Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366563303a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a366563303a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: wuM+A5Y5a9kpRKUniBcfnpi+CJcuJYiHiZyEGjp73xA=
Subject key identifier: FC:CE:06:AA:17:E4:DF:C9:C7:1E:50:43:39:E1:73:1E:3B:D8:6B:AF
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 158D785199FC2E168CA1A4A60206083578823982
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366563303a3a2f34382d3438203d3e203136393039.roa
Signing time: Sat 08 Feb 2025 20:11:34 +0000
ROA not before: Sat 08 Feb 2025 20:06:34 +0000
ROA not after: Sat 07 Feb 2026 20:11:34 +0000
asID: 16909
IP address blocks: 2a14:7584:6ec0::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 15 Feb 2025 20:42:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:8d:78:51:99:fc:2e:16:8c:a1:a4:a6:02:06:08:35:78:82:39:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Feb 8 20:06:34 2025 GMT
Not After : Feb 7 20:11:34 2026 GMT
Subject: CN=FCCE06AA17E4DFC9C71E504339E1731E3BD86BAF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:b5:2a:20:6b:71:d0:1f:a4:c6:93:57:3f:1b:
1f:c7:49:fb:6d:3c:83:d4:5d:90:1f:8f:ca:0e:36:
fe:05:bf:cd:29:1c:b2:1d:20:b0:93:ee:d6:c4:0d:
fe:87:a0:87:7c:a5:95:74:5c:e8:82:53:9e:f4:d2:
34:af:cc:9c:2c:a4:22:76:97:29:e5:28:2a:99:ad:
5b:f6:91:af:89:7c:8e:24:db:60:80:4d:f9:3f:b8:
88:3d:f1:bc:19:18:fa:ce:b0:bb:b8:42:bc:a4:5c:
3a:83:5e:c1:6f:68:91:71:ec:41:ea:0d:4c:a7:94:
c2:11:15:9f:8c:a3:dd:82:b2:e3:97:76:25:f4:30:
a2:a2:ea:b0:b5:dc:db:bf:ab:c2:5a:70:41:05:d1:
5e:06:f8:d6:67:4a:e7:bb:2e:3e:9c:0f:87:ea:3f:
49:d3:78:75:44:aa:bf:bb:a3:58:82:22:fa:5b:ec:
54:70:9c:a9:f8:18:21:d5:ff:5c:20:fe:75:27:7c:
1c:db:06:91:52:c9:04:9c:d9:50:8c:28:1a:bd:0f:
51:61:d2:4e:ec:0b:49:07:2b:bf:0c:f8:99:c0:36:
a6:13:ad:f3:db:44:0b:c2:f2:b6:47:a6:63:50:2a:
5e:04:93:4c:9c:59:5b:36:d2:cc:2e:73:52:92:7a:
c3:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:CE:06:AA:17:E4:DF:C9:C7:1E:50:43:39:E1:73:1E:3B:D8:6B:AF
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366563303a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6ec0::/48
Signature Algorithm: sha256WithRSAEncryption
17:8c:25:bb:fa:01:00:4c:9d:99:16:c0:8e:98:36:e5:dd:6f:
b8:28:56:65:9d:aa:fd:41:09:2e:3b:0f:de:ca:33:0a:37:72:
05:15:4e:94:64:92:a3:cc:61:de:1e:9c:99:8d:b1:53:da:83:
ec:e1:8a:a8:9f:0f:1c:49:84:5d:89:93:c1:29:b2:fc:59:68:
d2:dd:cd:d3:2b:6f:f3:1e:ed:82:1f:8a:8f:6b:c9:89:5f:6d:
0d:af:0f:01:76:c4:e4:b3:43:d7:2a:bb:a9:0c:95:2e:fb:5b:
ae:c1:5f:04:1f:c0:c5:24:0c:8c:5c:ef:59:88:8d:d8:48:9b:
7a:89:18:93:ed:6c:53:b2:46:6f:f7:f8:7e:1b:61:ca:b9:d4:
e7:f5:a2:3c:9f:55:c8:b7:55:ff:a2:59:e9:fa:0c:08:80:ef:
55:b0:3f:ab:60:74:5a:0f:35:9a:81:4f:24:0d:b2:8e:e6:fa:
c6:80:ab:ea:04:15:4b:67:22:08:e8:bf:28:d2:ab:59:92:8a:
61:4a:d7:4f:d8:89:32:c3:33:66:4c:30:d8:ea:6b:91:b1:eb:
c6:87:eb:f4:a5:e0:78:45:bd:00:4a:61:af:4c:d2:01:5e:43:
3d:92:3a:05:e4:0f:ff:15:9c:0f:ed:53:a0:89:21:21:80:4d:
7f:6e:d4:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 10:03:57 2025 by rpki-client