Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366664303a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a366664303a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: 07/mth4qJqeXVmOpFCeCjCaUfPO5D+aRcBC949brPug=
Subject key identifier: 51:A2:8C:39:89:AC:31:57:3D:88:E0:96:C2:2D:C0:3D:E5:60:8B:31
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 0BF53EDDC657D14FDB39E984C945FC99B46F0C46
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366664303a3a2f34382d3438203d3e203136393039.roa
Signing time: Mon 10 Feb 2025 15:03:39 +0000
ROA not before: Mon 10 Feb 2025 14:58:39 +0000
ROA not after: Mon 09 Feb 2026 15:03:39 +0000
asID: 16909
IP address blocks: 2a14:7584:6fd0::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 02 Mar 2025 15:14:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:f5:3e:dd:c6:57:d1:4f:db:39:e9:84:c9:45:fc:99:b4:6f:0c:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Feb 10 14:58:39 2025 GMT
Not After : Feb 9 15:03:39 2026 GMT
Subject: CN=51A28C3989AC31573D88E096C22DC03DE5608B31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:08:20:d8:1f:f2:b7:b1:71:e6:e3:1c:38:f7:
1f:7b:a4:8c:11:2b:bd:b5:7c:90:e7:aa:3c:6c:10:
ba:4a:2e:05:58:44:64:d5:f2:91:4d:3f:75:35:dd:
c2:f0:b5:5f:ee:0e:eb:29:25:a0:45:d1:a6:e5:e1:
1d:78:46:34:1d:9a:24:b8:b8:9d:6e:86:a4:04:b5:
80:0a:25:c4:4d:8a:0c:11:d5:72:48:56:31:1a:9b:
81:f1:de:3f:59:6e:c8:a0:15:28:e8:64:cc:bd:98:
e8:d0:5f:c9:ba:54:b2:b3:13:35:89:46:ac:f0:aa:
f7:20:e5:a8:90:61:83:a0:c7:7c:f2:1d:aa:eb:95:
c1:cb:33:91:87:ae:ff:c8:2e:7b:f6:5b:e3:df:ab:
00:fe:38:93:f4:7b:c2:c0:0e:ab:8f:3a:34:ff:a4:
82:b1:1c:6f:5e:ba:f5:75:6c:59:40:c4:de:6c:4e:
ae:fa:e2:d0:da:89:dc:ec:ad:be:af:3e:9c:d7:e1:
74:aa:cb:54:5a:0f:1e:18:d9:4b:50:e4:9f:48:bc:
47:f2:60:e0:e1:fe:a0:66:57:5b:a3:7b:61:d8:1b:
6e:2c:a2:4a:36:3a:ff:3f:d0:c3:80:50:58:1f:28:
14:ae:d2:4b:38:8d:88:51:02:af:2a:3c:62:5c:2a:
cd:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:A2:8C:39:89:AC:31:57:3D:88:E0:96:C2:2D:C0:3D:E5:60:8B:31
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366664303a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6fd0::/48
Signature Algorithm: sha256WithRSAEncryption
21:bc:94:f7:32:c4:f3:83:53:43:41:6c:c1:9e:5b:2b:fa:aa:
91:e7:2d:c2:01:34:09:56:e1:d3:74:7d:72:b9:a4:9d:61:7c:
98:47:e3:9f:10:06:d2:4a:0b:94:76:00:4c:e3:c5:85:54:3c:
e5:92:74:d1:94:43:7e:9f:24:5f:41:b0:e2:ae:82:4b:ba:ac:
be:83:e9:b9:9c:df:ab:66:4c:fc:f5:7e:25:bd:f9:18:a8:fa:
61:6c:91:84:ad:47:a3:47:fc:fc:ae:62:31:37:23:17:f8:8a:
89:4e:77:3e:37:11:d1:1e:25:9d:3a:42:81:76:9f:15:dc:4c:
b2:70:8b:e7:ae:3e:3c:80:84:24:89:fc:58:53:89:47:2a:59:
16:1a:34:cf:3a:2e:2d:01:37:2c:ba:b1:35:3c:28:89:15:d2:
66:8e:0f:f7:2d:4b:19:5f:52:08:b0:d7:d5:94:94:3a:47:ed:
04:0f:d6:21:13:91:ad:d2:55:98:28:a5:62:3c:4d:62:05:8f:
b0:7a:48:8d:f3:bd:53:36:1c:e2:47:8a:f5:af:ff:55:d9:42:
0a:5a:bb:ef:1c:a3:54:42:2a:39:17:52:6a:25:b4:cd:31:b3:
78:43:bc:e4:f5:bb:ff:de:e8:e6:e4:0c:2c:4f:0f:27:be:12:
ef:ba:80:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:50:25 2025 by rpki-client