Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363635303a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363635303a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: +iTojrWWeXzDqk/sr28K18Kiu6rW1dplvnGmFKMDG7M=
Subject key identifier: 3E:AC:06:55:32:F6:F1:3A:4B:A1:DF:46:81:3A:B8:C5:06:91:9A:0F
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 3D22E6A4D61F4C5FBC6C14900ABE8DD0E8211EEF
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363635303a3a2f34382d3438203d3e203136393039.roa
Signing time: Thu 16 Jan 2025 19:30:56 +0000
ROA not before: Thu 16 Jan 2025 19:25:56 +0000
ROA not after: Thu 15 Jan 2026 19:30:56 +0000
asID: 16909
IP address blocks: 2a14:7584:6650::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 01 Feb 2025 21:48:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:22:e6:a4:d6:1f:4c:5f:bc:6c:14:90:0a:be:8d:d0:e8:21:1e:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Jan 16 19:25:56 2025 GMT
Not After : Jan 15 19:30:56 2026 GMT
Subject: CN=3EAC065532F6F13A4BA1DF46813AB8C506919A0F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b0:61:3e:cc:5b:d0:39:c6:36:23:e2:5a:8e:
b3:89:70:d0:ae:e6:7f:68:cf:e0:23:77:65:59:8e:
46:96:40:5a:34:8b:ec:a3:e6:3f:e0:5d:c9:fe:da:
c5:ab:0a:dd:15:01:88:7f:4a:48:1c:08:43:4b:96:
94:67:76:fa:49:5f:ee:d4:5d:18:e0:88:12:ed:5e:
8a:bc:be:12:46:85:55:f8:f1:c2:3a:63:5d:5e:51:
fc:06:f4:3d:d2:c3:44:59:60:b9:2f:04:c5:a2:15:
aa:de:27:f9:fa:74:f7:22:bd:31:64:a5:15:9d:ec:
db:b7:06:a5:5e:10:10:09:a9:8a:52:78:8f:f1:c4:
fa:84:fd:aa:42:ad:6f:ab:ba:14:eb:b2:51:12:ec:
4a:62:e6:8c:cd:65:ff:83:ba:e7:96:96:c0:6a:71:
36:50:24:94:bd:38:3d:6d:37:92:eb:3b:8b:1c:60:
79:63:ef:65:2c:82:9c:55:bb:ff:8b:f9:c9:91:1f:
6e:31:68:69:8a:ba:73:6a:68:b1:f2:04:5d:14:93:
7d:b3:72:24:42:50:c3:71:f1:01:b0:d7:8e:e7:34:
89:f7:3d:fc:7b:d1:cc:05:b4:8a:91:d5:4e:6b:5c:
20:78:c4:5c:cb:88:cb:53:cf:76:78:30:82:83:82:
e3:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:AC:06:55:32:F6:F1:3A:4B:A1:DF:46:81:3A:B8:C5:06:91:9A:0F
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363635303a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6650::/48
Signature Algorithm: sha256WithRSAEncryption
47:d9:27:c7:b8:5f:8b:a1:5b:a0:57:7b:2b:60:3e:3c:fe:da:
e8:0c:a7:e3:a1:88:78:13:a3:10:e2:95:b1:76:a9:b2:da:1b:
4a:42:90:a8:fc:9e:f0:04:25:0d:3b:2d:c3:51:d3:c1:21:9a:
d2:67:56:df:d5:7b:56:c7:0b:18:12:9c:6d:19:34:c8:24:3d:
20:4c:99:4f:2a:f4:76:4e:39:96:e4:f2:82:fd:63:3c:1b:b9:
28:5a:06:ee:42:a1:74:ea:95:e2:5c:44:1a:99:b3:d9:98:e1:
50:0c:df:ec:16:ad:61:20:18:6b:69:8c:ff:03:d5:83:c3:d0:
6a:cd:ed:5a:35:a2:82:0c:5e:7b:56:bb:ee:cf:c2:63:a6:53:
0b:5a:5b:9e:5f:bd:13:96:ce:a6:d9:43:68:37:e4:6d:a2:ec:
9c:6d:4a:ae:04:6f:be:52:89:84:3b:07:f2:31:4f:c6:cf:00:
e1:34:6d:db:44:73:04:de:00:16:8b:b0:bb:ad:8d:71:fa:70:
21:54:65:46:62:87:be:01:f1:bb:cd:25:69:80:f9:12:fe:c7:
e1:8e:ae:c0:b3:44:7c:7b:5f:ee:06:79:09:ed:02:48:f7:1b:
5f:03:c7:f3:f0:70:dd:c2:d3:2a:c2:78:f7:a7:c7:da:7f:4e:
42:64:0f:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 06:56:10 2025 by rpki-client