Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366338303a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a366338303a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: tBcacqJgUZdjKtbwrOQ+n9Pv/vF6tENFjZb41T6wOyg=
Subject key identifier: C6:16:3E:05:89:AC:00:63:84:6C:BB:29:12:BE:2B:41:1F:A7:D8:F7
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 146819B18C1223ED359C8F2D8CE456DEF0919CAF
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366338303a3a2f34382d3438203d3e203136393039.roa
Signing time: Sat 01 Feb 2025 21:39:46 +0000
ROA not before: Sat 01 Feb 2025 21:34:46 +0000
ROA not after: Sat 31 Jan 2026 21:39:46 +0000
asID: 16909
IP address blocks: 2a14:7584:6c80::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 10 Feb 2025 15:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:68:19:b1:8c:12:23:ed:35:9c:8f:2d:8c:e4:56:de:f0:91:9c:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Feb 1 21:34:46 2025 GMT
Not After : Jan 31 21:39:46 2026 GMT
Subject: CN=C6163E0589AC0063846CBB2912BE2B411FA7D8F7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:a9:03:cd:3f:14:17:57:5d:37:3e:a1:da:25:
8c:7d:ec:69:a4:03:5b:16:5b:28:da:a5:94:63:c8:
4a:f4:9e:1b:3b:67:a4:70:7f:5d:7b:82:8b:e9:7b:
80:c3:a9:71:ae:da:f1:85:c5:9b:1f:e1:4c:73:35:
e4:ff:40:66:23:2e:a7:ca:a9:bd:fb:41:04:f4:1b:
8d:be:dd:8f:9f:41:81:06:23:3c:48:58:68:4c:97:
4c:5b:f5:d6:b2:c0:bd:bc:9e:33:6c:ec:b7:97:8e:
2d:5d:6f:19:e3:19:72:15:aa:b2:85:49:59:1a:a1:
19:d1:18:43:44:77:87:db:32:6a:2b:df:fd:75:cf:
4b:d4:17:52:c2:eb:79:bd:53:fc:78:72:d0:58:ec:
06:c2:e1:a1:0d:48:c0:8f:7c:a8:80:5a:df:26:73:
dd:5c:4a:8c:54:74:82:e7:db:12:8b:56:4a:27:3e:
e1:05:97:0f:37:9f:af:f3:2b:ac:ed:47:bf:47:a3:
7a:26:d2:3e:31:37:15:ac:7a:2a:a9:5c:75:0e:24:
1b:29:6e:56:90:56:88:9e:d9:d5:bc:bd:eb:f9:2b:
cb:8d:67:6d:39:29:5b:4c:48:54:10:25:f9:79:57:
4c:cb:94:de:a5:f7:64:63:6e:56:cd:a9:a2:3b:6b:
c7:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:16:3E:05:89:AC:00:63:84:6C:BB:29:12:BE:2B:41:1F:A7:D8:F7
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366338303a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6c80::/48
Signature Algorithm: sha256WithRSAEncryption
b7:8a:69:08:37:d5:52:59:ef:85:bc:7c:b9:af:b9:d1:9d:43:
46:53:01:fb:0f:aa:bc:4e:8a:8a:4c:c3:67:78:cc:4c:df:50:
f2:80:4a:82:95:f8:94:b6:80:03:2d:ac:65:be:6c:b4:0c:01:
f1:b2:a2:a8:ec:7e:94:ba:0f:89:b3:90:2c:0b:05:3c:52:a1:
7a:ff:88:4e:e1:e2:53:05:b2:af:26:6d:c8:cd:fe:24:22:d5:
a8:d1:d7:d0:14:1e:68:bb:04:27:d1:6d:20:b4:79:9f:69:03:
6e:8f:76:d7:bf:ef:9c:cf:6c:13:93:7d:d3:38:28:92:c6:77:
64:ef:34:7b:8e:9e:71:63:28:b4:ec:c3:97:de:ac:ea:b9:f9:
cb:a0:c9:1a:b8:df:2c:4c:20:30:f3:00:8f:71:1f:9d:5e:57:
20:97:17:31:57:9e:0c:26:f0:63:91:0a:f8:f8:dd:09:c0:05:
0e:e5:96:51:f9:32:84:16:08:27:6c:d5:54:83:6a:47:16:d1:
bf:fe:0a:e1:82:01:6b:4e:32:f5:ca:a7:c8:15:3b:c9:dd:11:
46:7d:85:db:30:06:a8:a6:78:74:51:d1:97:b1:47:58:59:a9:
76:21:3e:c0:1e:05:f6:88:bb:f0:35:7f:ab:cd:92:29:3c:5b:
6c:dc:d4:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:46:09 2025 by rpki-client