Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366532303a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a366532303a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: GvggzZYL8eA37nmF/LriT8ZHsO7bsa16mU6imL5SnBM=
Subject key identifier: 0F:35:88:F2:AC:C3:43:2F:0F:DE:3C:1B:D1:53:1B:80:C2:CD:5D:4C
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 26779AD8C33C3028459B656170BAF0FA168118C2
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366532303a3a2f34382d3438203d3e203136393039.roa
Signing time: Sat 08 Feb 2025 20:10:32 +0000
ROA not before: Sat 08 Feb 2025 20:05:32 +0000
ROA not after: Sat 07 Feb 2026 20:10:32 +0000
asID: 16909
IP address blocks: 2a14:7584:6e20::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 15 Feb 2025 20:42:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:77:9a:d8:c3:3c:30:28:45:9b:65:61:70:ba:f0:fa:16:81:18:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Feb 8 20:05:32 2025 GMT
Not After : Feb 7 20:10:32 2026 GMT
Subject: CN=0F3588F2ACC3432F0FDE3C1BD1531B80C2CD5D4C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:c3:14:82:b7:85:91:b3:36:5c:fc:73:93:34:
4b:19:5a:c2:5a:23:6c:21:b0:e1:3d:8f:d2:0f:f0:
f1:19:8a:e1:f6:df:bb:52:64:cf:0d:3f:39:67:ed:
7f:37:af:9e:05:43:3f:75:10:d2:ec:5e:f5:5e:4b:
25:e4:bf:db:cf:3f:18:02:95:ae:cf:f3:65:9d:ea:
39:18:c3:88:f2:37:87:e6:71:91:69:80:07:24:a0:
5e:c1:53:e4:12:7b:3c:68:df:cc:e8:12:ea:32:1c:
73:f5:28:e5:13:5b:dd:ca:bf:33:08:cb:8d:81:d2:
b7:4c:5b:66:aa:54:6c:4e:c0:14:c2:7d:c0:d3:d9:
09:df:e8:08:af:f5:e7:d7:4c:18:d6:62:ee:04:2e:
7d:a4:20:ad:3c:4d:52:9f:13:92:e5:4d:86:15:4e:
3b:8a:94:38:18:d8:1e:b6:8e:66:20:2e:ef:a7:c8:
3f:44:67:0b:42:38:82:fa:0d:ca:a1:77:1b:80:79:
f8:0d:b9:77:1e:e5:34:6f:4f:0f:dc:0f:13:e4:54:
9a:b6:3f:a3:4a:35:a8:b3:cb:f3:cc:3a:42:9e:81:
e3:86:81:ac:a5:b6:ab:1f:dd:12:85:8f:14:51:4c:
7c:b8:13:28:df:a6:dc:92:5d:05:4c:a2:41:77:21:
9a:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:35:88:F2:AC:C3:43:2F:0F:DE:3C:1B:D1:53:1B:80:C2:CD:5D:4C
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366532303a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6e20::/48
Signature Algorithm: sha256WithRSAEncryption
89:b0:44:28:e5:b5:e3:50:74:33:e8:46:e3:4b:50:4f:b2:28:
6e:78:f0:eb:82:54:c8:da:06:99:5a:8b:2a:d5:45:e7:2c:ba:
1c:00:28:6c:b6:bd:7f:66:67:31:fb:d6:f2:c7:06:3c:ce:34:
55:8a:56:b2:64:29:60:0b:5c:8f:40:5c:13:4f:37:41:26:c6:
08:d3:b2:f5:65:f2:5f:ec:ff:80:de:e6:a3:e7:b1:f0:2d:43:
a8:99:5a:51:40:c6:4f:dd:25:06:8d:ab:44:c7:6f:69:f1:c7:
1c:42:7a:3f:3f:f8:ff:55:16:c7:1b:23:14:2e:77:a8:7b:1f:
c7:7b:b7:ef:b1:77:84:fa:97:98:2b:ad:33:bd:7e:cf:84:e4:
11:21:f7:a8:1d:1a:6b:f8:1e:9d:cb:f0:e0:60:27:4f:08:fe:
61:80:18:ba:3d:fa:ba:32:c0:ed:4d:77:d8:24:65:4f:b9:95:
9a:9a:8e:07:a6:26:75:db:ba:93:88:48:1b:b3:fa:05:c9:d4:
30:3b:32:06:8b:28:d0:80:b1:ec:ed:52:bc:a6:44:64:0b:13:
b7:e8:d8:0b:e4:9d:17:8f:dc:f4:6b:2d:5f:2d:16:d9:f5:fe:
e8:e7:27:c1:18:33:d3:8d:c7:4b:7e:02:38:22:39:06:52:43:
a9:e9:79:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:47:11 2025 by rpki-client