Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366565303a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a366565303a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: 895Ggfu66AbtnzrzxzEFyaf/8CAD70+ovMJPQxNEedA=
Subject key identifier: 9F:4B:DA:9B:12:78:64:39:8E:4F:E7:74:A8:36:27:CA:FA:FF:15:F4
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 732AD99C5F00B14567FE173A1408D28E1058B53B
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366565303a3a2f34382d3438203d3e203136393039.roa
Signing time: Sat 08 Feb 2025 20:11:36 +0000
ROA not before: Sat 08 Feb 2025 20:06:36 +0000
ROA not after: Sat 07 Feb 2026 20:11:36 +0000
asID: 16909
IP address blocks: 2a14:7584:6ee0::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 15 Feb 2025 20:42:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:2a:d9:9c:5f:00:b1:45:67:fe:17:3a:14:08:d2:8e:10:58:b5:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Feb 8 20:06:36 2025 GMT
Not After : Feb 7 20:11:36 2026 GMT
Subject: CN=9F4BDA9B127864398E4FE774A83627CAFAFF15F4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b3:09:ca:b4:c4:ee:ef:60:59:e0:d4:0d:6d:
49:7a:45:dc:d3:4a:99:5a:de:49:42:c4:d0:4d:7e:
3b:30:6c:a0:c7:6c:5c:4e:7f:13:92:9c:f2:64:f0:
d8:41:b3:1e:bd:2a:93:8b:ae:81:a9:33:a3:32:66:
6e:f1:92:66:c9:68:e2:89:c0:ba:1f:67:1d:46:a3:
36:e4:5b:e6:bb:1d:6f:ec:3c:4d:30:0c:c5:f1:78:
ad:f7:97:54:16:c6:55:b7:14:27:e6:08:21:76:04:
ba:70:c5:19:8c:fe:60:4f:22:cf:91:94:aa:be:f8:
ff:a7:e4:01:a3:b8:94:60:bf:91:bc:e0:f4:c0:9d:
91:df:2e:63:d8:87:43:15:4e:11:2c:0a:95:a7:4d:
53:2a:8a:6b:21:62:61:f9:31:5d:7a:6f:f4:39:56:
61:95:0d:3e:2f:b6:b1:2a:8e:fa:a9:36:ab:c4:e0:
e8:a4:99:d6:a2:70:d7:ce:15:cf:4a:6a:67:ef:07:
b6:03:94:28:44:c8:1e:d8:18:2c:31:f9:2a:e3:ed:
79:13:c4:0e:16:08:8f:eb:75:3a:f5:7f:c3:76:0c:
62:a2:34:30:6d:2c:37:5c:00:a5:96:38:02:70:ab:
02:6e:b9:35:04:ad:7c:0a:86:44:f2:c3:b2:e0:4e:
f3:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:4B:DA:9B:12:78:64:39:8E:4F:E7:74:A8:36:27:CA:FA:FF:15:F4
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366565303a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6ee0::/48
Signature Algorithm: sha256WithRSAEncryption
65:c3:89:18:7a:80:9a:4b:fc:5d:71:6e:18:5a:86:a5:c8:9e:
8f:56:e3:15:9d:3e:7b:58:10:25:d9:63:bc:0f:8c:8b:ab:ef:
1b:e8:d0:87:d1:32:68:7b:06:c5:f3:0e:b4:65:28:e2:05:68:
58:84:94:8f:33:20:fc:0c:88:60:e8:2b:23:d8:0e:e6:62:9c:
95:bf:4e:1e:ec:e7:27:07:b0:e8:9f:84:fc:1b:d7:7e:5b:2e:
d3:b8:40:04:80:2a:f0:98:a1:b5:22:76:d6:bc:4b:7a:c2:a1:
1f:9f:5d:20:ab:3f:aa:b6:67:13:2c:cf:91:9b:64:2c:fc:0c:
d4:62:78:7e:d7:d7:ae:6f:6a:19:5a:9a:b2:b1:e9:1c:e1:ca:
b9:98:20:dd:1c:77:dc:d7:a4:88:63:79:ac:88:87:72:02:41:
bb:1b:6d:cc:93:fd:99:c5:d7:5b:3c:99:5d:42:3b:ae:49:45:
2e:5a:70:51:d8:94:46:0e:6a:62:30:e5:fb:1b:fa:b7:41:54:
28:d2:c8:00:f0:b0:0a:1d:6d:5a:a9:9f:53:44:fd:1a:2e:08:
03:05:cf:2a:f6:29:ee:cd:78:ae:65:4e:7c:7d:24:bb:9b:33:
d3:5e:c5:50:b8:ed:97:9a:0f:44:f4:2b:c4:b8:cb:4f:b8:70:
d6:f6:7e:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:46:06 2025 by rpki-client