Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366430303a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a366430303a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: G8uV+o54KSA1HswjoRl/V5IYoFZeje9CRft3K+aaNPc=
Subject key identifier: 9D:66:66:DE:53:08:CC:10:B1:E7:BA:5A:16:A5:DA:F2:E1:C6:57:E3
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 413310A1DB922601D1AEF6493EEC012C3869DEA9
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366430303a3a2f34382d3438203d3e203136393039.roa
Signing time: Sat 01 Feb 2025 21:54:02 +0000
ROA not before: Sat 01 Feb 2025 21:49:02 +0000
ROA not after: Sat 31 Jan 2026 21:54:02 +0000
asID: 16909
IP address blocks: 2a14:7584:6d00::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 10 Feb 2025 15:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:33:10:a1:db:92:26:01:d1:ae:f6:49:3e:ec:01:2c:38:69:de:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Feb 1 21:49:02 2025 GMT
Not After : Jan 31 21:54:02 2026 GMT
Subject: CN=9D6666DE5308CC10B1E7BA5A16A5DAF2E1C657E3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:55:af:ca:60:0e:49:9a:25:4b:cf:e0:96:a5:
78:39:57:f8:07:5a:1a:de:67:aa:8a:37:40:d7:e0:
f1:21:4a:f1:61:2c:4e:2d:89:c4:d2:bf:a4:6e:33:
91:0e:e9:36:43:c6:77:25:81:33:a5:f8:0e:d7:6e:
f2:77:71:5c:e8:25:59:92:ba:ab:0c:2b:e4:0f:31:
9a:ba:00:21:84:08:32:4c:65:d3:91:a0:b5:e3:ee:
94:eb:1f:cc:ad:85:8c:04:9b:c4:01:6a:93:9a:66:
d3:42:d9:23:7c:9b:b4:86:92:7d:9a:b9:c7:d4:7d:
21:51:fb:b7:b5:18:60:7d:0a:21:35:12:46:fa:38:
ec:5b:97:d0:6d:30:c0:c6:1a:41:a2:41:de:85:24:
f6:77:e1:9a:27:9a:6f:2f:6b:90:a7:37:fd:17:a5:
86:68:b2:25:7d:b9:fa:87:5d:6d:29:f1:07:8c:eb:
21:83:15:ef:21:0e:ab:86:b0:da:2b:35:ae:29:37:
87:40:b9:e2:8a:02:2c:38:ff:e5:9f:85:6e:00:43:
4a:ed:46:32:6c:5c:8e:a9:9f:d8:7f:95:de:b2:d3:
dd:ed:d4:c6:98:01:42:0d:10:fb:a3:5b:54:bd:bf:
db:5e:ec:2e:cb:e7:e6:91:45:2c:93:2c:2e:17:7a:
0d:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:66:66:DE:53:08:CC:10:B1:E7:BA:5A:16:A5:DA:F2:E1:C6:57:E3
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366430303a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6d00::/48
Signature Algorithm: sha256WithRSAEncryption
9b:92:97:de:83:90:e4:1f:08:a2:98:a0:a6:2c:a8:21:d2:57:
df:e7:93:4f:49:70:ac:08:47:4f:52:0b:cf:61:f6:8c:90:f5:
81:80:9a:d1:d3:7c:08:da:52:6b:97:db:3b:e0:4c:42:7e:84:
1e:d7:a3:c7:11:84:ba:d9:bc:c4:47:53:e8:b9:a4:18:fb:df:
18:70:b4:51:7c:40:98:d5:d2:85:f0:a3:e9:13:7a:0a:7e:af:
b8:c0:e3:f6:ae:0e:80:95:2d:9b:eb:b0:12:ff:f6:97:c0:de:
01:1b:3c:f2:b8:51:44:b6:21:37:c7:be:59:24:6e:eb:78:7f:
58:27:26:ca:0f:5a:cd:c2:4a:2c:b1:7a:00:df:e6:5a:e9:80:
6a:46:59:c5:be:24:f9:83:ac:8a:54:b2:28:ef:c3:1a:1a:ff:
82:c2:d4:33:9c:63:39:5a:2f:bc:59:f5:8f:d2:ba:e5:7b:14:
d2:26:bc:44:48:7d:d0:ad:60:de:90:db:75:3a:1c:57:a7:33:
85:6d:e5:3c:12:4c:33:19:ea:ba:6f:ac:68:7e:d1:23:4c:d0:
ce:d9:65:c4:5f:96:86:9d:63:39:17:1b:4a:f6:13:77:02:63:
78:cc:26:30:b2:b6:28:96:ab:cb:bc:6b:12:71:3c:80:dc:3f:
3e:3e:ad:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:45:49 2025 by rpki-client