Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366531303a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a366531303a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: DrVPxU+j0UwHqWl4XntTUmfpo8Vm6C4+bFNaTopDl0o=
Subject key identifier: DB:D0:02:29:75:C0:4E:8F:F5:C6:1C:A3:D1:3B:69:1E:AD:0E:8F:DD
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 57BF9EDE3FF577C1CE383C0398CDF8BED6C8C759
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366531303a3a2f34382d3438203d3e203136393039.roa
Signing time: Sat 08 Feb 2025 20:10:31 +0000
ROA not before: Sat 08 Feb 2025 20:05:31 +0000
ROA not after: Sat 07 Feb 2026 20:10:31 +0000
asID: 16909
IP address blocks: 2a14:7584:6e10::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 15 Feb 2025 20:42:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:bf:9e:de:3f:f5:77:c1:ce:38:3c:03:98:cd:f8:be:d6:c8:c7:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Feb 8 20:05:31 2025 GMT
Not After : Feb 7 20:10:31 2026 GMT
Subject: CN=DBD0022975C04E8FF5C61CA3D13B691EAD0E8FDD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:f2:55:ae:a3:b8:1d:c2:48:39:44:a8:22:69:
59:47:4f:0b:11:fd:43:21:31:be:fb:c9:41:9f:53:
d2:fc:7c:91:e3:55:61:de:cc:e0:f6:6f:3d:62:09:
17:de:3d:15:b3:51:38:3e:99:db:71:d8:1b:92:58:
f3:0a:33:b2:4e:c0:44:e9:c7:1f:ba:10:8b:64:83:
7b:c3:5c:a4:4d:2c:fa:f8:25:e3:eb:2d:48:d9:35:
f4:75:2d:f8:af:1d:4a:ed:72:3a:77:99:57:9d:eb:
60:a8:6e:2d:be:18:68:dc:3b:5a:47:6c:3f:85:09:
a8:ed:29:0f:ee:9e:02:a8:db:0a:a8:59:d8:7f:3a:
01:cd:73:51:ec:2b:d8:a9:8b:4f:94:c2:4a:5b:db:
17:56:68:1b:61:4a:f6:0c:d4:fd:ac:58:af:a3:f1:
a1:00:fd:b6:c6:21:e7:34:8a:4e:d5:bd:64:d2:53:
a9:4b:b6:a3:98:cd:72:88:2d:0a:ec:9a:4b:7c:1a:
94:6b:d2:dc:1d:db:fd:2b:37:14:89:b1:d8:58:3d:
17:bd:22:13:60:c5:e3:f1:39:74:a2:e8:0a:b6:f8:
9c:02:57:55:9e:f5:f1:a6:2b:bf:c2:d9:89:94:fa:
da:33:cc:0a:0f:88:e6:65:b2:e6:f3:a6:8e:a1:c7:
4f:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:D0:02:29:75:C0:4E:8F:F5:C6:1C:A3:D1:3B:69:1E:AD:0E:8F:DD
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366531303a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6e10::/48
Signature Algorithm: sha256WithRSAEncryption
4f:8f:31:69:d2:13:fc:a3:d2:9a:c2:28:25:19:48:cf:b5:21:
f0:72:26:8d:38:3e:c6:d5:5f:f2:44:5a:c8:99:47:e8:9c:3f:
ab:fb:fc:20:67:83:f0:37:7d:f9:e5:22:dc:c3:51:69:11:d4:
cb:5f:c6:72:7a:f4:3c:9c:28:cc:52:59:a9:a4:a9:d5:e4:94:
25:ce:01:d4:4e:65:0a:9c:56:fe:09:bd:bf:e7:5b:5f:69:b2:
60:02:18:6a:d0:2a:55:41:40:a2:25:d9:28:78:fe:d2:3c:6c:
b5:ec:5b:46:63:94:a0:0b:cd:68:8f:5f:4e:4a:6b:9a:88:c4:
23:96:e5:95:75:64:ac:e2:33:a3:e8:e8:aa:8a:22:25:1c:48:
53:84:d9:05:c6:1a:6f:25:f1:62:38:0d:06:2a:b7:64:f3:67:
74:54:e2:38:28:93:23:1f:c3:90:3d:68:8c:24:a5:a3:d4:00:
ef:ea:1f:37:99:c2:97:89:35:df:fe:28:f0:33:c6:9d:18:50:
bc:06:63:23:ad:4e:44:88:0f:41:3e:36:37:51:ef:99:47:e0:
da:c1:29:ac:75:67:2b:f8:59:9d:75:4b:40:9c:71:e1:6a:ff:
c0:76:ab:b5:bc:ce:cb:18:86:8e:f8:f6:f4:6a:a6:c2:14:18:
2a:12:66:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:50:41 2025 by rpki-client