Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366639303a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a366639303a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: 7f8WXdcRjVWsTzMtkTtmIpoW9Kq8uW3TunlwfUcTnrc=
Subject key identifier: 55:06:6C:B7:52:76:5D:10:FD:75:16:E2:C3:7C:4C:76:12:FE:EA:FE
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 0B81DA02F8A4662BEB5F649F71AADF1BE0E6CC37
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366639303a3a2f34382d3438203d3e203136393039.roa
Signing time: Mon 10 Feb 2025 15:02:35 +0000
ROA not before: Mon 10 Feb 2025 14:57:35 +0000
ROA not after: Mon 09 Feb 2026 15:02:35 +0000
asID: 16909
IP address blocks: 2a14:7584:6f90::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 02 Mar 2025 15:20:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:81:da:02:f8:a4:66:2b:eb:5f:64:9f:71:aa:df:1b:e0:e6:cc:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Feb 10 14:57:35 2025 GMT
Not After : Feb 9 15:02:35 2026 GMT
Subject: CN=55066CB752765D10FD7516E2C37C4C7612FEEAFE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:1a:b3:38:db:c6:31:b4:29:8c:58:e2:58:b6:
36:88:c5:ea:ec:77:4f:e7:22:22:b4:0a:76:09:f9:
ab:7f:fd:28:96:f6:19:5e:6a:fe:63:6b:c9:6c:08:
b9:fc:58:f6:c9:27:11:40:3e:cd:3e:bb:7c:41:8e:
90:18:ff:b9:79:9f:b9:69:0f:35:6b:51:ca:86:1a:
41:9a:2e:cf:f1:da:74:1b:ad:26:f5:58:08:f8:15:
aa:da:fb:87:e5:46:77:d8:85:a0:17:d3:26:8f:62:
a7:3e:5b:81:78:d4:f3:59:54:6a:a7:c4:df:5a:c7:
a8:55:2a:6b:84:0b:28:95:09:a3:2b:36:ba:d7:20:
d6:93:09:e6:c1:2d:6a:59:14:f6:ac:4a:23:d1:bc:
4a:27:0b:60:ea:4d:a1:53:11:b3:fc:2c:47:b7:16:
f3:6a:89:f7:8d:99:f1:75:11:ab:2c:89:b7:79:92:
63:2a:31:5c:79:4d:26:7b:c2:2f:bb:c4:1d:65:b0:
b9:b3:b3:4d:6c:2b:d1:d0:48:b6:86:e6:28:61:d2:
bf:3c:52:73:fc:e7:bc:de:0c:b1:25:a1:a2:98:11:
2a:0b:ed:84:a8:3a:1d:72:d8:1b:0d:a6:6d:db:13:
47:4f:65:db:0a:9e:6c:cf:a1:f8:12:6a:03:87:90:
df:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:06:6C:B7:52:76:5D:10:FD:75:16:E2:C3:7C:4C:76:12:FE:EA:FE
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366639303a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6f90::/48
Signature Algorithm: sha256WithRSAEncryption
3b:2d:48:81:68:ee:1c:bf:6b:0b:a9:f6:d1:69:e8:10:de:fa:
90:d7:44:cb:48:35:71:06:f2:06:e8:2f:31:9a:33:65:5b:c6:
5e:fb:30:c7:7d:4b:f4:d7:88:58:9c:5e:cb:ac:42:e6:54:da:
79:ef:9a:d7:fb:5a:ba:07:69:d9:6d:33:c1:29:38:5d:d6:22:
5a:0e:3d:1b:38:c5:ac:40:ba:86:ff:77:9b:ee:94:f3:fc:6a:
da:6a:ad:97:b8:07:02:9e:2f:01:87:02:32:3e:96:41:dc:fa:
22:0f:87:a7:74:59:39:1e:d0:2e:e8:4b:7a:41:b8:41:32:a7:
9f:19:8a:0c:b0:c7:96:ca:fa:1b:bc:aa:36:68:cf:fc:94:1b:
4b:19:29:2f:3b:84:f1:87:ae:fb:b7:12:bd:1a:07:21:82:62:
4f:71:f9:45:cc:4e:06:74:65:86:52:73:3e:b5:f5:13:19:81:
3f:4f:b6:9b:69:11:53:87:b2:0d:a0:ca:47:be:a9:4c:72:73:
23:00:59:e8:30:43:55:e4:f0:6e:e5:78:da:65:2e:26:3b:50:
13:19:69:9b:02:d2:b1:51:0e:b3:97:a4:be:b2:7d:cd:5f:65:
89:de:bf:76:53:64:71:0d:3b:bd:de:e6:33:27:4e:44:40:83:
c8:c8:b9:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:50:30 2025 by rpki-client