Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363535303a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363535303a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: kqzz988Ro6xpSvP0PENHGeq/AeEVf3c1CsSn4idsRY0=
Subject key identifier: 2B:D3:EE:37:2C:FA:DB:59:81:D6:E9:AD:66:2A:04:11:4F:4A:1F:92
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 13C7145A447EF3D2CD3C9CE1D0AE94D1DB463E8D
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363535303a3a2f34382d3438203d3e203136393039.roa
Signing time: Mon 06 Jan 2025 20:21:29 +0000
ROA not before: Mon 06 Jan 2025 20:16:29 +0000
ROA not after: Mon 05 Jan 2026 20:21:29 +0000
asID: 16909
IP address blocks: 2a14:7584:6550::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 22 Jan 2025 12:32:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:c7:14:5a:44:7e:f3:d2:cd:3c:9c:e1:d0:ae:94:d1:db:46:3e:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Jan 6 20:16:29 2025 GMT
Not After : Jan 5 20:21:29 2026 GMT
Subject: CN=2BD3EE372CFADB5981D6E9AD662A04114F4A1F92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c0:d1:28:a4:7c:fa:cd:7f:1b:0d:6c:1c:bf:
b1:06:1c:6e:c3:6a:37:46:97:e7:e3:79:af:07:10:
34:67:a7:b5:0f:81:22:69:22:b9:fb:2b:54:ab:5b:
41:3d:ee:6f:3c:56:95:3d:fc:31:2b:ef:89:1b:92:
f0:ed:5f:9d:80:da:34:dc:84:30:9c:7a:be:20:ac:
e5:17:66:9f:57:aa:8b:95:fa:34:c3:8b:ab:85:c1:
3f:6f:80:f2:7f:46:5f:16:66:8f:08:f0:af:8d:ed:
f8:99:67:d0:be:34:74:f1:e9:e4:13:97:16:e1:1f:
a5:10:6b:e6:1a:8a:d0:a3:12:88:cf:6f:18:dc:be:
fd:d3:89:d1:c2:34:b8:66:ae:b1:d8:34:fe:da:4a:
42:a9:2c:9c:b4:0b:ef:22:35:92:95:ae:75:ab:30:
d4:d8:05:a1:d0:4f:7c:c0:ca:6c:ab:3c:9d:85:9f:
10:b3:1c:f6:71:9e:bc:97:bf:6a:a5:fc:e5:c8:17:
42:44:c1:27:4b:8f:1f:c5:c1:e7:be:ba:0a:57:eb:
48:d0:8f:b5:f3:2c:15:ab:8b:7e:cb:bf:c7:a6:ef:
b4:a1:64:c9:25:99:3e:32:41:49:b6:4b:a2:af:15:
77:e7:ca:c1:a2:0d:cb:b2:ed:bc:a7:5f:c3:4d:d6:
b7:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:D3:EE:37:2C:FA:DB:59:81:D6:E9:AD:66:2A:04:11:4F:4A:1F:92
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363535303a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6550::/48
Signature Algorithm: sha256WithRSAEncryption
1c:aa:dc:d4:31:06:3b:21:f1:66:af:4a:d9:09:2e:f3:eb:2c:
22:3e:9a:eb:b0:8f:cf:91:8f:bb:b6:72:0a:d1:97:9d:67:12:
68:a7:81:c2:79:1f:51:a5:e6:d6:db:32:42:a5:66:4a:83:36:
ab:a9:97:3a:6c:ed:a1:8f:2a:95:31:68:0d:44:a4:d9:c1:ba:
cb:a8:d4:09:d9:e5:cb:a4:92:e8:91:e1:2d:bc:8b:1b:55:67:
52:19:00:48:48:be:40:41:81:bb:71:27:b4:42:09:69:0e:40:
ad:e2:db:ba:da:a4:58:ee:5c:22:35:7d:89:5f:cc:26:eb:9f:
64:c3:c3:c3:8f:4a:cd:34:05:09:21:4d:cf:0e:a8:da:9f:9d:
48:3b:c9:e0:89:99:ea:52:14:43:0f:45:27:3c:14:90:de:07:
00:24:39:4a:1d:cd:c6:e2:f1:e5:16:98:a3:a6:28:2a:18:c1:
a5:9d:cc:35:24:dd:63:00:e1:11:00:a7:91:e4:aa:2e:bb:5f:
95:de:94:db:0b:88:61:6b:8d:60:20:21:c6:78:04:55:eb:e0:
a8:ed:c5:4b:f9:a3:58:25:d7:ab:76:73:53:4a:4e:ba:a8:87:
00:05:4f:b1:f9:27:0c:ad:dd:c8:02:b9:60:53:e0:76:0e:42:
eb:74:7b:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 06:42:53 2025 by rpki-client