Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366533303a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a366533303a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: L0oFaRCnyuSYdF+gGzbIvwAQb1h/XpwqGHV9x5etg/4=
Subject key identifier: A3:0F:3E:52:B7:10:D9:F3:0E:91:AC:4B:AF:44:DC:4F:C8:B5:97:F5
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 0AD2D3F6BFC9207DC6A1798AFBEA4C9E2ED27D8B
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366533303a3a2f34382d3438203d3e203136393039.roa
Signing time: Sat 08 Feb 2025 20:10:33 +0000
ROA not before: Sat 08 Feb 2025 20:05:33 +0000
ROA not after: Sat 07 Feb 2026 20:10:33 +0000
asID: 16909
IP address blocks: 2a14:7584:6e30::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 15 Feb 2025 20:42:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:d2:d3:f6:bf:c9:20:7d:c6:a1:79:8a:fb:ea:4c:9e:2e:d2:7d:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Feb 8 20:05:33 2025 GMT
Not After : Feb 7 20:10:33 2026 GMT
Subject: CN=A30F3E52B710D9F30E91AC4BAF44DC4FC8B597F5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:23:be:72:57:f9:a6:f3:7e:85:b0:71:ba:92:
e0:e5:44:36:20:a0:0e:44:aa:f5:ee:a0:3c:ad:0f:
70:c9:9e:e8:12:a1:4a:5f:35:df:32:ee:73:2e:e6:
43:17:60:05:7f:10:be:05:e8:47:24:d3:09:92:7b:
26:15:49:78:e7:18:88:c6:dd:c9:a6:c8:06:0e:dd:
9a:31:13:b1:98:26:8b:9f:c2:75:89:0e:d4:87:31:
ac:51:ce:13:44:b5:a2:1a:63:0f:9d:1c:c6:8f:46:
3a:ac:3c:47:f9:1e:c1:d6:56:00:3a:b9:5b:b5:f5:
74:ac:b6:d0:d7:0f:d9:0a:ad:57:8e:12:75:df:4f:
86:dc:ff:96:85:85:5a:04:b1:97:c1:e7:f7:75:77:
e4:77:3f:b8:08:8c:d5:c0:8d:3f:05:b4:a1:02:16:
0f:7a:28:76:0d:f0:ef:93:1e:7d:4e:38:82:15:38:
d5:eb:e7:a9:5b:7c:db:4c:39:7a:51:69:ea:61:e8:
87:98:f6:1e:f0:fa:4f:f4:92:82:cd:6a:67:70:56:
59:10:ef:18:65:7c:62:74:67:d0:c8:f1:04:1a:7b:
d7:da:f9:37:f3:16:d4:d2:5c:6e:eb:2e:4f:32:eb:
09:54:78:2d:cb:e5:0a:30:15:05:8c:aa:81:49:e5:
0a:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:0F:3E:52:B7:10:D9:F3:0E:91:AC:4B:AF:44:DC:4F:C8:B5:97:F5
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366533303a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6e30::/48
Signature Algorithm: sha256WithRSAEncryption
b1:65:fd:bf:57:e9:bf:26:da:6e:ba:18:6a:9e:bb:ee:68:34:
08:59:e3:83:47:e0:ff:f5:81:57:0e:e5:78:de:1e:fe:d0:91:
da:51:c8:3b:60:71:2f:8f:35:53:6d:09:44:8c:cf:1c:eb:30:
c9:41:42:8f:37:03:5c:5c:a9:62:f9:1a:cc:2f:4c:cc:fd:44:
a2:f4:fb:1c:fa:74:9b:bb:1c:ed:61:df:fd:94:3f:3e:24:c4:
1d:21:98:86:9d:f3:41:7f:01:96:33:92:97:84:c5:c6:be:22:
fd:bf:c1:32:78:ce:1d:78:f2:fb:9a:a5:c7:57:19:1c:99:8d:
b4:e4:05:f6:01:33:de:dd:5b:fc:37:ae:70:00:89:9a:ca:3d:
93:6b:a7:33:06:3b:c3:60:5e:ac:4c:28:c0:8a:83:ee:59:5f:
95:04:23:04:10:0b:b3:fc:57:1b:16:8e:8d:ca:21:9a:77:59:
9e:56:f8:14:27:07:ab:1e:c8:92:ec:99:e5:f6:12:bf:fb:ae:
e2:08:1d:de:ca:7a:fb:2b:98:30:32:ec:66:f5:5f:3c:a1:0a:
09:92:43:2d:c3:46:0a:08:1e:d1:db:62:6c:1b:7e:ef:8d:32:
87:df:ea:50:0d:fa:47:1d:ed:30:af:3d:73:a1:a6:50:fe:f8:
2c:95:cd:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:49:33 2025 by rpki-client