Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363562303a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363562303a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: KXfnp/D8ZIjN5HJhVJ+6dbuoDkKnNXd17sE6xBHbcf8=
Subject key identifier: 27:E0:16:18:1F:6A:F6:CD:A1:77:9B:93:72:0C:AA:CA:C5:A5:86:44
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 0EE8F41E240E98654B435B8009692FCF667774F8
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363562303a3a2f34382d3438203d3e203136393039.roa
Signing time: Tue 14 Jan 2025 14:22:11 +0000
ROA not before: Tue 14 Jan 2025 14:17:11 +0000
ROA not after: Tue 13 Jan 2026 14:22:11 +0000
asID: 16909
IP address blocks: 2a14:7584:65b0::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 22 Jan 2025 12:32:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:e8:f4:1e:24:0e:98:65:4b:43:5b:80:09:69:2f:cf:66:77:74:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Jan 14 14:17:11 2025 GMT
Not After : Jan 13 14:22:11 2026 GMT
Subject: CN=27E016181F6AF6CDA1779B93720CAACAC5A58644
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:cf:ea:15:f1:94:31:67:01:67:88:92:73:c8:
30:2f:78:4d:d5:c0:19:73:b8:a3:98:98:31:b8:d2:
b3:4b:bf:a7:7e:72:0c:bf:c2:f0:5c:77:14:6e:54:
53:4f:56:87:7f:e1:c8:b7:b5:1a:3f:cd:49:d0:9a:
7b:c9:24:63:0f:76:bf:91:17:09:a0:c8:cb:8a:df:
04:17:a7:7a:56:07:97:52:98:84:31:e3:5f:4c:7d:
a8:97:b2:84:84:fc:98:fc:3b:53:e0:03:06:00:cf:
e5:8c:25:d6:5b:85:d7:34:88:84:83:cb:3e:26:c1:
21:fd:cc:a4:9f:0e:52:e7:10:21:11:ad:89:cf:0d:
29:67:70:fa:a1:22:02:5c:32:16:35:5f:67:f6:80:
12:ee:a4:8d:fd:14:54:11:2b:1a:21:00:d1:94:f1:
73:42:8d:eb:43:76:69:d2:0d:9e:3f:4f:1a:1f:4d:
33:f8:6f:e0:fb:06:7b:37:1b:fb:0b:52:55:99:71:
ed:51:df:0b:3c:51:a2:35:3e:4a:4d:26:a7:0a:ea:
6c:33:b9:3f:1f:7d:41:59:2f:03:02:6c:b9:ec:5a:
bb:62:48:59:b8:28:87:11:3e:9c:c8:bc:2b:71:1b:
85:c7:fe:f5:87:c4:9a:70:03:24:eb:05:dc:11:a3:
60:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:E0:16:18:1F:6A:F6:CD:A1:77:9B:93:72:0C:AA:CA:C5:A5:86:44
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363562303a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:65b0::/48
Signature Algorithm: sha256WithRSAEncryption
2a:36:ea:a0:bf:a0:8c:4e:5b:10:55:6e:ee:00:64:85:82:8b:
1e:13:44:e6:ed:13:2b:a3:df:7f:83:a9:0c:66:75:6e:ef:c5:
89:25:23:14:7f:91:d4:64:78:48:28:5b:73:ec:5d:48:bd:66:
e3:dd:7e:e4:2b:1b:99:b0:b0:cd:f3:b0:75:84:2f:49:05:4c:
5c:32:38:df:3a:6a:ff:ae:76:36:db:fe:3d:40:00:04:18:e7:
29:5c:27:73:e2:66:65:b4:72:14:5d:9e:61:0c:70:16:6a:e0:
10:ca:95:c5:d8:d0:3f:c7:e3:0c:d4:d6:fa:ca:26:3c:5e:22:
28:93:f6:79:6f:7a:a5:98:9f:02:2b:e0:48:cb:49:71:0a:58:
a7:ac:8e:48:50:ac:55:18:54:6f:d0:ef:29:85:a4:ed:d0:b7:
9b:39:ea:97:c3:4e:2c:0d:b8:2b:78:e9:d7:f5:f1:47:58:36:
31:90:72:dd:d7:e3:37:20:c0:a5:97:13:b0:6b:8e:f6:48:fc:
09:5b:0e:90:c9:9d:24:13:79:99:42:0d:53:c0:b1:9a:f2:73:
7a:b6:af:70:25:50:58:97:9a:66:75:85:88:ad:64:0f:74:d2:
45:90:68:38:b2:a7:d8:0f:31:04:80:56:6a:7e:ee:36:07:93:
27:a0:de:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 07:01:33 2025 by rpki-client