Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366539303a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a366539303a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: gwKCt/ikKwa3ASt8ypX91ul/x9Hm8S68nA4MbbIw+nM=
Subject key identifier: F7:9D:B2:3F:2A:77:FD:99:F6:6A:61:77:EA:1C:B0:34:EE:B3:E9:7A
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 3E983BD9A26242AF38CA09920C555D4C3D6E0893
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366539303a3a2f34382d3438203d3e203136393039.roa
Signing time: Sat 08 Feb 2025 20:11:00 +0000
ROA not before: Sat 08 Feb 2025 20:06:00 +0000
ROA not after: Sat 07 Feb 2026 20:11:00 +0000
asID: 16909
IP address blocks: 2a14:7584:6e90::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 15 Feb 2025 20:42:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:98:3b:d9:a2:62:42:af:38:ca:09:92:0c:55:5d:4c:3d:6e:08:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Feb 8 20:06:00 2025 GMT
Not After : Feb 7 20:11:00 2026 GMT
Subject: CN=F79DB23F2A77FD99F66A6177EA1CB034EEB3E97A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:7e:95:da:04:9a:e6:d8:5f:3b:79:a0:a9:92:
30:57:f7:30:61:9f:5c:94:9b:c9:84:8d:a7:c6:08:
b2:01:fc:22:2c:51:73:64:af:af:c9:8d:57:b7:a6:
71:1e:f6:44:74:63:78:65:5d:67:26:88:27:2f:f9:
58:78:27:07:40:de:78:c0:34:a9:38:46:ae:1d:65:
c5:e3:ed:81:e0:df:0a:0b:13:c5:47:48:f4:15:92:
3a:bd:97:d0:47:98:86:77:1c:0e:ad:0e:8b:14:03:
87:89:4c:75:a2:6c:e4:ab:c0:d2:ac:d9:79:f6:2a:
38:13:74:4e:d6:cb:f1:d3:06:5d:cc:d9:90:23:2c:
6a:f4:d0:2d:d0:83:48:ff:91:33:28:04:0a:e1:f3:
cf:4d:20:78:12:93:96:90:4d:50:4c:e2:4c:47:4a:
99:b9:95:f7:46:3a:cf:39:93:3f:87:c1:84:27:7e:
7c:fe:4b:63:3c:3e:e7:94:3f:5a:3f:c8:0b:cc:40:
35:91:96:05:0c:ef:9d:57:60:52:3f:e6:09:a7:ea:
ed:46:2b:f7:e3:7c:1f:88:5d:81:7f:3c:37:52:3c:
42:b5:f0:f0:a4:62:00:64:89:99:49:40:d2:88:a4:
dc:56:5d:19:75:2a:61:26:11:8c:bc:35:ab:5f:80:
79:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:9D:B2:3F:2A:77:FD:99:F6:6A:61:77:EA:1C:B0:34:EE:B3:E9:7A
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366539303a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6e90::/48
Signature Algorithm: sha256WithRSAEncryption
06:d8:a0:5d:ec:67:f5:06:25:72:e2:30:cc:ac:25:1f:e9:36:
f5:e8:73:70:8b:97:ef:4f:be:5f:f2:83:14:08:1a:44:12:93:
aa:5f:ae:34:6b:2a:97:f2:91:a5:f3:b3:70:39:9c:c1:83:a9:
c6:49:49:da:8e:b3:8c:1a:ca:57:a5:10:f8:40:fe:c3:df:02:
dd:7e:1c:5e:c2:b8:ec:8d:05:93:29:07:69:39:ec:c9:da:4f:
14:57:cc:97:ff:68:a3:7f:e3:a1:29:30:fe:e6:07:2b:ee:35:
72:47:a7:5f:f4:4d:3a:d0:4e:cc:1b:46:02:71:71:63:df:d8:
d5:82:a1:10:b9:55:e4:5e:1f:18:dc:0c:48:06:1b:d2:e9:a8:
59:0b:0c:24:e5:94:37:df:27:35:91:48:3f:a5:a1:eb:b4:91:
04:91:f0:e6:57:f2:9f:f9:5c:a6:14:89:9d:2f:7e:46:3e:be:
85:e1:f7:e6:52:3f:d3:ee:e1:d8:b8:61:b8:da:58:bc:0b:21:
a8:9c:e7:c5:97:70:a1:77:14:d0:e8:19:9e:10:fc:2e:3d:16:
b5:bf:9f:eb:54:d5:4e:a7:6e:39:84:21:92:01:87:69:05:15:
13:6f:f4:be:b6:3b:ed:09:9a:b9:81:1e:71:52:8f:40:b8:11:
4d:a0:b2:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:49:39 2025 by rpki-client