Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366438303a3a2f34382d3438203d3e20343031353037.roa
File: 326131343a373538343a366438303a3a2f34382d3438203d3e20343031353037.roa (raw, json)
Hash identifier: kbTUDkHbyjltfF88eZ/rDZISuFsTOHeLLn3Gr7lTkOg=
Subject key identifier: 4A:90:C9:4C:FE:E7:FA:21:21:6F:5D:DC:B8:FE:44:67:2D:36:1B:27
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 234E99DC7DDE5CFA2439B4DE5526962A7CD4BF53
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366438303a3a2f34382d3438203d3e20343031353037.roa
Signing time: Thu 06 Feb 2025 19:28:36 +0000
ROA not before: Thu 06 Feb 2025 19:23:36 +0000
ROA not after: Thu 05 Feb 2026 19:28:36 +0000
asID: 401507
IP address blocks: 2a14:7584:6d80::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 02 Mar 2025 15:21:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:4e:99:dc:7d:de:5c:fa:24:39:b4:de:55:26:96:2a:7c:d4:bf:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Feb 6 19:23:36 2025 GMT
Not After : Feb 5 19:28:36 2026 GMT
Subject: CN=4A90C94CFEE7FA21216F5DDCB8FE44672D361B27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:5b:bf:3b:84:80:3d:bb:2f:3f:ca:54:a8:25:
33:98:c2:2e:2e:2f:56:3a:1f:0b:de:99:11:36:cf:
9d:d8:e8:f9:30:cf:16:d9:5c:4c:17:de:21:9b:b0:
88:ba:ef:20:46:19:38:6b:31:24:a5:71:dc:80:98:
24:be:51:07:7e:41:c1:a4:23:5c:66:bb:06:30:d6:
f5:fb:b1:2d:05:39:21:1a:67:98:76:e2:5d:be:b8:
25:28:e5:56:99:13:e3:55:f3:63:d5:02:c2:2e:f9:
92:55:e2:6b:63:c8:32:f0:29:79:c0:45:1d:cc:cf:
bd:f3:28:3b:65:c2:5e:58:72:e4:cf:12:a9:8b:c4:
56:df:2e:7c:c0:9a:1e:3d:68:2c:2a:79:1c:6a:69:
48:7b:0b:31:35:e8:06:16:1f:ea:93:3e:d9:ad:a3:
09:6a:10:5f:8b:7e:eb:03:55:88:ce:37:e4:1d:92:
a7:23:88:07:26:0c:9e:c4:2d:6f:4f:08:8b:1c:16:
8f:ce:75:23:7a:40:f8:1d:0f:f3:c1:08:00:9e:ac:
08:58:dc:0a:d1:36:7c:56:d9:0c:56:67:81:62:de:
4a:85:ec:bf:b0:03:59:d6:09:3a:14:36:7a:0b:75:
2d:a0:fe:b4:3b:57:c7:f7:a4:65:54:8b:9d:66:ee:
e8:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:90:C9:4C:FE:E7:FA:21:21:6F:5D:DC:B8:FE:44:67:2D:36:1B:27
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366438303a3a2f34382d3438203d3e20343031353037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6d80::/48
Signature Algorithm: sha256WithRSAEncryption
49:1f:89:fc:d8:6b:9c:77:bf:a2:2d:a0:47:eb:ee:92:a4:03:
69:4b:41:99:ed:af:c4:a2:47:c8:70:19:5f:20:e0:46:60:d7:
a3:ce:78:7f:b5:4c:71:89:99:dc:41:07:7d:31:60:ca:1a:52:
8e:cd:f9:64:e2:f5:6b:52:66:ef:5c:8a:fc:0b:9d:a9:c7:36:
6b:da:46:c8:5f:1f:c1:04:7f:ab:06:cd:59:f1:73:39:61:55:
93:c0:5a:0b:44:3e:7a:f8:95:ab:4b:76:a4:c2:e8:44:98:7c:
c9:0f:86:ac:8f:fc:89:a1:3f:35:a0:c6:dd:5c:22:8a:77:33:
1f:4a:42:97:d9:37:2d:c2:69:be:de:cf:3a:c3:1f:3e:c5:0c:
35:e1:07:40:50:c6:0c:9c:1e:7e:1e:bc:62:94:eb:02:ac:7d:
c6:1a:91:6c:aa:f4:98:b8:f8:d1:67:3f:9a:de:56:06:31:43:
e8:17:40:f8:53:ff:a3:eb:ce:fa:4a:55:62:b3:f1:54:57:1f:
76:2f:94:15:1d:a8:3d:19:5d:98:fe:5d:82:5e:67:d4:a1:41:
64:ce:84:35:c5:74:66:fc:4e:d2:c7:23:4e:00:b6:9a:db:1f:
14:15:21:51:a0:90:22:78:f3:af:c5:6d:5c:01:5e:08:c8:f6:
27:b4:a9:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:50:32 2025 by rpki-client