Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366564303a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a366564303a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: u6nizGP2GeS21oAwjrPlptmATZm5UiCEiL5wUMTiAuc=
Subject key identifier: D3:AA:08:EB:EE:0B:08:BC:6C:BF:71:85:1E:55:97:4B:DB:8D:75:88
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 43D8B68B10A146D58FEFBC14216B8A7E1A1A47FF
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366564303a3a2f34382d3438203d3e203136393039.roa
Signing time: Sat 08 Feb 2025 20:11:35 +0000
ROA not before: Sat 08 Feb 2025 20:06:35 +0000
ROA not after: Sat 07 Feb 2026 20:11:35 +0000
asID: 16909
IP address blocks: 2a14:7584:6ed0::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 15 Feb 2025 20:42:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:d8:b6:8b:10:a1:46:d5:8f:ef:bc:14:21:6b:8a:7e:1a:1a:47:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Feb 8 20:06:35 2025 GMT
Not After : Feb 7 20:11:35 2026 GMT
Subject: CN=D3AA08EBEE0B08BC6CBF71851E55974BDB8D7588
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e0:ed:3d:bc:da:7b:de:ea:2c:71:47:5a:9a:
51:d0:01:ec:b7:50:5f:82:8f:db:b2:51:c9:cd:cb:
d3:c1:29:af:06:54:81:ca:85:b3:33:21:4e:fe:4d:
20:79:18:3b:68:1c:9b:8c:b5:97:0a:5c:77:30:93:
09:a2:57:06:89:6d:41:09:2e:7d:02:bb:10:f5:30:
df:39:9a:b5:7f:da:3f:f8:17:4b:1f:64:9b:b0:f3:
18:dc:f6:50:57:aa:40:bb:55:a7:fa:b4:42:af:56:
5f:35:e8:89:cb:95:f6:48:c1:82:81:4c:a5:8e:2b:
dc:cc:6e:b0:b8:f7:6c:e4:21:3c:fa:05:9a:e9:d5:
77:de:b7:af:de:58:d3:e7:19:e4:90:73:da:b8:9d:
85:54:f4:bb:25:b9:b3:00:e6:8b:3a:3c:3c:e1:79:
fa:25:b3:fb:82:47:c9:59:1a:5f:da:81:fb:16:6c:
2d:7a:a6:50:8b:23:9e:db:0d:e5:b2:9f:2a:2f:3e:
77:56:12:5f:76:48:a9:51:bc:69:ca:c8:df:6c:e7:
4b:a5:d3:5e:bb:9f:93:b9:aa:0c:c5:70:c4:7d:d8:
70:2e:15:28:8c:d8:23:c4:8e:a1:43:ba:2b:cb:70:
81:19:b6:c3:c3:e8:d2:ac:bb:e9:19:f5:b0:27:03:
d8:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:AA:08:EB:EE:0B:08:BC:6C:BF:71:85:1E:55:97:4B:DB:8D:75:88
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366564303a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6ed0::/48
Signature Algorithm: sha256WithRSAEncryption
99:56:41:f1:d4:b9:34:df:45:fc:51:f3:24:91:94:d9:27:b0:
ed:e7:64:81:fd:2f:75:e3:17:08:2d:66:6a:f6:ba:12:28:54:
27:56:56:d8:a0:6c:9e:7e:5b:d6:6a:12:9f:6f:00:bc:d0:c7:
e1:3c:52:f0:db:68:f8:54:3d:36:8d:82:99:71:40:66:e5:1f:
7c:53:3c:57:dd:9d:d4:81:7e:85:e0:0e:a7:4c:23:6d:a9:75:
94:9d:34:d6:90:dd:28:6f:65:02:9a:9f:8f:42:98:84:b4:cf:
c5:4e:90:16:70:1a:fb:80:b5:0b:ae:5e:39:52:49:5a:c5:6e:
25:eb:ac:cb:3e:1e:6b:50:1b:27:85:cc:1e:6b:e6:7e:a1:d4:
09:5e:93:38:3d:20:88:3c:b5:e6:79:4a:34:45:3d:c6:1b:03:
e9:48:ec:31:cf:47:b1:f9:d0:bc:71:0b:76:51:95:93:89:b8:
3d:c5:2f:46:f2:69:48:7d:80:0e:ab:04:17:75:df:e4:8a:f5:
08:a8:af:da:1b:5f:76:c9:85:a1:6d:d7:00:4b:e8:f1:32:f1:
ff:cf:9b:a3:99:20:cf:2c:60:22:b0:c5:1e:49:bf:b1:38:91:
86:f5:41:2d:9c:91:e4:78:c8:3f:74:ba:96:93:3a:67:f6:bb:
cc:c2:46:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:45:02 2025 by rpki-client