Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363634303a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363634303a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: UIj8HTTDZv9PwyjxsSYK0277Nse3gImg3/wSdJxrRGI=
Subject key identifier: D4:8C:B0:B1:BF:74:B5:5F:80:D7:E1:9A:CB:72:BF:C3:6E:A7:0E:5B
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 64F6AAC167836A34052A486CCD88B7E3C05B452E
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363634303a3a2f34382d3438203d3e203136393039.roa
Signing time: Thu 16 Jan 2025 19:30:55 +0000
ROA not before: Thu 16 Jan 2025 19:25:55 +0000
ROA not after: Thu 15 Jan 2026 19:30:55 +0000
asID: 16909
IP address blocks: 2a14:7584:6640::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 01 Feb 2025 21:48:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:f6:aa:c1:67:83:6a:34:05:2a:48:6c:cd:88:b7:e3:c0:5b:45:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Jan 16 19:25:55 2025 GMT
Not After : Jan 15 19:30:55 2026 GMT
Subject: CN=D48CB0B1BF74B55F80D7E19ACB72BFC36EA70E5B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b6:c9:ff:77:d6:22:3f:d2:48:e7:89:2d:64:
b5:f1:42:a2:f1:81:4e:f3:27:62:45:7e:36:be:00:
d3:28:12:f9:13:05:6a:b3:23:df:f9:8a:53:06:62:
cd:58:18:20:35:64:56:29:e4:fe:17:27:35:ca:64:
06:42:11:bc:a3:5a:ce:b2:51:13:ea:f2:a4:c9:0a:
67:fb:81:69:27:bc:24:0e:8b:68:e5:41:dd:7e:be:
9d:10:64:3d:a5:92:e5:23:76:1f:c7:79:bf:35:41:
b8:22:d8:1b:fd:62:7d:c8:17:85:b1:4d:e9:64:d3:
21:b1:41:49:65:82:76:43:d7:35:4e:6b:13:f2:99:
14:aa:8a:66:20:3e:24:74:fc:22:8b:57:01:72:24:
d7:66:83:d6:10:d8:b2:79:bd:2f:af:cc:34:f3:17:
2a:26:88:a6:93:52:c2:e4:f5:84:f5:f8:53:51:e3:
45:00:6c:39:71:86:70:d3:9b:69:ae:97:4b:23:b1:
6b:5e:e3:c4:c8:10:e7:da:8f:46:4d:a7:5f:24:a2:
71:dc:81:bb:76:f2:3a:ff:99:a3:3c:d9:5a:27:eb:
a9:c1:46:3c:22:2c:67:a4:67:27:77:57:81:28:bd:
b2:0f:3d:bf:74:93:1a:8d:5b:ab:d2:6f:07:d6:40:
32:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:8C:B0:B1:BF:74:B5:5F:80:D7:E1:9A:CB:72:BF:C3:6E:A7:0E:5B
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363634303a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6640::/48
Signature Algorithm: sha256WithRSAEncryption
61:24:7b:43:e1:96:34:b6:b1:53:7a:2d:9c:03:ce:b2:7e:55:
1d:d6:52:0e:08:79:10:b0:68:0b:0b:f2:e9:19:50:f2:f8:9b:
93:f9:55:1d:02:cf:75:f2:c3:42:5d:48:39:ee:30:5f:c5:ed:
29:6f:37:8e:bb:81:9f:0b:a7:b7:fe:10:37:a9:65:11:95:22:
38:23:2c:ec:8b:66:a8:d5:51:4d:99:d5:1e:9b:14:39:70:03:
96:17:d9:e7:65:8f:b5:65:e7:e3:36:ac:e4:ad:b9:74:05:b3:
d9:82:a8:0c:94:3d:64:f6:38:19:e8:b4:a4:49:24:ca:82:db:
a2:4d:2f:41:77:a2:8d:73:09:7a:a9:60:2f:eb:f6:a7:d9:cd:
84:fc:d3:0e:0c:7c:70:e1:1b:5a:70:30:b1:35:79:cf:b1:de:
5e:f9:58:a9:40:79:27:57:03:0a:94:dd:59:06:0e:ee:01:62:
f3:55:14:f6:c1:de:b9:b9:8e:36:fd:4d:f1:1d:db:95:63:79:
f8:d7:e9:80:c9:48:b1:13:33:f7:a8:0b:25:4a:00:e5:b0:ad:
bb:c9:76:6e:b9:97:6c:1a:bf:c0:e5:07:42:1b:ff:12:f6:99:
85:31:d3:eb:77:7c:08:dd:aa:73:2c:9c:1b:12:6d:5d:12:7d:
45:2b:ba:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 06:46:10 2025 by rpki-client