Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363537303a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363537303a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: cJKgciliHcQME34E5tL4KcHA5IBs/eFnT1tQoD/sqPY=
Subject key identifier: 8A:A6:5B:53:E5:3A:6E:37:A9:6B:30:22:33:C9:51:1A:2D:95:C8:3F
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 6D81BF09917390E572115A06BC26910D0BC49764
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363537303a3a2f34382d3438203d3e203136393039.roa
Signing time: Tue 14 Jan 2025 14:22:08 +0000
ROA not before: Tue 14 Jan 2025 14:17:08 +0000
ROA not after: Tue 13 Jan 2026 14:22:08 +0000
asID: 16909
IP address blocks: 2a14:7584:6570::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 16 Jan 2025 19:27:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:81:bf:09:91:73:90:e5:72:11:5a:06:bc:26:91:0d:0b:c4:97:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Jan 14 14:17:08 2025 GMT
Not After : Jan 13 14:22:08 2026 GMT
Subject: CN=8AA65B53E53A6E37A96B302233C9511A2D95C83F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:fe:92:f2:7c:14:9a:42:51:21:dd:c5:fc:94:
d7:0c:60:0a:d8:38:c1:25:8b:69:1e:f8:1f:72:15:
40:8b:6d:5d:fb:3d:81:fa:12:67:95:91:8b:c7:e3:
73:db:72:e5:56:a4:ad:5a:b0:cd:30:74:57:f9:f3:
8f:fb:72:35:04:07:0b:e9:7e:85:f2:6b:96:2a:88:
39:be:0c:49:60:e1:e7:5d:b5:24:4c:ac:b8:02:24:
2f:cd:cc:dc:81:bf:01:87:e1:d1:f3:51:8d:ef:5d:
9c:cf:51:49:27:68:57:40:ff:7e:18:55:69:dd:05:
5f:d9:05:49:6c:a0:34:62:9c:b2:16:66:16:8b:83:
72:5e:59:49:08:17:14:ee:44:c1:9f:8c:e3:70:9a:
46:4e:aa:3e:71:2f:97:f8:e9:1f:f5:41:e0:25:4d:
4d:dd:62:22:2e:9e:d6:07:5b:d1:dc:80:f3:7a:ea:
1b:fe:95:4e:51:a5:0e:83:1a:d4:74:00:a5:02:e9:
29:70:b0:be:03:2e:22:48:d7:53:0a:9c:6d:16:c1:
14:6e:e1:35:14:37:a9:78:82:45:1c:a7:10:cd:da:
a1:c4:0c:79:d3:b2:56:47:2b:d9:7c:fb:cd:93:3f:
5a:a1:0c:e0:95:ed:98:36:cb:10:9d:97:61:21:34:
c9:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:A6:5B:53:E5:3A:6E:37:A9:6B:30:22:33:C9:51:1A:2D:95:C8:3F
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363537303a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6570::/48
Signature Algorithm: sha256WithRSAEncryption
66:3a:9c:10:dc:c2:55:06:d5:ef:b1:df:7f:79:1a:06:94:79:
59:18:3f:0a:ba:df:d4:93:7d:77:b9:46:d7:78:79:d0:c3:c4:
2d:4e:c0:31:42:c1:bf:0d:16:69:dc:37:d8:77:90:4d:05:1d:
22:b6:aa:d3:c2:3b:75:cb:af:aa:70:72:37:0d:12:b1:71:91:
05:af:2b:f4:2b:f8:a5:e6:bc:ac:88:ce:dc:cf:c2:e9:89:4e:
2f:1f:00:84:39:83:88:87:9b:7a:aa:4a:7b:45:d0:f0:23:5c:
69:aa:bd:8b:09:e6:fa:ab:85:a9:4e:1a:51:02:da:ec:9d:ab:
b5:de:a3:33:53:3a:ad:4a:97:b4:59:4b:cc:2d:8d:ee:37:fe:
06:69:92:83:22:85:45:a3:e9:5a:a5:cb:17:58:74:21:28:54:
05:82:66:3d:78:10:1b:b5:33:a1:ba:34:c6:30:b8:2a:c5:9c:
16:7d:02:4a:af:f9:ce:9c:e0:58:9c:23:50:6a:c4:54:f0:bd:
dc:51:61:be:58:11:cc:a9:38:b5:91:a1:f9:65:d7:c8:24:a3:
a8:9d:32:76:c1:b2:98:33:67:82:34:fa:8a:3a:a8:e7:44:cd:
e4:7a:33:ba:35:1a:aa:28:80:01:7a:7f:99:cc:a9:f0:26:cb:
9d:ed:72:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:45:58 2025 by rpki-client