Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363561303a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363561303a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: zM/nokfL1cZ2hMFWVSSUSQBz8KNNDmi7B0GRpHlLmeE=
Subject key identifier: 9E:81:1D:57:05:00:29:73:8C:89:06:E2:A9:C5:1D:74:AC:4B:B2:C7
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 58F04397528ACB70BE07C96422D6E429816FC079
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363561303a3a2f34382d3438203d3e203136393039.roa
Signing time: Tue 14 Jan 2025 14:22:10 +0000
ROA not before: Tue 14 Jan 2025 14:17:10 +0000
ROA not after: Tue 13 Jan 2026 14:22:10 +0000
asID: 16909
IP address blocks: 2a14:7584:65a0::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 22 Jan 2025 12:32:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:f0:43:97:52:8a:cb:70:be:07:c9:64:22:d6:e4:29:81:6f:c0:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Jan 14 14:17:10 2025 GMT
Not After : Jan 13 14:22:10 2026 GMT
Subject: CN=9E811D57050029738C8906E2A9C51D74AC4BB2C7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:6f:8b:53:48:35:fc:c8:bc:ba:10:3e:e4:ff:
74:46:3a:61:80:a8:ca:32:72:02:fe:30:1e:a9:7f:
25:16:6b:ad:7a:a5:e4:02:71:e7:14:03:4b:c4:91:
f2:03:9f:31:08:0a:29:ad:8b:93:a3:36:d8:07:0d:
c3:d8:40:c8:6f:68:0b:03:dc:f4:5c:8e:59:9c:6f:
43:42:96:49:6c:36:c2:4e:06:d6:dd:b1:0d:24:15:
26:23:17:98:4c:54:8f:ef:70:27:db:dd:dc:ac:fd:
96:73:84:11:08:ce:df:ae:7d:39:1b:be:44:c7:74:
fb:f5:4c:f8:ce:7d:82:ed:da:19:c2:ef:ac:47:36:
e1:59:1a:ce:a9:e7:c2:41:fa:25:ab:d3:3e:66:f0:
b7:92:12:9f:4a:a1:1f:01:b1:2b:fc:1d:8e:a1:55:
69:91:d4:8e:0f:6a:29:4c:d5:dd:3b:2d:f2:1a:a1:
46:cb:69:79:5a:f8:b1:26:ad:a4:97:32:a7:23:b0:
1b:94:3c:c1:e9:60:02:15:37:b8:2e:27:5e:12:fc:
f0:fe:b6:8e:49:a8:d6:7e:c0:e0:6d:15:12:8d:06:
bb:f7:13:02:b6:c3:41:db:5b:91:3c:59:8b:ad:11:
f9:26:60:32:82:83:33:a8:c3:24:5b:04:f2:c6:44:
ec:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:81:1D:57:05:00:29:73:8C:89:06:E2:A9:C5:1D:74:AC:4B:B2:C7
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363561303a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:65a0::/48
Signature Algorithm: sha256WithRSAEncryption
3c:ce:4f:2c:f0:1c:df:99:23:6e:a1:50:75:81:f8:0a:f1:0f:
5b:23:74:3d:03:4f:24:30:1b:bc:80:3c:af:c9:58:be:a4:db:
a5:ed:79:84:96:85:60:66:1c:d8:ef:e1:c0:13:c3:94:8b:a0:
d6:3b:c8:77:aa:64:47:f1:d8:21:a3:45:63:4a:00:1e:e1:94:
e5:93:84:59:3d:80:67:c5:73:00:da:6a:c7:70:ef:79:60:ce:
b4:73:f5:f8:db:a0:92:e1:19:07:6c:79:a2:c8:34:7e:37:69:
18:fb:d6:85:96:6e:ed:36:65:d4:c1:b0:f0:5d:f6:b4:3a:9b:
bc:d8:75:ac:07:d5:64:42:b6:d8:b4:21:04:00:d5:4d:1d:6a:
ea:9c:a8:7d:a8:54:09:87:e7:f6:54:16:2b:c4:27:09:26:a3:
74:4b:46:63:b8:2b:2f:27:7a:d0:f8:c0:3c:07:64:6c:0e:39:
2e:9f:bf:10:0f:fb:18:bc:91:70:66:99:b3:90:b9:4f:ee:b5:
9c:8c:e1:3b:3f:48:3e:41:83:b6:b9:52:b5:29:3e:79:fc:07:
60:ad:0a:c2:aa:02:9f:e5:38:ee:59:54:ca:7b:6e:c6:6f:f6:
67:14:9c:15:20:44:da:d9:07:ae:05:b3:87:44:26:75:4d:67:
19:27:e0:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 07:02:06 2025 by rpki-client