Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366464303a3a2f34382d3438203d3e20343031353037.roa
File: 326131343a373538343a366464303a3a2f34382d3438203d3e20343031353037.roa (raw, json)
Hash identifier: HFEQhjRDBtUe3dPl4w1bcessX8utAxxw369KBe6sOHI=
Subject key identifier: 57:AA:78:88:2A:31:F7:94:71:3D:1D:BA:05:CA:66:DE:72:79:6E:F8
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 6F007BAD52367430570F6162772D11E0F7C28621
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366464303a3a2f34382d3438203d3e20343031353037.roa
Signing time: Thu 06 Feb 2025 19:28:40 +0000
ROA not before: Thu 06 Feb 2025 19:23:40 +0000
ROA not after: Thu 05 Feb 2026 19:28:40 +0000
asID: 401507
IP address blocks: 2a14:7584:6dd0::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 10 Mar 2025 12:12:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:00:7b:ad:52:36:74:30:57:0f:61:62:77:2d:11:e0:f7:c2:86:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Feb 6 19:23:40 2025 GMT
Not After : Feb 5 19:28:40 2026 GMT
Subject: CN=57AA78882A31F794713D1DBA05CA66DE72796EF8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:47:6f:81:b6:46:53:ec:df:96:b9:64:42:f1:
4f:b9:ca:5a:57:4f:46:04:6e:d1:49:a4:11:32:9a:
c1:a3:9b:42:b4:42:09:82:61:c5:1e:fb:f0:72:47:
86:30:bc:2b:a6:54:c7:29:96:9e:56:40:91:1e:cb:
b5:16:1e:81:ce:af:a8:42:1f:45:6f:6b:13:c5:3c:
40:b3:db:16:35:57:3c:84:31:c8:b8:88:38:f8:8c:
f4:11:53:2b:04:1e:62:fd:98:7f:d9:4c:28:07:ae:
2b:67:b4:36:1c:fa:1e:72:d3:92:db:e0:5b:eb:10:
12:b5:c8:2d:16:a5:89:58:aa:6b:6b:4b:3c:f8:18:
04:4d:e3:04:e2:12:68:9a:c3:76:99:45:fa:45:3a:
a9:2f:7d:35:89:71:e5:9f:90:6c:96:47:c3:01:29:
d5:df:1e:09:a5:cf:85:30:22:ee:19:ab:40:1a:ab:
fd:d0:03:4e:2b:e1:1d:70:92:db:ba:3d:6d:5e:7c:
9f:d0:2f:42:c5:e5:80:40:d8:37:7a:f1:c9:8e:12:
86:15:97:45:78:62:b4:16:44:08:43:69:50:99:c4:
8c:76:91:09:49:f5:be:f5:39:93:39:6a:b7:57:06:
90:f8:96:ba:ae:e3:fb:2e:5d:11:00:f2:e0:5d:b7:
ae:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:AA:78:88:2A:31:F7:94:71:3D:1D:BA:05:CA:66:DE:72:79:6E:F8
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366464303a3a2f34382d3438203d3e20343031353037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6dd0::/48
Signature Algorithm: sha256WithRSAEncryption
8f:88:99:52:ab:84:be:e1:78:69:1f:63:05:40:e1:ca:02:bd:
fd:b5:4c:82:c6:f5:12:aa:db:52:18:56:27:66:e6:11:7e:ca:
d3:3f:04:36:49:59:5d:b9:f6:21:92:2b:82:5d:a2:23:f2:54:
82:a4:77:ba:f7:ab:7b:ab:0e:25:19:a7:2b:0a:20:89:4e:12:
40:8d:56:2f:d8:84:ed:b3:b6:a1:68:6e:43:9c:ce:80:5c:20:
80:09:73:b4:e1:20:e3:5d:40:71:f6:f3:ba:2e:55:a8:c2:68:
78:4b:b7:fb:1c:05:55:71:17:eb:4a:c2:86:98:16:c1:00:32:
2c:b5:14:76:8f:f8:68:a8:a1:c8:ff:e2:08:39:95:70:59:19:
19:a5:10:6f:eb:e1:2c:a8:32:60:02:32:2e:d4:fe:45:58:fd:
8e:27:46:3a:9e:91:5d:49:d6:d9:cd:b8:96:63:1c:2e:85:4c:
f2:74:37:07:25:02:01:a4:29:3d:eb:9a:85:03:97:0b:dd:94:
60:7a:94:eb:74:5c:f2:9e:4b:da:73:40:ff:22:4e:9c:a4:c9:
e1:a0:ab:1d:2d:63:1b:e3:39:a1:d8:a0:ee:29:c4:5c:f7:40:
7c:23:9e:7e:5c:69:63:30:33:64:6d:ce:85:6d:36:a5:b9:90:
b4:2c:e2:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:50:34 2025 by rpki-client