Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366636303a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a366636303a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: ZEvrxCmPNE9RV/5Xp24RTxMfX+rR3nfW6TKrKep09bg=
Subject key identifier: FD:A2:3E:CB:12:B3:00:90:A1:59:29:21:01:ED:68:C3:B6:5F:64:01
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 6478DCBA54BFB087A9C494811F28050FCCD66BD3
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366636303a3a2f34382d3438203d3e203136393039.roa
Signing time: Mon 10 Feb 2025 15:02:33 +0000
ROA not before: Mon 10 Feb 2025 14:57:33 +0000
ROA not after: Mon 09 Feb 2026 15:02:33 +0000
asID: 16909
IP address blocks: 2a14:7584:6f60::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 02 Mar 2025 15:14:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:78:dc:ba:54:bf:b0:87:a9:c4:94:81:1f:28:05:0f:cc:d6:6b:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Feb 10 14:57:33 2025 GMT
Not After : Feb 9 15:02:33 2026 GMT
Subject: CN=FDA23ECB12B30090A159292101ED68C3B65F6401
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:72:b0:d1:7c:e0:a9:44:bf:a2:c8:8e:55:a5:
55:7c:3b:5f:69:28:37:98:52:68:93:9f:f6:a7:5f:
f5:f2:20:fa:72:0f:ca:c3:09:9c:14:16:81:67:d7:
90:b5:8e:ef:df:34:46:fb:5a:5b:b3:08:9c:ed:b1:
ae:d9:64:93:f3:f2:5e:45:6b:7b:d3:c1:2e:8a:77:
f6:60:d1:10:45:49:bd:41:bb:fb:01:93:f3:5a:c0:
45:66:23:d9:5f:a1:1c:f9:60:72:3c:14:37:9a:6a:
55:e4:38:00:ac:33:e6:a8:cf:b9:95:6e:17:d6:1a:
d0:f5:c5:db:9d:30:3c:92:01:b2:59:42:15:9b:69:
1e:57:d6:10:c4:1b:ae:57:ec:5c:88:f0:c3:5b:46:
53:1a:30:32:1e:7e:3d:16:ff:cd:fb:34:0a:75:ea:
eb:4f:67:4e:76:5d:c8:38:32:30:06:08:b5:62:e0:
26:94:d9:9b:b9:3a:c6:35:a5:96:57:5c:46:dc:79:
34:44:88:7c:fd:60:50:d1:79:64:52:94:a9:7b:9a:
a8:8b:cd:8b:b4:28:5e:b1:5e:9c:bd:e6:43:b7:30:
63:ea:9a:ba:71:9b:17:69:86:d0:fd:3a:76:1e:a1:
24:3b:98:c3:d7:06:f4:3f:81:30:4e:bf:79:ac:eb:
fe:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:A2:3E:CB:12:B3:00:90:A1:59:29:21:01:ED:68:C3:B6:5F:64:01
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366636303a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6f60::/48
Signature Algorithm: sha256WithRSAEncryption
7c:8e:f9:80:8d:f1:1a:47:05:89:fb:33:ee:9c:58:75:b1:90:
c5:19:0c:bb:2c:53:82:8e:ec:82:85:52:6f:00:fa:94:ec:6b:
ba:4d:d8:12:aa:b8:74:14:8f:cd:7f:fb:b1:67:4e:90:77:f7:
b0:a8:f8:14:b4:56:e2:17:d2:ec:c9:9b:11:8b:28:05:09:43:
5f:6b:3c:c8:99:eb:08:8c:07:ba:d7:e7:6d:1e:37:1b:91:c3:
f4:23:c7:cd:ae:36:b3:fe:4c:6e:6d:8b:c2:6d:ab:77:9a:8e:
91:58:ce:e0:54:e1:fc:c9:b0:5b:ce:72:59:f8:d1:e2:03:36:
6a:6a:5e:e0:4b:14:13:34:1d:ff:ee:7e:24:54:75:df:83:c9:
65:86:d1:f9:bb:27:81:a9:6c:33:04:dc:16:91:a0:1b:fa:12:
b6:5a:ad:2c:a4:98:24:48:37:ca:82:a3:85:db:83:9a:a6:dd:
2f:c3:49:21:fc:94:14:1d:96:26:8b:34:6f:27:00:26:91:ba:
06:4c:01:a9:30:86:60:bf:8a:21:3a:54:71:1c:ba:9b:6c:03:
d9:75:bc:77:08:c0:04:f9:9d:70:ea:75:bc:9a:14:d6:03:91:
4f:e6:b6:be:22:d6:f1:cb:19:bd:ca:3f:c7:16:f4:38:7c:cb:
1f:c6:40:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:50:42 2025 by rpki-client