Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366632303a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a366632303a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: C00VqBI3Lna7W8Jim9i+JbcfQ80p5wjIfli6FKNI+k4=
Subject key identifier: 89:FE:C2:33:1F:B3:C9:C7:A9:CA:3A:F6:F5:15:0F:2D:54:70:73:10
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 491BD6D316028B82E785CC4CE30960AB90B7BCF2
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366632303a3a2f34382d3438203d3e203136393039.roa
Signing time: Sun 22 Dec 2024 10:14:09 +0000
ROA not before: Sun 22 Dec 2024 10:09:09 +0000
ROA not after: Sun 21 Dec 2025 10:14:09 +0000
asID: 16909
IP address blocks: 2a14:7584:6f20::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 16 Jan 2025 19:28:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:1b:d6:d3:16:02:8b:82:e7:85:cc:4c:e3:09:60:ab:90:b7:bc:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Dec 22 10:09:09 2024 GMT
Not After : Dec 21 10:14:09 2025 GMT
Subject: CN=89FEC2331FB3C9C7A9CA3AF6F5150F2D54707310
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:81:48:4b:29:75:02:22:10:30:90:cd:8c:c4:
0d:82:12:7f:22:16:f0:dd:fa:e0:16:27:00:63:90:
43:60:32:fc:b9:22:e5:68:04:ab:f3:ef:d0:4a:9e:
3c:99:5d:be:35:b4:59:5b:75:a8:b8:54:d5:9f:fc:
f4:41:53:ea:06:7b:c1:b2:c3:80:f4:34:e4:e0:0d:
c8:60:a3:9b:1e:b1:f4:f1:ef:4a:eb:d2:cb:b5:d8:
e1:0d:f7:5e:d8:e8:3f:23:b7:34:3f:c9:e1:d9:79:
91:1e:0f:d0:d3:3c:76:c6:da:e0:74:3d:b8:72:d0:
d1:b7:f1:89:f5:ac:ff:e3:fc:c4:da:c9:56:96:2a:
f7:46:3d:08:15:e1:a5:33:49:2e:ff:94:23:cb:11:
49:d4:e1:39:77:06:b6:a5:17:f7:9d:26:f6:9d:3a:
1a:ac:75:18:cf:6a:bb:3c:42:c0:4b:27:b6:a7:02:
3a:c8:b1:6d:43:30:db:55:02:34:30:00:be:4c:89:
c9:b6:c4:bb:49:92:a8:50:bd:80:a2:1d:32:e8:bd:
5b:fb:5e:6e:c2:3b:19:94:83:4a:9b:1e:05:6f:5d:
f2:28:99:22:e0:b8:f4:27:0d:a2:10:9d:5c:af:90:
8c:31:67:c8:5c:1d:1c:c0:7f:a6:27:eb:f9:7f:7a:
30:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:FE:C2:33:1F:B3:C9:C7:A9:CA:3A:F6:F5:15:0F:2D:54:70:73:10
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366632303a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6f20::/48
Signature Algorithm: sha256WithRSAEncryption
28:d3:53:7e:39:7f:59:8c:ff:c4:7f:ad:40:7f:57:0a:b5:7d:
f0:18:64:ac:f0:24:bc:c3:96:38:be:fd:a7:84:2d:5b:4f:a9:
46:42:73:8b:cc:ff:14:91:36:a0:ea:c7:8b:3f:b0:be:b5:cd:
db:35:8e:ce:8d:2d:f0:01:32:3c:da:40:d0:53:d3:2e:25:f5:
06:73:bd:87:bd:97:83:08:30:59:10:8a:68:0f:a3:9d:36:37:
06:60:aa:ae:b2:63:7e:f4:f1:8b:99:2f:3b:2b:6e:80:3e:2b:
f2:9d:98:f2:cd:46:9e:f1:11:a8:67:30:d4:2c:8e:2c:af:e3:
a6:db:f2:ee:1c:fa:54:fa:f3:5c:e7:ee:f6:46:2c:19:32:03:
84:f5:39:68:8e:72:65:c2:1b:ff:b2:f6:3c:48:1c:bb:fe:18:
5f:49:3e:ff:b6:c9:37:48:ce:2e:bc:53:74:dc:c0:74:18:2c:
0d:a3:44:0c:cb:04:72:05:7b:a5:6f:7e:23:55:02:fd:50:5e:
10:74:4f:c3:b2:8f:c9:be:b4:4b:15:b1:6a:ad:85:cf:66:9b:
71:62:eb:54:b5:48:3d:3d:0e:f7:78:f9:54:a5:f4:75:f6:65:
11:b7:2c:ee:fe:4e:ba:64:bd:bd:00:4e:37:c3:35:e7:13:53:
40:29:31:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:50:42 2025 by rpki-client