Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363536303a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363536303a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: AqZn4d1c0bCArDfoSFD7fueOunbBHfICIZVmr1nq9HQ=
Subject key identifier: 36:8E:E4:7D:B6:12:FE:50:90:D6:81:08:2E:0D:9E:34:73:2C:02:6C
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 7876DC72B03304A5C37CE8F0B1D4B3E021DBE242
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363536303a3a2f34382d3438203d3e203136393039.roa
Signing time: Mon 06 Jan 2025 20:21:30 +0000
ROA not before: Mon 06 Jan 2025 20:16:30 +0000
ROA not after: Mon 05 Jan 2026 20:21:30 +0000
asID: 16909
IP address blocks: 2a14:7584:6560::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 01 Feb 2025 22:21:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:76:dc:72:b0:33:04:a5:c3:7c:e8:f0:b1:d4:b3:e0:21:db:e2:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Jan 6 20:16:30 2025 GMT
Not After : Jan 5 20:21:30 2026 GMT
Subject: CN=368EE47DB612FE5090D681082E0D9E34732C026C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:04:ed:3b:7b:b2:60:be:1d:46:2a:25:ea:fb:
14:ce:bb:d1:a9:a5:d8:f0:96:6d:b4:07:d1:24:f3:
7c:83:1e:dc:07:e8:2d:dc:0f:f8:eb:58:e7:6f:fe:
4a:80:04:63:52:61:4b:9b:5d:21:67:24:f1:da:a5:
b3:ea:f1:57:4c:62:a8:ba:5c:58:e2:7d:9e:98:70:
d6:eb:09:f7:f0:47:5b:07:ca:49:13:dd:c8:05:99:
3b:38:cd:93:65:89:cd:98:58:67:e7:aa:37:2d:6b:
c7:f6:48:2c:7d:53:3d:c4:ca:25:9b:5f:a0:a2:4d:
cf:a6:6f:24:70:43:58:2e:af:8d:3a:4c:eb:9e:37:
ce:66:66:a6:a4:0a:42:7e:9f:1c:b0:58:79:dc:44:
cd:9a:25:38:c6:4b:b5:3a:e2:35:7f:b1:cb:16:27:
d9:3e:14:12:63:6e:a7:4f:03:52:88:04:e4:e1:25:
ff:13:af:b3:21:c9:d7:34:6e:30:0d:3d:c5:ec:6e:
19:47:a6:78:c1:77:cc:e1:08:fb:fe:8c:4c:fd:d8:
cf:0e:18:2a:db:91:fc:a7:22:23:a3:1e:22:6b:bd:
0f:49:57:9a:63:37:b3:6e:7c:d2:1a:d3:fb:ec:d2:
3f:70:90:42:ca:d1:c0:1d:ee:5a:d7:16:c4:19:80:
b5:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:8E:E4:7D:B6:12:FE:50:90:D6:81:08:2E:0D:9E:34:73:2C:02:6C
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363536303a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6560::/48
Signature Algorithm: sha256WithRSAEncryption
42:94:8b:f9:77:5f:31:76:1f:6f:62:64:74:26:db:46:61:64:
02:4b:a5:c8:8c:2b:47:49:5d:f0:66:11:42:82:99:2d:1c:c9:
3b:b6:eb:63:96:09:b1:b5:0b:da:58:0d:cd:5e:71:12:aa:01:
d0:07:80:06:ff:dc:5f:20:7e:88:5b:80:9d:ce:8c:b4:51:ae:
