Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366537303a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a366537303a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: D9YmWDpYWqRJrKr9QnNq6KJlRxsEU4oxCzSGsl/6hIE=
Subject key identifier: 88:70:79:59:75:3C:8F:9D:F6:C9:82:9F:F7:CD:76:57:2C:9F:F1:C0
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 6A548B3D2DDFE852B788DEFBE5974C9C1517F534
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366537303a3a2f34382d3438203d3e203136393039.roa
Signing time: Sat 08 Feb 2025 20:10:59 +0000
ROA not before: Sat 08 Feb 2025 20:05:59 +0000
ROA not after: Sat 07 Feb 2026 20:10:59 +0000
asID: 16909
IP address blocks: 2a14:7584:6e70::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 15 Feb 2025 20:42:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:54:8b:3d:2d:df:e8:52:b7:88:de:fb:e5:97:4c:9c:15:17:f5:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Feb 8 20:05:59 2025 GMT
Not After : Feb 7 20:10:59 2026 GMT
Subject: CN=88707959753C8F9DF6C9829FF7CD76572C9FF1C0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:1a:fc:47:8d:58:ad:83:96:07:d4:d5:61:7e:
0d:8e:87:2e:8e:ab:5f:3d:cf:95:5d:7c:3f:54:29:
9e:7e:07:64:16:91:fa:7d:5c:73:c5:5e:6e:c4:dc:
78:65:62:3f:56:63:10:af:d0:52:ac:e6:2a:94:aa:
f4:8f:45:53:f2:a5:9c:06:d0:59:19:0e:f5:e5:90:
1b:f1:13:99:fd:7a:87:60:ac:0d:b7:94:6a:43:d1:
6b:16:93:d1:83:99:af:c4:81:92:9c:82:14:d4:50:
bb:e7:3b:a3:a6:af:56:da:0f:90:a3:1d:e2:9a:a7:
3e:fe:eb:26:2c:29:20:4d:b7:a7:c9:7c:ed:2f:0d:
7b:a9:ef:6a:4f:77:e5:2a:9e:59:da:3a:ad:1f:f0:
08:a9:6e:bd:a1:ed:2d:49:4e:d0:8d:37:8d:a0:fd:
f2:f5:59:05:6a:f5:57:47:c4:d9:33:a3:7c:77:80:
cc:60:8d:f7:f1:71:f3:a3:a5:e1:d7:9a:97:da:f6:
ae:1c:aa:bb:3b:30:3d:cc:cc:f2:23:54:87:7d:3c:
05:b0:11:87:3a:96:78:9b:78:2b:89:21:8d:41:49:
ca:50:99:5e:ed:3e:d0:68:44:83:33:14:a7:8b:b0:
83:f1:d7:ec:61:76:b5:e9:08:79:78:77:3f:92:f6:
40:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:70:79:59:75:3C:8F:9D:F6:C9:82:9F:F7:CD:76:57:2C:9F:F1:C0
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366537303a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6e70::/48
Signature Algorithm: sha256WithRSAEncryption
77:1b:76:51:ee:73:19:6e:51:c0:ee:8f:8c:e2:5a:7a:0e:95:
35:f3:e3:22:e9:60:58:0e:69:09:84:4d:c7:33:e4:e6:5d:45:
bc:23:10:24:d7:3d:ac:18:97:3c:07:fe:1e:e3:c5:26:51:ae:
f9:0a:00:91:92:ff:ad:57:ee:e2:27:dc:7e:72:f2:58:a5:64:
30:25:5b:f4:32:03:7c:45:6d:b5:38:1f:e1:c8:0a:e2:d0:31:
87:5b:36:dd:bb:4b:a5:ad:33:41:59:ca:97:1b:57:d2:76:d3:
76:b0:6c:b1:66:e2:62:b9:e1:59:60:ac:15:f6:d1:9b:c8:ca:
e0:1d:92:c5:2c:f6:4c:a8:de:ed:05:1a:a0:bd:d9:22:47:95:
42:08:8a:23:eb:14:99:cf:24:3c:54:f8:e1:da:52:ec:fc:c5:
fc:72:a8:7b:5d:c5:b0:12:74:fe:a8:45:de:cd:94:e0:e2:c5:
e4:2c:6d:97:3c:40:74:1f:f8:46:c9:f9:01:70:c1:4b:50:00:
af:ab:3a:36:59:41:16:55:13:d9:99:ec:5a:66:96:20:82:e6:
b2:a9:cb:4c:3c:9d:a1:ab:17:87:2d:65:a5:de:c6:cb:31:be:
49:c3:6b:b8:a7:87:fd:6b:79:e5:51:4b:08:52:1e:ca:6f:e7:
bb:44:fd:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:49:42 2025 by rpki-client