Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363830303a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363830303a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: MCuVnD+dFLIN4AR7D85JP0q4YFBBh3U+SoW0fJBBH3c=
Subject key identifier: 42:A9:FF:B1:69:C1:B4:98:7B:1D:A2:61:54:62:12:D2:FA:B9:67:1A
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 3F0DA92BF9B3BF25B7CFC4C6C30E4B953F3BDE2B
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363830303a3a2f34382d3438203d3e203136393039.roa
Signing time: Thu 16 Jan 2025 19:33:39 +0000
ROA not before: Thu 16 Jan 2025 19:28:39 +0000
ROA not after: Thu 15 Jan 2026 19:33:39 +0000
asID: 16909
IP address blocks: 2a14:7584:6800::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 01 Feb 2025 21:48:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:0d:a9:2b:f9:b3:bf:25:b7:cf:c4:c6:c3:0e:4b:95:3f:3b:de:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Jan 16 19:28:39 2025 GMT
Not After : Jan 15 19:33:39 2026 GMT
Subject: CN=42A9FFB169C1B4987B1DA261546212D2FAB9671A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:a6:7a:de:0f:75:d1:e6:75:90:d1:c4:1e:a1:
52:f8:6a:09:62:ad:73:4e:c2:82:86:91:93:3a:76:
4f:f4:e5:0a:03:21:48:f3:5a:10:ed:fd:7c:ff:bc:
e0:36:f2:99:79:37:0e:1b:fb:4a:aa:94:7d:78:cc:
23:71:95:f8:b1:4e:20:58:9a:08:62:b9:9a:19:94:
09:cf:a5:a1:ed:78:d9:55:21:25:43:57:e7:1d:0e:
24:21:20:27:8b:7f:46:d0:79:d4:17:12:c3:83:16:
46:1e:46:8e:e0:d2:7d:94:0c:07:64:89:c0:c7:22:
4f:5e:7a:61:27:93:40:a4:53:e2:0a:4e:0d:26:6f:
c2:47:fb:dd:f7:37:da:aa:d9:4d:bb:78:34:28:f9:
87:13:e9:c3:72:dd:3b:c7:4f:3c:c9:21:a8:25:3e:
aa:6a:74:b5:19:e8:d9:4d:91:19:9e:3d:44:dc:8a:
23:b2:82:12:0f:55:e0:c6:73:2b:ed:d6:ed:4f:41:
26:88:f5:65:a5:dd:25:01:f3:d0:b4:7f:d0:35:e8:
e8:c5:20:ef:15:66:82:0b:dc:f5:4d:90:14:33:c5:
fc:d9:80:be:6c:3a:dd:96:d2:3f:ab:7f:b6:59:f7:
8c:59:49:01:8e:d1:d8:cf:06:1d:f8:05:8e:6d:26:
f4:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:A9:FF:B1:69:C1:B4:98:7B:1D:A2:61:54:62:12:D2:FA:B9:67:1A
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363830303a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6800::/48
Signature Algorithm: sha256WithRSAEncryption
90:64:8f:ae:1a:1b:4e:82:b7:0a:93:92:f0:db:da:e2:65:44:
17:21:3e:d7:bd:46:fe:8d:c5:05:a3:e6:4c:26:7e:44:a6:52:
5d:5d:13:1a:43:79:b9:0b:93:f1:4e:8c:bb:0b:ff:94:51:2d:
c5:ee:e7:26:c3:6e:16:eb:6b:59:ba:cc:f5:6d:10:4c:ad:57:
