Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366637303a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a366637303a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: bdO3AQ+IrwlD/rGrJWQeWwhyZ3gVSoro4p3Y5wsvB3U=
Subject key identifier: BB:D5:48:25:98:4B:30:35:9E:F5:1A:BD:BC:EC:89:D4:6E:9D:E1:E5
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 58A34ABE14C1DC09649BDFBCF0061388466F0C93
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366637303a3a2f34382d3438203d3e203136393039.roa
Signing time: Mon 10 Feb 2025 15:02:33 +0000
ROA not before: Mon 10 Feb 2025 14:57:33 +0000
ROA not after: Mon 09 Feb 2026 15:02:33 +0000
asID: 16909
IP address blocks: 2a14:7584:6f70::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 02 Mar 2025 15:15:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:a3:4a:be:14:c1:dc:09:64:9b:df:bc:f0:06:13:88:46:6f:0c:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Feb 10 14:57:33 2025 GMT
Not After : Feb 9 15:02:33 2026 GMT
Subject: CN=BBD54825984B30359EF51ABDBCEC89D46E9DE1E5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:4e:e4:58:56:ba:06:fd:ae:bb:71:37:f0:06:
d3:ad:11:ed:06:ec:18:73:86:fb:52:c3:f4:69:3f:
4c:18:ae:b7:95:78:e3:da:35:63:5a:13:bd:ce:31:
29:f2:62:e8:05:14:e7:c6:8e:ff:bf:7b:1e:eb:ca:
c8:bf:14:1d:16:ef:90:60:7b:a0:a4:8b:c6:e1:72:
8c:2e:41:95:bc:4b:ea:30:41:ef:ef:8e:24:7b:d7:
d4:51:f7:49:3c:73:3f:44:db:e2:c6:20:9a:51:22:
86:f8:ac:80:23:21:98:8c:6a:b2:a8:e5:21:5b:23:
1c:66:a5:36:e7:a8:f8:f9:84:34:cc:11:96:26:f5:
02:24:74:6b:da:7a:4f:35:14:8b:c0:80:b1:b5:85:
b5:56:e9:5e:4d:e9:f3:e9:31:28:bd:1c:e2:93:f7:
84:d4:f9:ce:30:32:f7:dc:eb:d8:7a:fe:b0:97:df:
06:b8:db:c9:6f:70:26:22:40:d7:a4:98:ac:36:fc:
7c:96:59:eb:95:00:72:ba:ce:5c:94:d4:e0:e0:9a:
13:44:47:e3:a5:8c:69:ec:7a:60:e0:6e:ab:a1:7d:
14:9e:fa:41:1b:f8:0f:ca:f7:47:66:65:d2:76:35:
7f:96:43:d9:b5:cc:be:87:24:b9:f9:62:6f:09:62:
aa:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:D5:48:25:98:4B:30:35:9E:F5:1A:BD:BC:EC:89:D4:6E:9D:E1:E5
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366637303a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6f70::/48
Signature Algorithm: sha256WithRSAEncryption
37:e0:91:63:5b:21:61:c9:89:80:b9:00:fd:7f:51:f0:50:28:
9e:b2:bd:9c:a9:d8:3b:86:96:28:b1:05:41:54:0a:bc:e3:cd:
63:65:7d:89:1f:40:1c:7a:e0:fa:6d:18:0b:d3:0e:52:67:f9:
1b:2e:28:6c:1f:2c:a4:ad:cb:bf:45:6a:f4:e0:3d:e1:5a:57:
c0:6e:bc:ff:a1:b2:53:82:43:38:b8:2c:52:a4:53:50:75:52:
7e:f5:c3:68:02:40:30:c5:df:61:62:3d:62:2a:8b:af:55:f6:
4b:8e:60:a3:a8:3d:2c:4b:fe:0e:59:fa:b5:30:d7:8a:bb:11:
67:ea:b5:22:1a:a1:cd:4c:88:a5:eb:b1:6a:4d:90:de:2c:8b:
f9:68:53:32:68:79:e6:d5:b4:c4:0c:cb:fc:8a:a2:1d:b0:1f:
f4:f0:f2:61:5f:6f:de:68:72:ad:d2:43:cb:11:ec:e8:c5:de:
ae:aa:e4:67:08:e2:90:aa:75:f6:24:8c:c2:a5:b6:a2:92:14:
cf:d9:6f:19:76:85:99:c1:91:e9:67:e2:f0:2e:ed:e5:a5:b2:
f5:b3:fc:f5:c1:da:ba:23:2f:4b:76:95:7a:b5:d2:fd:42:b6:
c2:6f:aa:50:3b:59:b2:bf:d1:ab:36:e0:dc:cc:30:49:0e:8a:
fb:f9:dd:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:50:20 2025 by rpki-client