Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363661303a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363661303a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: rZZg/l/JdZu7K5ub2W2mXT40hjbjyY4CuC0i4ncydxI=
Subject key identifier: 96:9C:8E:DF:67:53:35:E0:6F:3C:FE:26:59:EC:8C:77:5B:3B:73:0B
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 511E182A3FA01E3FECDB76878526F2636F726074
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363661303a3a2f34382d3438203d3e203136393039.roa
Signing time: Thu 16 Jan 2025 19:30:59 +0000
ROA not before: Thu 16 Jan 2025 19:25:59 +0000
ROA not after: Thu 15 Jan 2026 19:30:59 +0000
asID: 16909
IP address blocks: 2a14:7584:66a0::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 01 Feb 2025 21:48:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:1e:18:2a:3f:a0:1e:3f:ec:db:76:87:85:26:f2:63:6f:72:60:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Jan 16 19:25:59 2025 GMT
Not After : Jan 15 19:30:59 2026 GMT
Subject: CN=969C8EDF675335E06F3CFE2659EC8C775B3B730B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:aa:5e:4f:84:bd:63:60:6e:6f:53:43:a0:43:
eb:74:2b:9a:87:49:ea:dd:51:51:01:18:27:d8:42:
bc:57:75:5a:58:51:8b:ee:93:da:e1:36:c1:10:33:
04:7e:ac:03:dd:13:08:7b:4d:62:7f:13:85:39:63:
54:94:7a:9c:eb:29:06:c2:80:d3:54:e3:e3:0d:4e:
31:90:37:1d:19:e8:8e:01:bd:68:cd:fd:80:66:9c:
b3:4e:44:95:e3:dd:e6:e3:39:90:d1:c2:9f:f5:9c:
c1:83:11:2e:b2:2d:04:9d:ea:cb:0d:ae:e6:41:65:
45:69:ad:1d:45:2c:bf:8f:c9:16:19:b9:7d:bd:98:
4e:5f:07:89:46:16:60:f6:5a:37:79:0e:a4:e9:5f:
20:66:ba:c6:2c:c0:bc:9b:16:b9:a8:44:d0:93:d1:
7e:34:3b:13:50:c6:d6:8f:2a:c8:6c:ad:e5:4d:0c:
ab:98:fd:b6:6b:2a:ab:ce:24:b1:03:42:5a:34:f7:
a1:6f:e7:67:09:8f:34:3f:f9:e9:9a:c0:69:bc:9b:
86:c9:05:f0:08:4d:2f:6b:4d:38:05:4b:1e:8a:43:
65:b8:40:19:d8:56:94:0e:d6:59:1e:be:33:fb:03:
e7:7c:31:0d:46:7b:29:ae:e6:74:17:82:55:87:5c:
f3:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:9C:8E:DF:67:53:35:E0:6F:3C:FE:26:59:EC:8C:77:5B:3B:73:0B
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363661303a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:66a0::/48
Signature Algorithm: sha256WithRSAEncryption
74:3a:2d:2e:6b:14:d4:14:9c:4f:54:de:d6:5a:46:f7:1e:71:
c6:65:9f:9a:aa:a7:05:42:53:2b:df:90:02:fc:00:0f:06:ce:
43:02:e6:4b:4b:02:17:49:53:01:1a:ba:a0:da:6c:d4:d6:4c:
9e:7b:23:c0:2b:73:c3:46:3f:56:03:a9:13:d2:9a:79:50:a4:
11:f0:3d:39:79:a4:d4:3e:cb:0b:c7:83:2e:9d:1c:c6:09:b7:
f9:52:c4:ea:c1:56:f4:89:09:7a:69:81:52:3e:02:36:89:f0:
d4:84:2a:2a:3c:0b:ef:28:fc:d5:74:0f:3f:3f:11:fb:63:90:
cb:b4:50:8a:25:c9:bd:01:c7:53:e0:2c:df:c9:64:13:f5:1d:
0c:16:11:6d:90:dc:18:6c:cf:67:09:35:cd:ef:ca:7f:77:43:
83:8f:4e:f5:87:4e:d6:5b:08:f6:2e:07:62:43:be:cf:92:05:
5b:1b:fc:98:52:04:77:4a:38:d6:e6:63:1d:45:8e:40:fd:2a:
94:97:8a:20:41:b8:be:ca:00:47:63:4a:91:e7:b6:cf:e5:a6:
52:f4:5e:de:af:4c:ca:b4:20:11:14:7c:88:de:da:0b:d7:0c:
73:fe:8f:fe:8e:88:e7:b0:ac:58:9d:27:57:0b:90:24:33:a8:
18:c0:4f:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 06:43:11 2025 by rpki-client