Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366364303a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a366364303a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: agvsn0w1T2YIyJrq+94NrGfuEYQ/Qy9ihMw50MRLsos=
Subject key identifier: 6A:E1:92:C3:FA:DF:F1:79:D8:64:DA:CB:CA:00:B9:95:89:10:3D:15
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 7E7134ACD02A353952B0E6CD49A107DFD47C309B
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366364303a3a2f34382d3438203d3e203136393039.roa
Signing time: Sat 01 Feb 2025 21:39:50 +0000
ROA not before: Sat 01 Feb 2025 21:34:50 +0000
ROA not after: Sat 31 Jan 2026 21:39:50 +0000
asID: 16909
IP address blocks: 2a14:7584:6cd0::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 15 Feb 2025 20:42:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:71:34:ac:d0:2a:35:39:52:b0:e6:cd:49:a1:07:df:d4:7c:30:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Feb 1 21:34:50 2025 GMT
Not After : Jan 31 21:39:50 2026 GMT
Subject: CN=6AE192C3FADFF179D864DACBCA00B99589103D15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:88:4f:8c:0e:f2:dc:d2:f1:57:30:1f:b8:bf:
5d:4c:19:9b:ea:0c:f8:cd:27:4a:2e:2d:af:56:0a:
6c:5c:ad:0c:c9:d2:15:27:2a:e3:9f:e9:dd:83:c5:
32:6f:36:09:68:88:57:d8:3f:cc:d4:dc:16:48:f0:
c8:82:43:ee:97:96:80:cd:18:d5:aa:61:23:16:6b:
cb:ab:fd:f0:8d:94:f7:f4:8c:e4:ae:f1:09:96:2e:
0c:4f:69:a6:45:1c:13:c5:a5:53:a1:dc:bb:38:a5:
21:81:f5:d1:84:5e:90:9d:21:03:a2:06:39:3f:2b:
e1:0f:e3:49:4b:5d:ac:de:d6:4e:53:14:dd:22:42:
8c:ba:8f:c0:1f:69:29:54:03:60:1a:70:20:6a:98:
ff:0b:af:47:23:c0:a7:1f:a9:6f:8c:75:f2:9c:16:
5f:6e:ce:8a:ee:db:36:32:f9:55:39:e3:1a:9d:1f:
ab:c5:b2:48:ed:e4:9c:48:6b:9c:46:a0:97:f1:21:
91:7e:7c:52:ed:00:56:1e:51:99:b5:df:66:cf:50:
00:92:bf:37:d3:46:bb:17:38:8f:96:41:46:9a:60:
dc:c3:cc:8a:36:39:e9:2d:93:6b:f4:ce:3e:73:32:
83:f2:a1:c6:e6:1f:73:ce:d0:a4:d0:12:45:23:ba:
76:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:E1:92:C3:FA:DF:F1:79:D8:64:DA:CB:CA:00:B9:95:89:10:3D:15
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366364303a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6cd0::/48
Signature Algorithm: sha256WithRSAEncryption
af:e0:5d:70:38:30:09:76:ef:cc:43:0b:92:1b:d2:41:c2:1e:
19:09:33:d5:13:18:5b:db:ef:bf:c5:fe:09:43:10:ca:d3:61:
67:d3:65:2e:27:ae:fe:f0:99:e9:e1:e2:e7:90:80:7a:3b:9c:
43:03:88:48:14:99:65:f4:13:28:26:c8:15:11:9f:85:52:97:
cc:37:40:82:7a:94:a0:c7:3c:ba:9f:5b:c2:ae:fc:9a:1c:40:
e0:64:ce:5e:a7:88:39:cc:18:f2:c3:b0:2f:a8:26:e1:8b:55:
3c:c0:b5:86:9c:b6:8d:25:25:8d:55:7b:d7:f4:f5:ad:07:eb:
e8:b5:15:8f:ea:73:4b:19:88:c5:3a:9f:75:d9:9e:29:d4:0f:
53:80:80:7b:22:45:4e:d1:e2:a7:85:14:20:81:fc:20:08:3a:
b4:aa:b8:72:3e:4b:01:a3:36:51:86:2b:7b:cc:60:a9:e6:5f:
87:de:f1:4c:d1:6b:31:ab:33:6c:c4:8f:06:20:68:59:9e:4d:
f6:7f:f1:bd:95:21:0e:c2:7b:c9:a0:02:4a:b3:0f:ce:11:44:
9f:6a:c8:78:96:8f:99:ea:cb:eb:80:34:d2:e5:fb:14:63:cf:
61:59:ff:35:71:77:0f:3e:93:0c:04:46:e3:e7:fc:12:02:61:
cb:7e:dc:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:45:50 2025 by rpki-client