Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366165303a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a366165303a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: SGZuIqWGNp3URjgj42iUBPa6aqnclebYZIVEMBWOIUE=
Subject key identifier: A4:10:AE:08:C8:95:E7:E3:3F:9D:D2:68:62:F6:61:B1:F7:D9:B7:81
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 6C67B6D95D35B62E7883DE009C7A0D8388AF9490
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366165303a3a2f34382d3438203d3e203136393039.roa
Signing time: Sun 22 Dec 2024 10:14:03 +0000
ROA not before: Sun 22 Dec 2024 10:09:03 +0000
ROA not after: Sun 21 Dec 2025 10:14:03 +0000
asID: 16909
IP address blocks: 2a14:7584:6ae0::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 22 Jan 2025 12:32:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:67:b6:d9:5d:35:b6:2e:78:83:de:00:9c:7a:0d:83:88:af:94:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Dec 22 10:09:03 2024 GMT
Not After : Dec 21 10:14:03 2025 GMT
Subject: CN=A410AE08C895E7E33F9DD26862F661B1F7D9B781
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:1c:e0:66:87:26:96:24:11:3c:d6:bd:44:22:
45:06:33:d1:b7:2d:9a:56:c3:db:04:db:19:6b:2d:
a1:18:88:31:54:b9:c4:fe:c3:5c:b6:27:48:09:39:
23:61:28:6b:15:c3:27:78:9b:68:c8:6f:3b:9e:3f:
1c:7a:22:f2:bf:46:a3:36:2c:46:c3:07:4d:99:1a:
ae:ea:46:02:a0:87:13:a8:c1:13:f3:98:ce:09:fc:
43:a6:bb:81:f5:53:5e:c7:b4:7e:84:0e:db:0c:60:
1e:17:15:7e:df:92:ee:72:ba:85:99:44:16:45:bb:
3c:5f:8b:e3:c5:fb:bb:30:44:22:ae:8b:51:9e:cb:
37:7d:b8:de:bb:dd:ce:ad:7b:c3:15:8c:2d:48:a6:
f3:ee:34:c2:45:38:30:d4:90:6f:22:d7:7d:ca:35:
9c:05:58:c2:81:bd:a0:e9:82:e4:07:da:d3:4e:a7:
38:5c:66:f1:28:a1:98:8b:d3:f5:1c:14:97:3c:d3:
8e:8a:d3:62:4a:1d:a7:81:e6:df:24:f2:c0:60:a9:
0f:85:13:05:6a:ef:fd:67:4d:97:66:f9:95:4a:ec:
2c:92:e0:b3:67:0e:5c:16:a1:76:4e:96:8a:e0:78:
e4:b4:10:d6:60:d9:6d:d9:07:b8:3d:a2:f2:67:69:
93:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:10:AE:08:C8:95:E7:E3:3F:9D:D2:68:62:F6:61:B1:F7:D9:B7:81
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366165303a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6ae0::/48
Signature Algorithm: sha256WithRSAEncryption
ac:0f:29:bb:18:c3:19:41:c7:4e:a9:22:ad:24:71:69:a1:48:
55:b6:ab:cf:80:6d:c3:7e:e5:5e:40:1e:f2:71:0a:80:d9:5e:
a6:a3:8f:17:21:44:5c:7a:3c:55:5b:c0:d5:b6:dd:3c:85:d3:
28:4e:15:34:d7:5b:76:10:6a:a7:9c:66:c3:35:b5:f0:73:d4:
72:55:b7:8f:e2:fe:0b:3c:25:d0:7c:3c:44:4a:88:35:94:43:
b1:63:df:ea:0f:8a:77:e3:92:0d:7d:16:fc:27:c0:f5:4b:96:
e7:60:20:25:8c:67:5b:3d:c6:49:16:3f:6d:3c:8f:c5:47:e7:
93:4c:b9:e8:9e:ab:d1:b7:61:3e:dc:83:52:2c:63:90:2a:57:
39:f4:13:07:21:ba:14:35:58:d3:0e:fd:e4:21:e2:6b:88:70:
b7:ef:9a:58:b2:16:16:42:00:a1:ae:c4:bd:4c:53:f8:11:32:
3a:08:fa:b4:30:5e:f1:39:1f:6a:bb:79:e5:ef:a0:23:94:ef:
4e:63:19:12:ab:33:af:6f:c2:93:e5:73:fc:5c:6b:78:b1:b4:
58:fd:0c:a5:3b:bb:66:d7:4c:2f:6e:54:26:66:74:8e:98:b8:
cf:a7:a7:43:48:57:96:7a:e3:05:5f:6b:56:88:3d:07:11:68:
a8:49:2b:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 06:58:02 2025 by rpki-client