4a:68:9b:28:57:4e:14:d6:4e:df:b8:af:39:a8:a8:ce:ef:db:
ca:a6:db:36:b3:67:69:ef:99:ae:52:91:9f:ea:06:6e:83:e3:
5f:3d:ec:90:ba:8e:77:78:99:a0:ea:0f:95:7d:89:51:93:54:
b5:61:b6:55:34:2b:40:b9:d3:4e:20:b4:56:d2:cf:9d:e4:5d:
93:ea:04:a7:74:ad:e0:95:13:0a:20:7e:8e:80:ed:9b:e9:a4:
8d:d9:bb:0a:37:6c:7b:4b:44:20:25:7b:19:57:62:1f:17:f5:
bb:bc:f3:6f:38:2d:02:65:10:5d:ba:f4:a1:a0:a9:ac:17:d8:
e4:bb:34:63:b2:33:74:94:aa:92:bd:eb:8d:45:ad:ad:c6:14:
57:26:20:3e:4d:d3:44:63:5a:65:6d:a7:43:3f:50:11:1a:61:
7a:a9:79:ce:05:a0:dc:bb:68:68:4d:17:85:fd:31:62:71:67:
8a:fa:78:34
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUPw2pK/mzvyW3z8TGww5LlT873iswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NCMjZGNzY0MkZENkI0Q0JGMzVGQkVFNDU1RjFFRkIw
QzlGMEE0NTAeFw0yNTAxMTYxOTI4MzlaFw0yNjAxMTUxOTMzMzlaMDMxMTAvBgNV
BAMTKDQyQTlGRkIxNjlDMUI0OTg3QjFEQTI2MTU0NjIxMkQyRkFCOTY3MUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkpnreD3XR5nWQ0cQeoVL4agli
rXNOwoKGkZM6dk/05QoDIUjzWhDt/Xz/vOA28pl5Nw4b+0qqlH14zCNxlfixTiBY
mghiuZoZlAnPpaHteNlVISVDV+cdDiQhICeLf0bQedQXEsODFkYeRo7g0n2UDAdk
icDHIk9eemEnk0CkU+IKTg0mb8JH+933N9qq2U27eDQo+YcT6cNy3TvHTzzJIagl
PqpqdLUZ6NlNkRmePUTciiOyghIPVeDGcyvt1u1PQSaI9WWl3SUB89C0f9A16OjF
IO8VZoIL3PVNkBQzxfzZgL5sOt2W0j+rf7ZZ94xZSQGO0djPBh34BY5tJvT1AgMB
AAGjggJoMIICZDAdBgNVHQ4EFgQUQqn/sWnBtJh7HaJhVGIS0vq5ZxowHwYDVR0j
BBgwFoAUfLJvdkL9a0y/NfvuRV8e+wyfCkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMS83Q0IyNkY3NjQy
RkQ2QjRDQkYzNUZCRUU0NTVGMUVGQjBDOUYwQTQ1LmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdm
MzgyNC8wLzdDQjI2Rjc2NDJGRDZCNENCRjM1RkJFRTQ1NUYxRUZCMEM5RjBBNDUu
Y2VyMIGqBggrBgEFBQcBCwSBnTCBmjCBlwYIKwYBBQUHMAuGgYpyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMS8zMjYxMzEzNDNhMzczNTM4MzQzYTM2MzgzMDMwM2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzEzNjM5MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoUdYRoADAN
BgkqhkiG9w0BAQsFAAOCAQEAkGSPrhobToK3CpOS8Nva4mVEFyE+171G/o3FBaPm
TCZ+RKZSXV0TGkN5uQuT8U6Muwv/lFEtxe7nJsNuFutrWbrM9W0QTK1XSmibKFdO
FNZO37ivOaiozu/byqbbNrNnae+ZrlKRn+oGboPjXz3skLqOd3iZoOoPlX2JUZNU
tWG2VTQrQLnTTiC0VtLPneRdk+oEp3St4JUTCiB+joDtm+mkjdm7Cjdse0tEICV7
GVdiHxf1u7zzbzgtAmUQXbr0oaCprBfY5Ls0Y7IzdJSqkr3rjUWtrcYUVyYgPk3T
RGNaZW2nQz9QERpheql5zgWg3LtoaE0Xhf0xYnFnivp4NA==
-----END CERTIFICATE-----
Generated at Wed Feb 5 06:50:10 2025 by rpki-client