Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363564303a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363564303a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: z9QWEma5RePnzK5AJnKDF7k7ErtPWRbU2k28ozLsfq4=
Subject key identifier: 6D:78:27:58:E2:B0:AC:CF:64:31:BB:73:B7:69:C7:9B:A8:53:05:25
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 4CBAB9D605F22B121A9907C15047C07EEDDCB7CF
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363564303a3a2f34382d3438203d3e203136393039.roa
Signing time: Tue 14 Jan 2025 14:22:12 +0000
ROA not before: Tue 14 Jan 2025 14:17:12 +0000
ROA not after: Tue 13 Jan 2026 14:22:12 +0000
asID: 16909
IP address blocks: 2a14:7584:65d0::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 22 Jan 2025 13:07:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:ba:b9:d6:05:f2:2b:12:1a:99:07:c1:50:47:c0:7e:ed:dc:b7:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Jan 14 14:17:12 2025 GMT
Not After : Jan 13 14:22:12 2026 GMT
Subject: CN=6D782758E2B0ACCF6431BB73B769C79BA8530525
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a1:ab:c6:70:55:17:fc:4d:94:9d:31:c4:3c:
0d:c8:90:a9:f7:a1:02:92:7f:17:13:f9:bd:29:bb:
32:e4:30:b1:a8:07:b4:9f:db:16:7d:0b:5d:a2:f9:
0e:e7:dd:cc:93:d8:74:8e:9b:ee:3d:51:e8:45:d0:
bb:2a:07:de:f9:5b:3e:f0:1a:56:43:ee:65:76:4d:
d7:f9:7d:5e:6f:63:23:3d:e9:6d:3d:50:e9:a1:7c:
3d:2e:b6:ac:56:4a:6c:b3:9d:51:68:58:81:37:6e:
bd:f5:db:c0:36:d0:c8:df:09:e4:15:9b:da:c3:ef:
50:14:50:5d:66:18:bb:fa:27:47:80:e1:b5:fb:f4:
19:fa:ef:b8:a5:70:f8:46:ce:7d:17:19:40:6b:b1:
e5:82:0b:07:31:23:af:c7:d1:24:84:4e:72:c4:9b:
dd:96:ac:9f:58:d6:80:97:0a:25:ce:05:94:dd:b2:
1c:29:5b:53:97:f0:2c:a1:78:4e:fd:6b:b6:71:2d:
e9:cf:15:a5:b1:dc:50:e4:8f:5e:48:61:2a:e9:c3:
e1:c9:d9:c4:75:95:8d:9d:8d:d5:e3:9a:2e:8c:64:
93:e5:db:4d:11:de:09:e5:38:9d:55:92:88:67:8f:
7c:c5:a8:2d:e2:da:68:d9:b2:b4:0a:7c:6a:eb:d5:
24:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:78:27:58:E2:B0:AC:CF:64:31:BB:73:B7:69:C7:9B:A8:53:05:25
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363564303a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:65d0::/48
Signature Algorithm: sha256WithRSAEncryption
18:bb:0f:63:cd:1f:76:b5:02:be:a0:31:6d:23:a4:bd:c6:68:
f8:38:f3:d9:9d:8f:ad:4e:87:f3:95:56:87:e9:2e:d3:95:cb:
50:27:33:7f:f5:f5:22:0b:2d:79:52:57:5c:7f:d7:1d:b2:21:
ea:cc:e0:52:4d:4d:4b:31:d2:6d:56:e0:9d:3a:0b:7d:2e:e4:
00:63:6d:05:b4:47:c0:88:21:10:bc:a7:96:9f:74:f0:97:81:
ca:a2:52:e0:9c:e4:42:63:ac:9a:48:c3:67:f8:2b:da:56:94:
33:78:e9:84:e5:a0:fc:1c:f5:25:c2:1c:24:9d:8c:ef:be:05:
f2:f8:2d:c8:ca:6c:b5:5e:f0:9b:52:88:ab:f8:c4:6e:b0:f4:
dd:b4:80:fc:79:92:0f:e9:ef:01:09:ef:34:12:39:ed:93:ce:
f1:58:ae:98:a1:fd:29:2d:14:10:e0:ec:11:42:b2:7d:df:f8:
98:8e:a3:c4:ba:3e:24:1c:67:3a:ae:3e:9b:bb:72:5b:4a:4a:
4b:18:4a:80:86:92:f8:f2:55:18:c4:3c:f5:26:71:12:1c:3c:
5d:8d:44:69:c2:ea:6a:ee:70:e5:d9:55:e6:77:6b:71:f5:39:
2b:9a:ed:2e:0c:b7:b8:57:7f:f6:27:fe:b8:de:39:24:37:d8:
67:f1:7c:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 06:43:08 2025 by rpki-client