Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363739303a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363739303a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: L76kY0KNQlJLyZdedMZ4O7izrbZ8w8y27r2xZHqhiSU=
Subject key identifier: E3:02:48:32:DF:71:C9:DA:5E:E3:89:FC:49:55:06:20:5C:F3:B0:3D
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 6C395E916D5D43CF06D5AAEC77885963FA28372D
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363739303a3a2f34382d3438203d3e203136393039.roa
Signing time: Thu 16 Jan 2025 19:32:58 +0000
ROA not before: Thu 16 Jan 2025 19:27:58 +0000
ROA not after: Thu 15 Jan 2026 19:32:58 +0000
asID: 16909
IP address blocks: 2a14:7584:6790::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 01 Feb 2025 21:49:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:39:5e:91:6d:5d:43:cf:06:d5:aa:ec:77:88:59:63:fa:28:37:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Jan 16 19:27:58 2025 GMT
Not After : Jan 15 19:32:58 2026 GMT
Subject: CN=E3024832DF71C9DA5EE389FC495506205CF3B03D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:6c:fb:61:78:eb:b0:98:66:22:6a:87:fe:6f:
97:81:82:5d:83:15:d0:5a:b0:fa:87:53:7f:43:fc:
58:b0:db:f4:ae:ff:84:ec:35:37:20:e3:cc:40:2c:
17:9e:88:8c:29:0b:0f:88:a9:e3:06:9d:3e:77:50:
b7:dc:0c:81:93:b1:7b:ff:84:3d:a2:1b:c0:5d:c1:
63:da:93:cf:e3:e5:ce:12:c7:be:41:13:41:4d:90:
18:c9:4a:97:f5:57:c9:ff:87:20:cd:84:bd:cb:7d:
09:ef:e9:6b:09:ba:0f:53:d7:6a:1b:c1:fc:7f:df:
09:8c:3e:30:6a:86:26:ab:f7:26:5f:52:ab:a8:95:
ae:4a:e1:6e:03:4c:a7:14:45:6e:85:d4:a7:a8:d4:
11:be:fb:ce:cc:be:c2:5a:01:03:aa:7d:a6:1f:0f:
3c:51:17:1e:01:34:9e:41:18:35:b3:a3:ae:d0:99:
f2:e6:be:e3:ed:2d:76:a1:52:65:1d:df:b5:1f:69:
1f:2e:41:c8:1f:1e:64:9b:31:0b:56:9c:fe:de:c8:
4f:d6:29:32:8e:47:fc:96:e2:3b:43:01:d5:a7:8c:
51:c0:09:d5:8d:e4:32:65:c0:44:e7:a4:61:9a:73:
47:72:bb:c2:55:5b:42:45:40:b0:29:55:32:75:aa:
f5:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:02:48:32:DF:71:C9:DA:5E:E3:89:FC:49:55:06:20:5C:F3:B0:3D
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363739303a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6790::/48
Signature Algorithm: sha256WithRSAEncryption
85:02:74:61:49:45:55:0e:ce:9a:8d:4e:27:bc:2f:cd:02:45:
e4:1b:e6:35:68:82:43:c6:0e:4f:45:05:65:7f:59:46:8c:ad:
ef:f7:56:34:be:bd:3e:0b:14:48:1a:03:b2:af:19:64:26:9d:
e4:24:08:1a:92:df:4d:3e:d6:d4:87:c6:4f:e3:68:9c:a7:a2:
