Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366433303a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a366433303a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: mmnpgZnuxDiG1StAK1RH1/gMBBHKdoDXk2/3qd6fajw=
Subject key identifier: 94:1C:0A:E5:66:56:58:BE:B2:55:1B:89:A0:16:86:1C:BC:52:D5:98
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 5837292DF7F54606EF8802C7F435B45126161DA6
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366433303a3a2f34382d3438203d3e203136393039.roa
Signing time: Sat 01 Feb 2025 21:54:04 +0000
ROA not before: Sat 01 Feb 2025 21:49:04 +0000
ROA not after: Sat 31 Jan 2026 21:54:04 +0000
asID: 16909
IP address blocks: 2a14:7584:6d30::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 06 Feb 2025 19:27:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:37:29:2d:f7:f5:46:06:ef:88:02:c7:f4:35:b4:51:26:16:1d:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Feb 1 21:49:04 2025 GMT
Not After : Jan 31 21:54:04 2026 GMT
Subject: CN=941C0AE5665658BEB2551B89A016861CBC52D598
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:3b:7b:d6:0f:a4:28:bf:9c:2f:3a:8f:92:c8:
cc:ce:4d:85:43:c0:bf:02:fc:8c:ab:79:b8:46:3d:
a0:1a:c6:e7:08:4a:3f:39:e2:e0:06:ca:63:bc:ba:
fe:9c:e9:8a:89:ec:4e:78:6f:dc:2a:61:7e:1b:72:
de:54:b3:10:2c:02:bb:e0:b0:7b:6a:38:1c:c8:92:
cb:9d:73:d6:fe:b0:ab:a4:07:60:44:50:46:f4:51:
72:65:2e:fb:eb:7e:bc:f8:55:c2:b8:9f:2a:11:f9:
71:6b:bf:fb:65:6b:0a:e5:9b:bd:1f:ae:1f:56:34:
ee:b6:a1:a9:5f:81:26:cd:bc:b2:6f:21:91:10:44:
9a:5a:b1:93:cc:84:dd:b8:10:f1:b7:61:35:c5:ff:
1a:15:78:3b:36:be:ff:50:4f:99:4a:5d:6b:80:c4:
d2:39:dc:fe:fe:93:bb:28:bc:7d:fa:48:d4:cc:67:
77:fd:d5:05:c6:ba:8f:ef:f8:98:46:24:23:e8:b4:
ba:f9:cc:6d:da:7f:f6:21:37:c5:a3:ca:6b:f7:38:
2a:b9:fe:3d:4a:1a:19:dc:32:db:e5:1d:d9:47:2a:
df:5c:70:d8:80:10:6a:09:ac:e0:86:bc:e4:77:94:
c2:95:69:b8:c4:5c:b4:7f:4d:f5:21:54:7f:91:ff:
67:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:1C:0A:E5:66:56:58:BE:B2:55:1B:89:A0:16:86:1C:BC:52:D5:98
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366433303a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6d30::/48
Signature Algorithm: sha256WithRSAEncryption
0d:66:27:c9:b1:70:6e:77:13:93:a6:40:c3:82:26:58:7a:f1:
9e:bf:1d:13:cd:c1:02:68:5a:11:dd:4a:27:5d:c3:0e:10:f0:
8d:04:47:f6:de:de:ba:9a:ef:47:82:c9:86:e5:28:59:66:dc:
3f:6f:9a:7d:31:5e:db:76:a4:f9:ba:63:49:f3:bc:af:32:0a:
2b:36:4a:bc:b4:f0:f2:b4:4b:5e:a5:fe:24:fd:8c:2d:72:34:
ef:25:b3:85:84:5d:b5:ca:66:0b:1d:9c:20:4f:60:4c:0e:0b:
9d:98:28:07:d4:b1:a2:51:93:38:2e:23:db:66:44:cf:7e:26:
20:63:b6:3a:c0:aa:d6:cd:6a:27:ce:1a:1e:72:eb:5e:58:7c:
72:ef:c1:fb:69:87:2d:ab:f0:03:d5:0c:5e:40:ed:47:19:c6:
15:55:f9:fb:fd:8e:57:21:b7:16:1c:eb:c7:01:b3:50:00:3e:
f1:a3:63:98:cb:ef:0b:50:d6:1a:4b:91:05:68:da:01:36:7b:
3d:08:7a:db:b0:fa:b4:82:fb:a5:58:8f:4a:ec:91:3d:ed:81:
e4:8e:88:67:77:b2:c9:5d:1a:2a:b0:61:23:11:07:53:9f:d5:
9d:c6:b1:ee:cc:20:6d:68:64:23:b2:cf:e5:28:86:9e:c5:9f:
1e:a7:1c:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:50:43 2025 by rpki-client