ac:3a:e6:92:5d:4c:f4:86:9d:63:aa:ee:d7:e9:1f:0f:f4:7b:
58:af:e3:38:35:27:1f:51:f2:64:20:5f:cd:da:dc:13:8c:1b:
58:ca:89:43:e3:4a:d0:70:86:8f:04:95:9e:c9:13:19:11:22:
9c:86:7b:3f:93:96:eb:e5:7f:73:82:49:fe:ab:33:63:1a:c6:
22:28:ea:f4:f6:83:93:a2:d1:f7:bc:5a:fa:b5:5e:84:9d:03:
db:5b:73:3f:27:83:12:5f:51:77:e5:91:7a:48:c5:1c:29:31:
31:34:f0:9a:a1:49:4f:52:58:1e:a3:c8:00:2c:a4:28:2f:e8:
93:9f:5f:44:19:b4:38:94:58:32:38:f9:90:6d:e0:53:3e:50:
ef:eb:85:58:4c:fe:d0:cc:93:f2:bb:df:65:48:9c:1c:46:57:
4f:74:32:7f:23:62:66:2f:87:be:68:22:38:6a:fd:c2:71:aa:
9e:25:d7:ae
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUeHbccrAzBKXDfOjwsdSz4CHb4kIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NCMjZGNzY0MkZENkI0Q0JGMzVGQkVFNDU1RjFFRkIw
QzlGMEE0NTAeFw0yNTAxMDYyMDE2MzBaFw0yNjAxMDUyMDIxMzBaMDMxMTAvBgNV
BAMTKDM2OEVFNDdEQjYxMkZFNTA5MEQ2ODEwODJFMEQ5RTM0NzMyQzAyNkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDBO07e7Jgvh1GKiXq+xTOu9Gp
pdjwlm20B9Ek83yDHtwH6C3cD/jrWOdv/kqABGNSYUubXSFnJPHapbPq8VdMYqi6
XFjifZ6YcNbrCffwR1sHykkT3cgFmTs4zZNlic2YWGfnqjcta8f2SCx9Uz3EyiWb
X6CiTc+mbyRwQ1gur406TOueN85mZqakCkJ+nxywWHncRM2aJTjGS7U64jV/scsW
J9k+FBJjbqdPA1KIBOThJf8Tr7Mhydc0bjANPcXsbhlHpnjBd8zhCPv+jEz92M8O
GCrbkfynIiOjHiJrvQ9JV5pjN7NufNIa0/vs0j9wkELK0cAd7lrXFsQZgLXNAgMB
AAGjggJoMIICZDAdBgNVHQ4EFgQUNo7kfbYS/lCQ1oEILg2eNHMsAmwwHwYDVR0j
BBgwFoAUfLJvdkL9a0y/NfvuRV8e+wyfCkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMS83Q0IyNkY3NjQy
RkQ2QjRDQkYzNUZCRUU0NTVGMUVGQjBDOUYwQTQ1LmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdm
MzgyNC8wLzdDQjI2Rjc2NDJGRDZCNENCRjM1RkJFRTQ1NUYxRUZCMEM5RjBBNDUu
Y2VyMIGqBggrBgEFBQcBCwSBnTCBmjCBlwYIKwYBBQUHMAuGgYpyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMS8zMjYxMzEzNDNhMzczNTM4MzQzYTM2MzUzNjMwM2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzEzNjM5MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoUdYRlYDAN
BgkqhkiG9w0BAQsFAAOCAQEAQpSL+XdfMXYfb2JkdCbbRmFkAkulyIwrR0ld8GYR
QoKZLRzJO7brY5YJsbUL2lgNzV5xEqoB0AeABv/cXyB+iFuAnc6MtFGurDrmkl1M
9IadY6ru1+kfD/R7WK/jODUnH1HyZCBfzdrcE4wbWMqJQ+NK0HCGjwSVnskTGREi
nIZ7P5OW6+V/c4JJ/qszYxrGIijq9PaDk6LR97xa+rVehJ0D21tzPyeDEl9Rd+WR
ekjFHCkxMTTwmqFJT1JYHqPIACykKC/ok59fRBm0OJRYMjj5kG3gUz5Q7+uFWEz+
0MyT8rvfZUicHEZXT3QyfyNiZi+HvmgiOGr9wnGqniXXrg==
-----END CERTIFICATE-----
Generated at Wed Feb 5 06:54:16 2025 by rpki-client