Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363761303a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363761303a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: fUOqAx217HR1A3b+w2T4Mi3yqf55b8zaMwg2NyL0o48=
Subject key identifier: 59:4A:9A:E8:8F:DE:2E:E3:C6:5F:55:D1:8B:3E:1D:4A:F7:ED:C0:EF
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 02F953690AC49A28DF897EBFB61831FAAA34E107
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363761303a3a2f34382d3438203d3e203136393039.roa
Signing time: Thu 16 Jan 2025 19:32:58 +0000
ROA not before: Thu 16 Jan 2025 19:27:58 +0000
ROA not after: Thu 15 Jan 2026 19:32:58 +0000
asID: 16909
IP address blocks: 2a14:7584:67a0::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 01 Feb 2025 21:49:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:f9:53:69:0a:c4:9a:28:df:89:7e:bf:b6:18:31:fa:aa:34:e1:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Jan 16 19:27:58 2025 GMT
Not After : Jan 15 19:32:58 2026 GMT
Subject: CN=594A9AE88FDE2EE3C65F55D18B3E1D4AF7EDC0EF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:2b:86:a9:4d:a3:e1:71:9b:7a:88:eb:b0:a2:
b0:4d:28:2c:81:68:46:f3:56:cc:99:01:c9:20:d1:
4a:03:cd:e1:e4:72:1d:36:f5:e9:3f:98:31:18:2e:
90:25:40:42:21:de:ae:48:6f:e6:84:b4:9b:5e:8b:
04:a7:0e:72:d4:5f:98:1c:cc:94:a2:7d:f0:27:14:
7d:ac:83:b1:81:8e:35:e1:bf:ee:1f:90:29:99:94:
1d:cb:e4:68:f3:0a:95:34:75:c5:41:cb:f8:03:b7:
0e:7e:6f:d8:36:80:bc:ef:ff:d9:2a:85:67:bd:69:
9a:42:91:83:fd:29:30:4f:c5:a5:e2:0c:c1:72:b3:
ab:cd:8e:29:6e:06:e5:49:27:ad:ca:8c:94:e3:ae:
5f:49:e2:6c:ae:85:29:bd:4b:f1:bb:57:a2:5a:ed:
6e:ce:10:7e:d5:38:16:7e:b5:28:8e:19:bb:a0:7d:
b2:52:ad:dd:e8:42:9e:9f:d4:bf:32:ef:e2:d7:7a:
17:3f:7d:16:6a:ac:12:ff:15:6b:4c:86:4d:46:35:
3b:c0:b9:58:80:23:c0:08:42:70:fd:93:4d:99:80:
e8:d5:48:62:f5:e8:db:5b:95:19:31:d5:78:6c:0e:
bb:0e:93:a8:66:a4:79:0b:39:11:17:b7:b8:f3:85:
a1:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:4A:9A:E8:8F:DE:2E:E3:C6:5F:55:D1:8B:3E:1D:4A:F7:ED:C0:EF
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363761303a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:67a0::/48
Signature Algorithm: sha256WithRSAEncryption
6d:e9:ee:e5:5d:32:17:40:fc:3d:7a:fb:ac:55:8a:f3:1f:0d:
12:8f:0a:1f:2c:ca:c0:1d:d9:e0:9f:69:f1:be:e2:55:b6:a9:
42:e7:25:4c:55:0d:fc:8d:67:5d:60:9a:d1:22:6e:ed:51:c4:
d8:39:f5:e1:16:0a:19:26:71:a1:47:33:f6:e5:16:50:39:cb:
2e:90:af:b3:1d:aa:9e:37:4d:12:8b:3c:77:7d:e4:c2:22:3f:
70:81:c5:b7:51:f7:b6:6e:5e:39:3f:ff:b2:b0:d1:db:b0:19:
8e:09:b6:a2:e5:d0:0a:b2:40:9f:eb:61:e7:2f:4b:4c:18:35:
e4:11:e0:47:8f:50:a0:04:56:50:4e:16:06:af:7b:3c:6a:a1:
20:bd:ff:c9:62:b1:d8:66:91:cb:fd:41:fc:d7:60:61:ff:cc:
dc:d4:d0:b7:f7:df:d7:0f:b0:77:92:40:54:8b:df:df:da:02:
30:93:d5:2e:01:89:ef:0f:36:89:32:c2:67:66:7b:73:5e:73:
c3:8e:94:67:4f:da:64:1f:d2:84:e0:d1:1e:ba:ee:c1:0f:5e:
ba:92:39:df:3c:65:23:68:64:53:b0:e6:63:0d:3c:09:68:72:
d8:b7:2d:04:af:96:61:3d:17:9f:9a:71:53:7a:87:b2:96:5a:
ff:22:ff:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 06:56:49 2025 by rpki-client