Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363663303a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363663303a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: /WJrJCbW47gn3H7a444yhU5CPVhJwb1FTPoZRd8qd8U=
Subject key identifier: 39:3D:8B:D7:35:10:1D:D8:63:DF:93:7D:7E:07:B5:7B:74:09:34:5F
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 16AEDB9710039D4D177B79314B1B81F7B128083E
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363663303a3a2f34382d3438203d3e203136393039.roa
Signing time: Thu 16 Jan 2025 19:31:40 +0000
ROA not before: Thu 16 Jan 2025 19:26:40 +0000
ROA not after: Thu 15 Jan 2026 19:31:40 +0000
asID: 16909
IP address blocks: 2a14:7584:66c0::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 01 Feb 2025 21:48:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:ae:db:97:10:03:9d:4d:17:7b:79:31:4b:1b:81:f7:b1:28:08:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Jan 16 19:26:40 2025 GMT
Not After : Jan 15 19:31:40 2026 GMT
Subject: CN=393D8BD735101DD863DF937D7E07B57B7409345F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:82:58:e8:ab:3e:57:ad:a0:f3:de:18:92:c6:
fe:4e:b7:2c:54:a0:8c:c5:b7:88:d2:6e:e6:01:ec:
27:0b:11:e0:1e:94:23:00:2a:76:18:d4:de:ef:89:
38:02:7a:7d:4f:e5:28:43:83:45:7c:9b:ea:aa:58:
66:2b:bd:06:7d:53:68:f4:7f:16:5b:4c:a9:c8:fb:
12:f6:d7:c8:96:c4:97:19:94:10:17:38:57:20:9d:
9c:b3:2e:e8:75:87:1e:84:ba:2d:27:bb:95:9d:81:
f1:e2:0e:b5:1b:1c:7a:df:cb:85:7d:31:6c:50:56:
9f:8c:23:96:a3:d9:f7:cd:cd:13:e9:32:86:ba:ba:
29:19:78:f6:5c:57:43:87:17:bb:6c:69:3f:af:42:
ca:3f:be:2f:6b:45:13:2f:f8:3c:af:35:4f:0d:2b:
d6:e3:5f:7e:42:4a:70:05:00:26:cb:5a:5b:a8:70:
ad:b9:53:47:5d:71:62:bc:81:7c:4b:4f:a6:e2:1e:
38:3e:ec:0c:3f:23:54:e5:8f:17:bd:81:c7:e3:8d:
a8:d2:ee:4d:84:9c:ad:a1:7a:8a:64:6c:ed:99:f6:
87:e2:f8:02:28:72:a8:a3:75:9d:d5:dd:1b:92:b2:
fd:34:48:51:8c:f6:34:9c:52:56:ed:6d:ff:cf:15:
e1:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:3D:8B:D7:35:10:1D:D8:63:DF:93:7D:7E:07:B5:7B:74:09:34:5F
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363663303a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:66c0::/48
Signature Algorithm: sha256WithRSAEncryption
64:06:fa:68:57:1a:5e:98:73:6a:06:4d:aa:87:99:8d:f2:f0:
de:91:55:44:78:54:ec:e7:53:dc:40:91:ab:5d:bb:66:7b:f4:
81:ab:91:aa:e4:dd:b3:29:9b:da:11:e4:bb:cd:93:cc:ca:12:
44:db:6a:49:d9:e4:ee:94:fa:87:c9:10:53:b6:42:90:84:72:
37:62:22:b6:e1:23:cb:ee:86:2c:79:2c:1f:ca:b8:69:55:da:
4f:6e:a0:9a:57:91:ef:a7:1b:ff:9e:d3:bd:c8:32:ea:b5:b4:
e8:23:cd:21:91:10:5c:7c:2a:a3:22:08:21:8e:96:b7:0e:87:
ac:20:c0:4f:88:43:97:59:80:4a:fd:6c:2a:c8:9c:a0:d3:e5:
19:4b:0e:62:82:13:91:61:8a:19:65:42:c1:9c:79:7c:11:28:
9d:86:5c:9b:1f:67:66:c3:5d:53:80:36:ce:69:7a:8a:45:db:
78:bf:d9:ac:d3:0d:f4:8e:64:ff:61:0c:2d:5a:73:da:d7:53:
4f:36:18:f1:b9:9a:a0:bc:6e:7b:36:d2:34:91:03:62:5d:1c:
30:9c:fc:a0:62:24:29:ff:b8:46:33:1b:4d:a7:15:3d:32:fc:
6d:7c:0a:2e:d7:0e:f8:da:c7:ef:8c:f7:f8:f3:6d:2f:22:52:
31:4a:a1:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 06:41:54 2025 by rpki-client