Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366665303a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a366665303a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: XN5nHPejoNJk+6hSJOv5RLZ46irc/cYuelGzpOLNIuU=
Subject key identifier: A0:44:0B:4A:B5:D6:13:22:F0:7F:83:76:05:A1:28:3C:2E:A7:BA:70
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 3A219FBFD15230E98F6C036212A62B1BE13AFCA2
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366665303a3a2f34382d3438203d3e203136393039.roa
Signing time: Mon 10 Feb 2025 15:03:39 +0000
ROA not before: Mon 10 Feb 2025 14:58:39 +0000
ROA not after: Mon 09 Feb 2026 15:03:39 +0000
asID: 16909
IP address blocks: 2a14:7584:6fe0::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 02 Mar 2025 15:21:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:21:9f:bf:d1:52:30:e9:8f:6c:03:62:12:a6:2b:1b:e1:3a:fc:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Feb 10 14:58:39 2025 GMT
Not After : Feb 9 15:03:39 2026 GMT
Subject: CN=A0440B4AB5D61322F07F837605A1283C2EA7BA70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:83:18:8e:33:02:2e:aa:ef:c8:f9:54:07:e4:
f7:ff:af:fa:61:a4:41:53:ce:ca:dd:d0:c6:45:48:
9c:dd:b5:cc:8b:38:34:1d:c9:8c:01:59:cf:4d:f5:
c2:2a:50:dd:69:30:70:1b:ef:e7:26:a6:c7:e2:66:
60:75:6f:d3:b0:49:b8:71:00:b7:17:7b:c9:32:67:
57:4b:aa:f9:13:04:fe:4e:54:8e:b2:22:44:4c:8f:
5a:6a:09:44:97:ec:11:be:81:9a:9b:63:f8:e4:01:
d2:a4:69:c4:2f:b5:a4:af:9d:59:96:b5:f1:d4:e6:
0a:a8:85:3d:0f:ff:1e:de:e7:37:27:9e:5f:fd:7d:
e6:71:65:3a:16:30:67:1f:67:9b:fb:b2:f7:d6:49:
35:81:2e:33:86:22:2f:6c:5c:7b:06:b9:db:4c:cc:
6e:07:a5:88:b5:0b:55:02:c6:a6:6e:a0:66:34:70:
2f:44:0b:fc:11:a4:b6:1e:bb:52:48:b1:f1:6b:7a:
2b:e9:0f:41:12:74:7e:59:d5:21:8f:7e:c2:6b:ff:
2a:11:76:f1:6b:54:da:b1:ad:52:26:73:c3:5f:50:
a2:93:0e:cd:78:3d:3f:7d:38:20:18:49:92:31:a4:
1f:eb:5b:41:04:c3:35:e4:cd:2d:87:91:8d:75:a5:
04:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:44:0B:4A:B5:D6:13:22:F0:7F:83:76:05:A1:28:3C:2E:A7:BA:70
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366665303a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6fe0::/48
Signature Algorithm: sha256WithRSAEncryption
af:ca:c8:8b:5c:30:96:6e:09:f5:f7:ec:b0:54:d3:d4:78:c2:
57:b8:b7:9c:c4:97:d8:d6:47:2e:44:f6:b4:b0:23:ef:65:1d:
0b:1c:19:70:79:43:1e:5c:bf:9f:a0:0b:4b:31:95:3c:cd:82:
04:83:32:c9:ef:0f:35:11:0f:53:26:08:84:1c:f2:ae:b1:ec:
78:4c:dc:17:e7:27:7b:2e:1b:c4:26:24:e8:95:64:74:6d:2b:
3a:36:ac:70:e0:f8:a2:2c:12:02:02:92:5c:d3:f7:10:3c:9e:
12:4d:82:b4:92:5e:dd:68:eb:a0:25:03:d4:2b:98:a9:f2:38:
f6:c6:5a:d7:1f:c4:46:60:e6:74:3a:5a:ef:30:a9:f6:55:7f:
00:f9:23:50:e3:37:7f:8b:7f:c1:46:b4:e7:b1:76:de:86:d8:
18:b4:e7:76:8d:87:9b:8c:3c:0e:dd:99:e3:2a:2e:64:dc:57:
df:bf:2b:e1:31:32:ca:89:7e:50:7e:6a:fd:e1:88:c9:69:62:
c5:6d:cc:50:93:a4:bf:78:e3:f7:7c:84:4a:af:15:98:01:93:
58:50:1f:16:37:b6:37:22:5f:96:0e:e7:ba:6a:fb:da:5e:e1:
17:6b:85:56:99:9b:0e:94:f5:ac:ac:ab:52:03:c7:d0:e4:4c:
e5:6e:b1:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:46:56 2025 by rpki-client