Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363765303a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363765303a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: ql1bLWJ0ALgJShtkB2orKK7Pas57+zub+wUetQtijgQ=
Subject key identifier: D3:2F:1F:13:01:AA:A6:27:2A:D5:29:10:D4:37:CF:28:27:0D:0F:0F
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 2125AA9FF317F12F05F815C976AF22C215325CFC
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363765303a3a2f34382d3438203d3e203136393039.roa
Signing time: Thu 16 Jan 2025 19:33:38 +0000
ROA not before: Thu 16 Jan 2025 19:28:38 +0000
ROA not after: Thu 15 Jan 2026 19:33:38 +0000
asID: 16909
IP address blocks: 2a14:7584:67e0::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 01 Feb 2025 21:48:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:25:aa:9f:f3:17:f1:2f:05:f8:15:c9:76:af:22:c2:15:32:5c:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Jan 16 19:28:38 2025 GMT
Not After : Jan 15 19:33:38 2026 GMT
Subject: CN=D32F1F1301AAA6272AD52910D437CF28270D0F0F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:61:69:58:76:05:be:d2:85:42:bc:47:b3:4d:
47:00:74:a2:1c:46:52:79:8e:c0:de:ea:95:15:dd:
b9:6e:a7:5a:34:d7:fc:57:da:d3:d3:dc:7a:7f:c3:
08:f6:77:b7:c1:78:b1:6e:3d:f8:12:d1:ea:33:ad:
85:eb:b8:86:89:dd:3e:3d:91:d9:ad:f5:dc:36:6d:
b7:3a:fd:8c:f9:09:47:f4:f8:e1:14:bc:89:e7:2e:
44:85:97:0a:29:fa:94:33:75:a3:8a:be:19:9b:81:
c3:80:8a:62:bb:ba:26:f1:0f:cb:af:e7:65:82:56:
63:b6:a6:fc:0b:0f:de:eb:41:60:a0:7d:10:19:ba:
01:47:81:74:6d:ea:f2:b6:00:ea:c1:8f:d1:d4:d4:
ae:c6:46:de:23:a7:0b:ed:23:80:bf:d7:47:4b:00:
d3:12:52:04:6b:4f:cf:fa:7f:f4:26:ea:51:4d:f0:
6b:84:7e:70:18:c7:de:04:b6:b9:1b:46:66:b7:c6:
ba:35:dc:d2:be:a0:42:cf:05:c6:b2:b7:ca:ea:c3:
4a:76:57:6d:ae:23:71:f9:d2:bf:a1:6e:84:a2:19:
c1:8e:2a:06:1b:4d:98:c1:b1:44:dd:dc:17:97:8d:
07:72:16:c5:8b:37:72:18:7a:03:fb:03:52:02:33:
7a:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:2F:1F:13:01:AA:A6:27:2A:D5:29:10:D4:37:CF:28:27:0D:0F:0F
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363765303a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:67e0::/48
Signature Algorithm: sha256WithRSAEncryption
67:aa:74:10:0c:2e:f2:14:01:9c:39:d1:ee:eb:40:06:26:07:
91:92:9b:6a:99:09:4d:41:5c:0c:4a:37:ec:a6:9d:ed:12:e3:
ee:2e:57:4b:a8:7f:aa:d0:d3:16:31:58:7c:ad:c6:fb:cb:e1:
6e:6a:be:70:35:7e:72:15:61:b2:57:fa:f2:b0:c0:dd:5f:48:
da:96:65:08:b2:a3:64:9d:3e:dc:b9:45:91:3d:e6:1b:97:c0:
d9:7e:73:6f:d5:e6:93:db:47:3b:fd:ea:64:77:42:13:73:31:
a5:90:37:f0:54:a8:f4:27:3b:88:b5:1b:fc:12:39:cb:e2:8a:
c4:46:09:16:4c:0b:fc:53:70:bd:e8:f0:ef:df:9b:5b:c6:23:
cf:79:3c:ab:27:f8:a2:a3:88:c5:01:31:76:1e:76:15:fd:16:
58:75:e3:df:ad:fc:30:58:62:94:4a:9f:e0:db:62:62:57:ad:
fa:57:09:b3:5f:d1:9b:91:05:0e:17:fc:86:e1:66:83:b4:51:
50:db:99:c7:b9:bd:a0:ee:2f:30:fa:d5:5d:d0:52:e0:13:c7:
71:d9:06:c5:3a:ee:f9:36:1c:4a:7a:45:2c:f3:32:1c:b5:a0:
47:93:be:a0:18:1a:89:7b:4e:2c:90:97:1d:14:50:15:78:ff:
26:e6:75:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 06:38:05 2025 by rpki-client