Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366261303a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a366261303a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: kAPXWZDRm6Jh+aOvl5NixYPlSIJK+I/yOMgHl5GTLE8=
Subject key identifier: F2:FC:59:8B:D9:78:0F:48:01:D6:9F:2A:55:1C:8E:97:16:23:BF:9B
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 76D6C013896C6C61402720B2CAF2870B4B469EF0
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366261303a3a2f34382d3438203d3e203136393039.roa
Signing time: Sat 01 Feb 2025 19:33:09 +0000
ROA not before: Sat 01 Feb 2025 19:28:09 +0000
ROA not after: Sat 31 Jan 2026 19:33:09 +0000
asID: 16909
IP address blocks: 2a14:7584:6ba0::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 10 Feb 2025 15:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:d6:c0:13:89:6c:6c:61:40:27:20:b2:ca:f2:87:0b:4b:46:9e:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Feb 1 19:28:09 2025 GMT
Not After : Jan 31 19:33:09 2026 GMT
Subject: CN=F2FC598BD9780F4801D69F2A551C8E971623BF9B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:50:31:9d:c0:9d:a5:bc:d5:49:c2:15:4d:16:
bc:c8:9a:e0:f2:21:6d:9f:18:ab:c8:1f:be:3d:7f:
08:ff:0c:24:2b:32:05:5e:fa:d3:b2:84:30:7c:54:
3a:1f:be:16:26:ab:53:a9:e0:00:c9:ea:13:99:72:
98:48:c2:68:22:da:14:ae:35:71:4a:bb:ea:d2:aa:
fd:b7:a9:f2:55:cb:eb:38:9a:4b:f6:15:c7:b4:1a:
fd:e7:5c:db:72:12:e5:12:19:d6:6e:f3:e1:ec:b8:
fa:68:2d:38:4d:08:cc:bb:2b:7a:ac:5f:5f:f7:a1:
fb:06:1c:82:e2:df:85:99:d4:28:f1:ac:96:35:84:
a9:fe:db:8e:93:f3:47:40:fb:4c:1f:72:d3:40:e3:
3b:6a:01:48:ef:e8:02:c8:28:50:84:0e:bc:ae:58:
38:af:b5:27:ce:32:ef:ba:cd:a5:20:e8:3c:b4:0a:
47:e6:7a:75:79:b5:1b:8d:0c:85:8c:94:91:1b:77:
fd:65:c0:74:45:e1:17:74:e9:43:51:ea:c3:57:dc:
7f:47:0b:47:03:27:bd:af:9b:dd:83:62:1d:37:78:
7f:2c:53:bb:f1:87:56:4e:f4:e3:99:6d:c6:91:c5:
b5:d7:5f:3a:bd:f3:0c:9f:61:b4:c7:58:b8:11:33:
96:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:FC:59:8B:D9:78:0F:48:01:D6:9F:2A:55:1C:8E:97:16:23:BF:9B
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366261303a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6ba0::/48
Signature Algorithm: sha256WithRSAEncryption
4f:d9:4f:65:0f:d1:85:f6:d5:7c:0f:af:ea:06:47:d9:fb:e7:
db:37:12:5d:d9:ec:f9:06:e9:87:11:43:66:99:67:84:15:21:
1e:b9:23:63:cd:5c:0b:5a:81:2e:82:86:c1:47:0f:3b:e6:6b:
e4:a5:93:bd:d9:d9:3f:61:cf:b4:14:ca:3b:62:b9:d3:54:c3:
17:4d:a2:06:d5:a2:58:23:d3:45:c8:58:fd:e8:09:02:aa:c0:
e6:0e:fd:1f:52:10:27:2b:e2:e1:7b:8b:c6:4d:da:92:c6:8b:
4a:34:34:37:a6:b8:5e:a3:76:ba:f3:a9:ac:22:c7:54:e0:04:
1b:19:57:51:05:bd:e8:5a:f2:24:20:8e:aa:80:43:1c:ce:7e:
1b:45:f9:6c:37:a5:16:03:53:45:71:8d:75:98:43:52:e4:ee:
dd:3b:de:80:d3:b6:55:a0:02:47:77:a2:21:0a:a3:64:85:d8:
15:ba:49:e3:95:7d:80:c0:8c:1b:55:d8:95:27:eb:56:e9:e7:
5b:16:07:6c:c2:00:28:ac:34:0d:d5:12:a2:34:e1:9f:95:48:
44:25:f7:71:80:cd:fd:a2:3c:d6:0e:62:ff:d0:31:8f:1c:f1:
67:a8:85:24:49:af:f0:38:21:a6:67:5b:6b:e1:33:c0:b0:a4:
a8:25:d4:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:42:29 2025 by rpki-client