Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366633303a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a366633303a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: /iTSzKHYLnRuN8kc2G7t6JJlPGfFl4Q1IJnyq+/BGN8=
Subject key identifier: CA:F2:3D:2F:02:FD:07:69:C0:D8:3A:0E:18:8A:7E:6C:54:C2:31:B2
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 47E64683C7806F40048FB988752BCC36929A1BB2
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366633303a3a2f34382d3438203d3e203136393039.roa
Signing time: Sat 08 Feb 2025 20:11:39 +0000
ROA not before: Sat 08 Feb 2025 20:06:39 +0000
ROA not after: Sat 07 Feb 2026 20:11:39 +0000
asID: 16909
IP address blocks: 2a14:7584:6f30::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 15 Feb 2025 20:42:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:e6:46:83:c7:80:6f:40:04:8f:b9:88:75:2b:cc:36:92:9a:1b:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Feb 8 20:06:39 2025 GMT
Not After : Feb 7 20:11:39 2026 GMT
Subject: CN=CAF23D2F02FD0769C0D83A0E188A7E6C54C231B2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:16:69:d9:44:36:e1:fb:62:df:7e:e7:05:66:
28:75:d5:73:ef:80:c9:47:6e:dd:28:e6:27:66:3a:
20:30:92:b7:a8:6b:df:8d:dc:80:50:f3:2c:35:32:
45:de:91:03:13:6a:20:ef:33:56:47:73:5f:c2:f5:
ad:c1:b9:ec:56:36:b1:c3:a3:3a:f0:6a:ab:c9:1b:
c8:e7:ec:ec:7f:36:df:4e:93:76:ff:80:e3:17:d8:
5a:22:eb:96:8e:a0:b5:de:06:b7:c6:d1:ad:88:1a:
15:17:7d:c4:0d:f5:f1:71:5c:8b:c9:89:09:e1:1d:
e9:f2:ed:a2:67:ff:4f:c9:51:d1:e7:75:28:41:4f:
60:04:25:ed:c4:0f:fd:d0:3a:16:bd:cc:62:83:1b:
3b:83:98:40:e5:e9:91:ae:b1:b0:a2:7c:96:03:91:
a9:66:b6:78:75:34:0e:0a:c0:93:36:44:24:13:82:
46:2e:87:6e:2b:3f:18:e0:65:c3:d1:b6:ea:63:d5:
57:79:1d:de:28:c2:8c:7f:f9:e2:a2:28:fa:28:9d:
e6:51:5a:7e:7b:3e:f2:c4:12:e4:2d:a2:f6:09:f8:
33:28:4f:ac:33:41:0f:e5:8a:77:64:e4:60:64:69:
08:fe:4b:78:30:03:4e:79:e4:ba:02:d6:a1:87:8f:
ee:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:F2:3D:2F:02:FD:07:69:C0:D8:3A:0E:18:8A:7E:6C:54:C2:31:B2
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366633303a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6f30::/48
Signature Algorithm: sha256WithRSAEncryption
9e:13:e6:b8:f9:39:20:06:fe:04:4d:5d:93:15:e3:bd:2c:c8:
fd:71:42:50:9a:9f:ba:41:27:eb:40:96:2c:30:62:f3:3f:98:
8a:8c:fb:f1:db:c1:a0:7c:b0:9f:73:2e:31:2d:93:42:1c:9d:
1a:57:ee:1b:bc:5c:93:a2:45:ca:e6:9e:f8:48:e2:fe:8c:6e:
94:c4:d6:0b:8f:79:53:68:e3:e2:3f:2d:0e:01:97:a8:81:aa:
85:39:0d:e5:73:4b:a3:52:79:cf:06:42:4e:8b:6d:b3:63:21:
c4:ed:67:9e:db:a6:6b:af:ca:27:65:7f:e8:bf:4f:d6:94:fb:
13:da:ee:9e:6a:fe:8f:d2:10:02:fd:30:c0:cc:05:36:48:b2:
6b:99:5b:2d:c5:2b:de:b1:29:9e:d8:92:d5:4f:d0:87:d2:38:
72:90:7b:d9:c6:70:08:9c:dd:a4:0f:c2:6f:e5:5e:55:dd:29:
e8:ac:7a:c5:84:d9:73:c8:bd:ba:5d:69:a4:1d:44:10:2a:cd:
41:ef:d1:b8:ac:89:40:47:5a:b8:b2:73:13:cc:91:b2:ef:50:
b7:e9:81:39:23:39:62:cd:6c:63:4b:d5:8b:50:1e:48:bf:a2:
b2:f5:23:74:5e:fe:ef:19:14:e6:b0:c5:5f:3b:53:84:e8:28:
eb:92:31:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:50:41 2025 by rpki-client