Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366133303a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a366133303a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: 7/W4g/vdQ3gY/br4Nz7nVrnRYG9dkClgPIpnWItyDQo=
Subject key identifier: 99:BF:2C:A4:9B:4E:A7:C9:9E:C5:3D:F2:DE:1F:98:E3:17:76:9D:36
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 5AE2E3E7974E8F95F8015543A01711B6825F3105
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366133303a3a2f34382d3438203d3e203136393039.roa
Signing time: Wed 29 Jan 2025 17:52:10 +0000
ROA not before: Wed 29 Jan 2025 17:47:10 +0000
ROA not after: Wed 28 Jan 2026 17:52:10 +0000
asID: 16909
IP address blocks: 2a14:7584:6a30::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 01 Feb 2025 22:22:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:e2:e3:e7:97:4e:8f:95:f8:01:55:43:a0:17:11:b6:82:5f:31:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Jan 29 17:47:10 2025 GMT
Not After : Jan 28 17:52:10 2026 GMT
Subject: CN=99BF2CA49B4EA7C99EC53DF2DE1F98E317769D36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:22:75:dd:07:79:96:0d:1a:ff:7d:6e:e9:4e:
8d:92:fd:75:a3:95:00:c8:21:a3:b0:0b:fd:da:c8:
2e:fe:12:f8:6f:d9:90:9d:b8:6e:31:5e:b1:5c:cb:
18:c2:f6:d1:b4:0a:b5:8f:3f:a0:ef:85:de:07:4c:
95:1a:24:23:7d:04:d8:c3:6c:c7:15:ed:41:f6:39:
a5:76:80:4e:59:ca:4b:7c:a3:27:79:e9:4c:e9:76:
53:71:56:4a:10:fb:4d:6b:16:5e:6f:d4:21:96:a4:
44:b3:c7:65:19:cb:71:40:5c:0d:6a:65:1a:e6:21:
5b:b6:ca:e6:f0:58:12:82:4f:b3:d9:be:28:c2:71:
47:0a:ca:f0:07:00:72:06:61:71:ce:e5:bf:3a:e0:
fc:c7:da:ec:19:72:ab:45:60:88:4d:cb:c5:93:bb:
bf:55:24:62:6f:c6:35:d5:e7:8f:3d:d6:7f:a2:ff:
73:1f:25:45:c6:1b:6e:0a:d6:48:fa:9e:7c:d1:77:
8a:32:eb:45:b4:63:d7:81:5f:48:4f:51:9b:1a:c4:
0a:0e:c9:f4:f4:cb:b0:c9:43:4f:2f:9e:67:fb:4a:
e8:05:9e:49:7b:04:06:28:3a:3c:26:d9:0d:38:9d:
6c:71:00:59:69:75:52:1b:b2:2c:d1:42:bd:d8:da:
91:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:BF:2C:A4:9B:4E:A7:C9:9E:C5:3D:F2:DE:1F:98:E3:17:76:9D:36
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366133303a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6a30::/48
Signature Algorithm: sha256WithRSAEncryption
11:47:b7:81:98:c1:63:c5:50:59:c4:ce:7c:74:d0:f7:41:a6:
69:0e:04:cf:02:b8:64:9a:d5:87:f1:b1:d3:b5:ea:52:d6:99:
0b:d4:84:e2:d8:18:b5:31:a9:35:fb:b4:cb:44:35:bf:e0:13:
85:76:aa:07:17:25:70:bf:ec:93:a2:dc:2a:6f:7a:b1:c9:35:
4c:82:de:46:b1:6b:af:e3:ad:61:b7:7c:36:7b:9a:03:29:1c:
e5:5a:bb:8d:05:31:b9:cf:5d:16:af:c7:70:27:2b:b4:57:2f:
4c:81:b3:04:0b:70:84:6e:d9:77:35:9d:72:17:87:69:d8:62:
6e:7f:8c:8b:78:f8:24:75:ff:eb:8c:22:fe:04:c6:47:5d:23:
79:cb:8f:c9:2e:f0:69:fe:e3:0e:1c:55:a5:2a:94:97:92:d4:
66:40:74:88:eb:93:f0:0e:78:29:e4:35:be:53:39:fd:8c:b8:
89:4a:96:44:a8:06:0c:58:af:53:d2:c7:b3:79:aa:09:f0:43:
21:18:d4:b6:d8:8c:cd:47:2e:03:70:43:30:28:3c:34:45:fc:
5e:0e:a1:bf:10:d0:0b:18:d4:ff:24:ed:02:f8:7c:0f:28:4c:
c9:ff:2f:30:8e:67:0b:25:f2:cb:61:bd:ed:d3:d0:8f:45:75:
1a:b1:7d:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:47:11 2025 by rpki-client