Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363834303a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363834303a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: GCSf2wLSO9mTJ8mRn7uss/i/L7R2EE+59Iy/THUfDLM=
Subject key identifier: 63:CD:9D:3A:BB:9C:82:10:50:66:83:84:2D:5C:45:DC:4C:65:08:99
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 046EB52E2C95036D0C3B667932254A5397417480
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363834303a3a2f34382d3438203d3e203136393039.roa
Signing time: Sat 21 Dec 2024 20:33:36 +0000
ROA not before: Sat 21 Dec 2024 20:28:36 +0000
ROA not after: Sat 20 Dec 2025 20:33:36 +0000
asID: 16909
IP address blocks: 2a14:7584:6840::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 29 Dec 2024 15:39:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:6e:b5:2e:2c:95:03:6d:0c:3b:66:79:32:25:4a:53:97:41:74:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Dec 21 20:28:36 2024 GMT
Not After : Dec 20 20:33:36 2025 GMT
Subject: CN=63CD9D3ABB9C8210506683842D5C45DC4C650899
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:a4:29:f7:a0:e1:55:1a:2c:57:97:8b:e0:ed:
cf:43:94:f5:a6:86:c0:cf:05:3a:be:46:ab:10:9f:
b0:ec:41:db:f8:2e:79:80:cf:2f:a0:46:f1:55:4d:
f8:2f:37:7e:d9:9d:00:48:d7:fa:51:c4:80:4c:d9:
ba:ac:fe:d6:82:be:51:fb:0e:59:4d:1c:a9:8a:85:
08:a6:56:18:f8:1a:4c:c2:44:53:01:1f:1a:4e:43:
ef:cb:ea:6d:d9:eb:3d:d9:b8:de:7a:55:17:f2:84:
fd:78:3b:dc:61:a9:82:b9:85:87:1a:89:c4:80:c7:
cf:5b:9d:cd:f8:18:df:2e:25:2b:d1:00:bb:96:92:
08:5c:c5:af:be:44:22:50:e8:83:dd:39:4d:c7:78:
fe:6c:04:4f:49:2b:8c:8d:d9:ce:1e:d9:4c:be:48:
1a:85:fc:d5:b0:5b:c7:50:35:40:b8:78:2d:1a:4a:
6b:18:5d:c7:9d:05:e5:aa:50:33:3c:a9:26:2b:99:
2c:01:3f:7c:91:7b:bd:6f:49:1e:01:ad:dd:2e:6a:
b9:f6:78:8b:c7:7b:f8:7b:15:b8:02:be:26:7c:3d:
4a:b9:c1:0b:ce:91:29:92:3b:50:92:23:75:a8:2a:
94:33:c1:67:7f:bb:81:c0:b9:08:ad:3e:19:ea:19:
c1:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:CD:9D:3A:BB:9C:82:10:50:66:83:84:2D:5C:45:DC:4C:65:08:99
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363834303a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6840::/48
Signature Algorithm: sha256WithRSAEncryption
53:09:83:26:43:ec:a1:14:7a:35:38:75:61:71:db:12:aa:b1:
ff:28:28:f1:12:d7:9a:8c:1d:9d:aa:41:61:bd:d5:9a:35:ee:
80:8c:66:83:da:ef:74:61:2f:a5:f4:94:a4:5a:cb:df:b2:da:
10:7b:fd:25:15:7f:fa:30:ec:14:e1:b2:67:14:e8:db:e5:84:
97:53:03:b0:78:b2:6f:af:0a:dd:4e:3c:9c:b1:98:11:a7:b2:
b2:98:71:f5:af:86:41:67:48:4d:23:1e:43:fa:c2:ae:a5:90:
a3:80:f0:78:72:37:6f:11:d0:a1:6a:7e:86:87:cd:cb:16:12:
b3:7d:aa:f1:76:e8:90:9d:04:73:ca:7f:75:71:a9:5e:ff:4b:
b3:b1:67:6e:bf:dd:b8:1e:74:b3:ff:0b:0c:0e:f3:bd:75:7d:
5f:30:4c:b7:6f:72:f2:8c:ed:9f:8e:2a:76:56:3a:30:a8:8d:
c1:c3:20:ac:ac:fc:b0:60:03:02:30:64:0d:2e:3f:c3:b9:f6:
82:c6:c8:3d:1c:59:9c:b3:af:03:76:ee:ad:be:f6:a5:54:d2:
df:99:b9:f4:97:da:3d:c8:7f:c4:07:4d:df:25:a0:68:76:4b:
f1:0d:48:8a:05:de:9c:d5:a1:8e:4e:d4:1a:78:69:fb:3c:71:
17:f6:5c:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:50:39 2025 by rpki-client