f3:da:da:39:4d:17:3f:a2:2c:32:ae:5c:98:a4:f6:47:ec:86:
a6:a3:2b:dc:bb:99:42:3f:4b:46:b9:9e:ae:52:1d:b5:8e:07:
97:aa:af:99:d1:dd:b3:a4:8a:65:f0:74:98:af:ed:2f:88:00:
d0:3f:eb:a2:26:4c:54:01:3d:4f:80:70:78:f2:16:6c:47:e8:
39:15:30:32:89:be:1a:bc:d5:1e:9c:e6:23:0c:24:bd:cd:c6:
60:18:19:03:79:16:1e:32:1e:43:66:58:63:70:e2:26:4a:2c:
81:4d:e9:4d:54:d5:f0:97:c4:aa:f9:5c:4c:1d:d7:74:63:d4:
5d:23:5c:66:2e:1f:1f:25:f0:51:84:36:d2:66:0d:67:20:30:
78:40:3b:a6:f8:b6:51:c0:b4:ed:4d:43:c3:81:2f:d8:b8:c4:
0e:a8:94:9d:f0:8e:99:3b:d4:b0:63:e6:ea:e7:e3:c5:61:20:
ea:b4:fc:db
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUbDlekW1dQ88G1arsd4hZY/ooNy0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NCMjZGNzY0MkZENkI0Q0JGMzVGQkVFNDU1RjFFRkIw
QzlGMEE0NTAeFw0yNTAxMTYxOTI3NThaFw0yNjAxMTUxOTMyNThaMDMxMTAvBgNV
BAMTKEUzMDI0ODMyREY3MUM5REE1RUUzODlGQzQ5NTUwNjIwNUNGM0IwM0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCNbPtheOuwmGYiaof+b5eBgl2D
FdBasPqHU39D/Fiw2/Su/4TsNTcg48xALBeeiIwpCw+IqeMGnT53ULfcDIGTsXv/
hD2iG8BdwWPak8/j5c4Sx75BE0FNkBjJSpf1V8n/hyDNhL3LfQnv6WsJug9T12ob
wfx/3wmMPjBqhiar9yZfUquola5K4W4DTKcURW6F1Keo1BG++87MvsJaAQOqfaYf
DzxRFx4BNJ5BGDWzo67QmfLmvuPtLXahUmUd37UfaR8uQcgfHmSbMQtWnP7eyE/W
KTKOR/yW4jtDAdWnjFHACdWN5DJlwETnpGGac0dyu8JVW0JFQLApVTJ1qvUxAgMB
AAGjggJoMIICZDAdBgNVHQ4EFgQU4wJIMt9xydpe44n8SVUGIFzzsD0wHwYDVR0j
BBgwFoAUfLJvdkL9a0y/NfvuRV8e+wyfCkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMS83Q0IyNkY3NjQy
RkQ2QjRDQkYzNUZCRUU0NTVGMUVGQjBDOUYwQTQ1LmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdm
MzgyNC8wLzdDQjI2Rjc2NDJGRDZCNENCRjM1RkJFRTQ1NUYxRUZCMEM5RjBBNDUu
Y2VyMIGqBggrBgEFBQcBCwSBnTCBmjCBlwYIKwYBBQUHMAuGgYpyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMS8zMjYxMzEzNDNhMzczNTM4MzQzYTM2MzczOTMwM2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzEzNjM5MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoUdYRnkDAN
BgkqhkiG9w0BAQsFAAOCAQEAhQJ0YUlFVQ7Omo1OJ7wvzQJF5BvmNWiCQ8YOT0UF
ZX9ZRoyt7/dWNL69PgsUSBoDsq8ZZCad5CQIGpLfTT7W1IfGT+NonKei89raOU0X
P6IsMq5cmKT2R+yGpqMr3LuZQj9LRrmerlIdtY4Hl6qvmdHds6SKZfB0mK/tL4gA
0D/roiZMVAE9T4BwePIWbEfoORUwMom+GrzVHpzmIwwkvc3GYBgZA3kWHjIeQ2ZY
Y3DiJkosgU3pTVTV8JfEqvlcTB3XdGPUXSNcZi4fHyXwUYQ20mYNZyAweEA7pvi2
UcC07U1Dw4Ev2LjEDqiUnfCOmTvUsGPm6ufjxWEg6rT82w==
-----END CERTIFICATE-----
Generated at Wed Feb 5 06:43:40 2025 by rpki-client