 2025 12:32:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:0e:26:e6:c6:02:20:b2:25:b3:2f:de:d6:bc:2c:c2:18:3d:eb:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Jan 6 20:16:28 2025 GMT
Not After : Jan 5 20:21:28 2026 GMT
Subject: CN=C325FD2EE9D063C8AF618DF1C74CED930B828005
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:e7:1f:2e:1b:78:c3:75:c0:94:21:5f:5b:3f:
39:93:66:ad:91:5f:ab:75:cf:12:5e:d1:4c:9d:f9:
e1:74:ce:5a:96:a2:3e:62:78:92:2a:8c:cd:71:d8:
32:7f:5e:9e:9d:97:ce:9d:b6:35:33:77:8e:a7:ac:
ba:74:02:f0:46:81:ef:8b:08:5a:11:f9:ba:a8:8c:
28:96:a1:c0:61:89:78:62:43:dc:16:f5:3b:2f:35:
e0:0a:68:c5:2e:1c:aa:41:4a:8a:4d:24:ed:43:2e:
27:4e:a6:09:d5:ab:45:7a:24:8c:6b:f0:63:75:d9:
de:96:1a:df:57:0c:30:e1:ad:f6:d3:f6:26:12:32:
1a:6a:99:69:63:95:8a:68:ad:60:de:5d:a9:5a:5a:
71:33:75:e9:79:bf:4d:ec:7b:9e:92:88:69:ad:fb:
4d:7b:59:bc:b0:56:62:a4:8e:9c:41:75:b0:ca:4a:
68:2c:eb:95:6b:56:b1:64:db:df:4f:f1:a7:30:e4:
73:6a:79:09:fd:64:da:98:0a:1d:b3:e8:23:02:ff:
69:03:eb:82:d0:1f:28:5c:34:cd:80:96:82:62:81:
88:e2:d1:e3:79:5d:c0:58:95:fe:53:1c:9f:e2:4a:
98:24:71:14:56:6b:26:e8:7a:fb:f3:bc:2b:c1:ce:
43:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:25:FD:2E:E9:D0:63:C8:AF:61:8D:F1:C7:4C:ED:93:0B:82:80:05
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363534303a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6540::/48
Signature Algorithm: sha256WithRSAEncryption
01:ee:82:83:91:d6:7b:64:a9:fb:7a:59:11:45:13:06:75:35:
51:34:42:ad:d0:83:21:7a:bb:f0:84:d1:2b:6f:2e:4c:e6:24:
c8:01:3d:74:ba:d4:69:06:f5:0f:67:7a:c0:42:9f:af:53:76:
e1:bc:d9:27:5d:50:ed:ba:70:47:d7:10:66:f8:5b:0d:54:7f:
f2:73:0c:cc:8b:12:f2:3d:78:98:2e:6d:82:3f:7c:8c:87:2b:
1f:21:ea:78:95:ad:b5:35:24:c2:d3:c0:d5:69:a5:16:87:0e:
b1:a7:53:01:af:1f:3f:42:54:54:7f:84:8b:a5:42:e5:72:21:
6d:4f:73:3c:b7:ac:10:5e:8e:80:65:e7:ad:45:e6:84:7b:fe:
10:49:33:54:78:fe:47:ff:75:71:ed:ad:9c:8d:2d:0d:64:17:
b1:80:3b:63:a6:85:2c:67:a7:19:24:09:b4:c9:f0:fb:a6:d2:
a9:23:9c:6b:09:56:9b:24:b2:6d:8e:7f:69:01:8c:90:9e:39:
4a:75:98:50:17:1a:6c:6d:04:ae:d9:e7:fc:a3:cf:b0:aa:e7:
39:04:4d:5c:d1:88:76:c1:7f:09:e8:81:74:10:2d:c3:f0:65:
79:b3:c2:33:71:7b:b0:e9:c3:9f:84:f0:92:85:85:5d:50:f8:
aa:08:ac:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 06:42:42 2025 by rpki-client