Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363833303a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363833303a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: sHNSQTBrLfwQkohfgq/QIA5Mv2j6HZRDLATPNvsCP8Y=
Subject key identifier: AE:8B:CD:7B:8B:B7:9D:64:4C:ED:C0:DF:F5:10:7D:3C:07:4D:46:79
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 11CECEB72CC4BBED2EB317452C97FC2851448BEA
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363833303a3a2f34382d3438203d3e203136393039.roa
Signing time: Thu 19 Dec 2024 20:47:58 +0000
ROA not before: Thu 19 Dec 2024 20:42:58 +0000
ROA not after: Thu 18 Dec 2025 20:47:58 +0000
asID: 16909
IP address blocks: 2a14:7584:6830::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 24 Dec 2024 20:48:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:ce:ce:b7:2c:c4:bb:ed:2e:b3:17:45:2c:97:fc:28:51:44:8b:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Dec 19 20:42:58 2024 GMT
Not After : Dec 18 20:47:58 2025 GMT
Subject: CN=AE8BCD7B8BB79D644CEDC0DFF5107D3C074D4679
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b8:e5:09:a2:49:13:37:da:07:03:50:cb:1e:
95:87:83:48:21:89:9b:ba:70:c7:62:96:c4:ba:d3:
3f:ee:20:e2:8c:e7:27:b9:56:ac:a7:f1:9d:ec:d5:
0f:ca:50:03:8f:b3:1a:18:54:03:e3:62:95:8e:2f:
7b:72:3e:19:42:af:9f:a3:b7:65:d2:b0:d1:c4:ce:
0a:c1:bc:b4:2a:82:2b:b8:d7:95:3d:d9:ca:5d:c7:
59:5b:13:1b:d5:6a:30:ce:a7:ea:67:e6:82:e7:05:
61:b0:6f:0f:90:7c:1e:ff:e4:55:26:1f:bb:f0:83:
70:e7:44:14:6c:53:7d:5b:f3:82:a0:7b:ab:30:21:
76:0a:f3:fc:f7:c6:89:02:ab:70:51:06:80:f5:e3:
75:34:52:99:95:32:eb:95:fa:30:37:a4:53:50:e4:
cf:52:45:93:8e:3f:af:45:2d:34:bd:a9:78:a4:61:
6a:cd:5a:b4:8f:f1:ea:10:3d:96:d6:22:d4:c4:e3:
11:a4:ab:95:65:f9:ac:75:e1:08:cd:8c:e4:06:41:
50:53:47:5d:50:3f:03:ea:20:5d:fc:7e:84:d7:58:
95:e0:d5:2e:22:a1:00:07:dd:b2:9b:59:f6:dd:dd:
f6:ca:3d:b7:fc:95:36:6c:69:4a:16:24:5a:83:11:
1a:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:8B:CD:7B:8B:B7:9D:64:4C:ED:C0:DF:F5:10:7D:3C:07:4D:46:79
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363833303a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6830::/48
Signature Algorithm: sha256WithRSAEncryption
19:d8:51:5a:35:ff:8d:c4:ed:bb:08:d8:9d:d4:8a:ed:24:09:
78:26:95:4a:e2:cd:15:45:ef:e1:53:43:1f:31:13:69:c7:85:
23:61:e3:89:f7:88:53:b2:e7:25:37:fb:05:fc:44:89:9a:58:
0b:75:37:b0:f8:48:94:aa:0b:dc:3b:30:db:12:1b:09:d0:e1:
7e:48:31:eb:fb:4e:01:a5:95:5e:28:40:ec:65:2d:8a:35:2e:
9c:55:aa:c4:29:47:af:b0:98:93:e6:67:ec:1c:5f:ac:e8:96:
6e:75:d6:3f:12:50:97:a0:75:9c:f5:49:3d:26:3c:56:37:6e:
b2:95:44:2f:02:db:94:40:f1:41:92:a5:33:c0:77:7e:bc:fe:
96:14:fa:94:51:f2:42:eb:4f:fe:29:e1:c1:4a:99:e4:28:ec:
03:a9:67:e3:e4:c0:74:e2:b6:f1:5c:13:a2:81:be:45:0e:05:
72:4d:e0:00:69:a4:55:c4:ca:78:04:8d:1d:2c:22:2d:39:85:
75:d8:e9:b4:21:37:70:72:9d:b3:c0:c7:cd:ea:93:b4:34:d6:
96:1b:fe:2a:22:46:cc:e8:c6:d5:74:4d:3a:cb:12:15:4f:dc:
e4:68:7a:a2:7e:ae:8a:a9:3e:8f:05:6a:f6:35:7e:ff:6e:7c:
e8:a3:b7:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:50:25 2025 by rpki-client