Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363664303a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363664303a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: rVLGaQ2YynbD1+DnZSNwHnFBv4FPasXOtfLsGW5UOWE=
Subject key identifier: AD:D3:C6:E5:A8:CA:3D:07:EA:52:E3:34:18:41:BF:F6:4A:A6:2A:D7
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 6DF0C46521CF8BECBD1500C130727525E79307AD
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363664303a3a2f34382d3438203d3e203136393039.roa
Signing time: Sun 22 Dec 2024 10:13:55 +0000
ROA not before: Sun 22 Dec 2024 10:08:55 +0000
ROA not after: Sun 21 Dec 2025 10:13:55 +0000
asID: 16909
IP address blocks: 2a14:7584:66d0::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 01 Jan 2025 21:53:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:f0:c4:65:21:cf:8b:ec:bd:15:00:c1:30:72:75:25:e7:93:07:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Dec 22 10:08:55 2024 GMT
Not After : Dec 21 10:13:55 2025 GMT
Subject: CN=ADD3C6E5A8CA3D07EA52E3341841BFF64AA62AD7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:7c:ec:7a:2c:60:1a:69:02:f0:c5:44:9e:99:
64:55:05:87:c2:74:2d:71:00:b9:cb:94:f6:48:d3:
bc:50:ba:cd:a4:39:0a:30:75:76:a8:46:e9:04:0b:
b5:44:93:1f:d5:32:69:88:c1:66:40:04:27:16:62:
7c:cf:bd:13:5f:3c:8a:84:4e:90:07:b9:b0:f3:02:
e2:c4:b2:c8:ea:45:19:fd:84:ff:6c:06:c7:84:d3:
39:4a:07:0d:a6:f9:6e:4c:95:30:9d:8b:d3:f0:14:
9e:d5:6d:2a:57:a3:7b:e3:6b:68:1d:47:1b:dd:7f:
99:ac:34:b2:d7:98:24:02:d6:e3:fc:83:56:28:09:
22:9b:9e:8f:36:c4:00:2e:22:9d:72:1f:fe:9c:5c:
6c:5f:7b:86:2c:79:2c:26:5c:22:b6:f4:4c:85:0f:
eb:4d:f1:ea:46:22:82:c7:e6:7f:38:a5:80:2e:13:
af:10:d2:ad:58:d8:2d:95:1e:92:bc:60:10:07:79:
a5:17:02:36:9e:d9:3d:3c:e5:df:55:d9:c8:99:4b:
0f:36:98:6a:57:52:f8:dd:30:8c:ff:ad:40:b7:20:
d5:49:d7:0c:85:c8:4c:f8:50:fa:e6:9c:92:71:06:
a4:ae:e5:60:41:50:ca:75:c3:62:39:34:23:67:7a:
03:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:D3:C6:E5:A8:CA:3D:07:EA:52:E3:34:18:41:BF:F6:4A:A6:2A:D7
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363664303a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:66d0::/48
Signature Algorithm: sha256WithRSAEncryption
59:7a:3e:fc:a4:b1:03:a9:30:ad:19:9d:5f:23:a3:04:07:00:
4b:02:d0:68:f9:34:05:c5:6c:f6:d7:ff:4c:b1:0c:f4:a7:f9:
26:b2:c2:b1:52:e0:b4:fd:54:fd:5e:34:5d:d2:2a:81:ce:9d:
77:7d:3f:46:6e:d3:35:02:b0:dc:a7:c9:e1:78:7b:81:a7:4f:
27:20:ab:7f:80:0e:c8:9e:cc:0c:31:85:19:3c:d3:af:c8:5c:
b3:a5:ef:07:9f:0d:5e:15:87:26:14:56:04:4c:6d:3d:af:b2:
60:1a:8d:b7:a1:5c:f1:34:eb:fe:db:aa:3a:25:3f:7b:eb:05:
55:ab:97:d8:07:d9:0b:11:68:9a:18:0b:53:d7:27:f5:73:d5:
79:ce:cf:f5:7d:b4:8d:80:5d:e8:d5:09:5d:f9:97:d5:5c:8e:
cb:b5:c3:52:ff:35:c5:f3:cf:1d:09:b9:7a:42:ac:4c:0a:03:
58:c6:ec:99:42:77:cf:42:c2:dd:95:28:0c:f8:bc:5d:59:6c:
d1:17:f1:83:68:e5:f9:0b:3b:33:59:a8:78:3b:30:6b:e2:66:
d9:2c:12:1c:1d:e9:34:1f:05:4f:1e:21:59:27:72:f8:35:d4:
a6:6d:37:a4:3b:80:1c:bd:f5:1f:ba:12:b0:65:02:08:3b:69:
78:6f:dd:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:50:22 2025 by rpki-client