Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363734303a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363734303a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: 2LIy3A0yl2qvozXh8sG3O6HX0QXglVcqkon/hAdDFJw=
Subject key identifier: 03:02:70:2C:59:5A:3F:73:17:92:25:8E:9C:1E:42:38:12:BD:89:76
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 2947075D29668A1D1D04FACBE03AE39DDD6DD56A
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363734303a3a2f34382d3438203d3e203136393039.roa
Signing time: Thu 16 Jan 2025 19:32:17 +0000
ROA not before: Thu 16 Jan 2025 19:27:17 +0000
ROA not after: Thu 15 Jan 2026 19:32:17 +0000
asID: 16909
IP address blocks: 2a14:7584:6740::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 01 Feb 2025 21:48:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:47:07:5d:29:66:8a:1d:1d:04:fa:cb:e0:3a:e3:9d:dd:6d:d5:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Jan 16 19:27:17 2025 GMT
Not After : Jan 15 19:32:17 2026 GMT
Subject: CN=0302702C595A3F731792258E9C1E423812BD8976
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:79:39:b9:68:6e:4b:68:0a:0f:91:6f:69:9d:
26:8c:93:f2:41:4c:a6:99:dd:df:17:ce:3f:be:8d:
6a:a7:64:a5:8c:8f:25:f2:80:2e:bc:90:01:56:7b:
05:14:a4:25:be:c9:be:9e:cb:c5:40:a1:cd:6a:99:
55:d6:a2:73:51:b0:88:ed:26:2d:30:7e:a8:4c:0c:
ee:7c:a2:db:8e:fa:af:e2:b9:9e:6d:c8:72:cf:0e:
b2:8c:1d:56:69:4d:71:4f:38:a1:21:40:18:11:02:
32:13:94:27:d0:c0:7d:3c:6f:38:02:c4:9b:5a:b1:
68:c7:e2:c6:47:a6:ee:3a:a0:3d:df:77:69:30:b2:
d5:bf:19:cb:ab:ad:78:dd:1d:71:cb:3f:41:f8:c7:
a4:63:32:78:7f:a0:d7:0f:d2:11:c5:55:66:17:e6:
de:ce:77:0b:fb:7a:20:82:ec:04:86:c0:0c:91:21:
1a:43:07:e8:b3:7e:f4:d3:4a:a9:a5:48:9e:4c:be:
4b:93:87:ab:ee:4d:f8:74:5f:b0:f7:b5:23:88:07:
26:94:6a:f1:2b:31:b3:a5:07:c9:f3:a7:db:43:b2:
ee:93:0e:b4:34:1a:74:3f:41:9f:0b:28:40:0e:e9:
e1:2b:81:91:3b:38:a7:c1:ed:5c:a8:41:8e:5e:a9:
e1:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:02:70:2C:59:5A:3F:73:17:92:25:8E:9C:1E:42:38:12:BD:89:76
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363734303a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6740::/48
Signature Algorithm: sha256WithRSAEncryption
44:a7:4e:fa:b7:bd:6c:38:43:84:55:1f:fe:c1:0b:f0:8a:2c:
74:0a:d3:aa:f3:23:6b:fd:95:1c:13:9d:90:91:c9:9d:b8:0d:
54:c4:2b:58:5a:16:dd:2e:72:d3:03:83:2d:9a:de:e8:5e:9d:
69:04:76:4a:4b:bb:89:d0:d6:f3:da:5b:80:b3:e1:5a:44:d3:
08:9f:4f:01:23:4b:22:0c:94:06:b8:8b:91:e0:72:31:d4:6e:
ba:d1:4b:e3:71:b7:b7:75:48:e0:2e:19:65:4e:ef:02:9a:97:
d9:2b:ef:bd:88:f6:01:b3:e1:53:11:92:f6:67:ce:36:b4:27:
e0:f9:bb:fe:a1:74:9c:f5:17:e7:b9:91:90:d5:76:af:0b:2f:
34:d1:8b:0c:c9:55:ef:0e:74:b4:76:9d:f9:e4:7a:08:9d:bc:
ea:8d:50:87:9c:6a:76:d5:49:d9:60:e8:d9:6b:16:23:f5:b5:
17:58:10:d2:e1:f7:22:2d:4f:7e:46:49:49:d5:8e:9d:ac:a4:
db:fe:74:8c:e8:19:d6:c4:bd:0c:0d:be:83:37:ea:20:6a:d4:
9a:b2:b6:79:4b:23:71:93:fb:0a:c5:0f:25:7a:65:18:da:55:
bd:55:78:13:72:9e:f1:f7:45:44:3d:7d:62:1f:13:a5:dc:f7:
8d:09:a0:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 06:50:10 2025 by rpki-client