Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363031303a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363031303a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: SuZAc2/moE+GfZiysmjj8nyb2TjGf1RN8DaWSk83PrY=
Subject key identifier: 66:89:67:CB:45:35:2F:49:9A:78:0D:E0:FE:45:82:D3:43:E9:D7:73
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 1BE90B73163A349F9CB830072C41E7FA0FAE82AD
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363031303a3a2f34382d3438203d3e203136393039.roa
Signing time: Tue 24 Dec 2024 21:07:04 +0000
ROA not before: Tue 24 Dec 2024 21:02:04 +0000
ROA not after: Tue 23 Dec 2025 21:07:04 +0000
asID: 16909
IP address blocks: 2a14:7584:6010::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 29 Dec 2024 15:39:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:e9:0b:73:16:3a:34:9f:9c:b8:30:07:2c:41:e7:fa:0f:ae:82:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Dec 24 21:02:04 2024 GMT
Not After : Dec 23 21:07:04 2025 GMT
Subject: CN=668967CB45352F499A780DE0FE4582D343E9D773
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:f0:0b:88:9a:b1:61:67:08:89:86:de:69:98:
7e:0d:a1:77:d8:b1:31:f9:13:e5:0d:44:42:9a:8d:
f0:74:7f:79:28:ef:af:bc:5c:39:22:ce:1a:81:6c:
52:fa:a8:09:56:62:23:fa:77:4a:f9:a6:6b:f1:73:
9a:e7:02:95:8a:65:ee:fd:30:b4:de:99:be:7b:83:
cc:ce:0e:be:75:40:09:28:d3:a7:16:aa:e6:1b:cd:
96:60:08:62:9a:09:65:cb:5a:1c:d5:b5:35:20:96:
29:61:4e:28:30:60:d4:f6:c2:52:ae:cf:35:8d:0c:
dd:b4:ee:13:23:27:b3:b1:47:73:37:e5:d3:41:57:
b5:c2:2b:cc:29:75:38:49:db:06:0e:d0:1d:a9:b3:
f3:2e:79:9a:7a:32:5e:8a:f9:87:23:8a:c6:2d:7c:
9c:fb:4e:c6:d0:5d:d9:2d:49:c6:44:4b:ac:3d:ce:
73:33:b6:3a:69:c5:56:e0:61:10:f2:5e:02:e0:13:
4d:a9:74:60:a3:6f:c9:6f:98:20:37:de:f4:e8:fa:
73:dc:da:f1:64:c8:40:79:2e:df:30:3a:30:dd:0c:
8c:0c:65:87:e2:83:a6:46:12:fc:c6:12:18:da:de:
27:93:98:c1:a4:09:e5:54:c6:5d:59:6a:d1:41:af:
a6:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:89:67:CB:45:35:2F:49:9A:78:0D:E0:FE:45:82:D3:43:E9:D7:73
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363031303a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6010::/48
Signature Algorithm: sha256WithRSAEncryption
88:a9:17:79:53:dd:51:7d:d5:f9:91:67:bd:cd:19:60:15:b6:
23:52:60:df:d0:4a:8d:c7:4f:cc:1b:0b:d1:02:a2:24:81:83:
ac:03:fb:aa:7f:21:29:b4:91:e5:a3:a2:0b:7b:c8:22:61:f9:
f1:61:e4:db:7b:05:4a:36:45:17:d2:14:55:70:69:71:92:c9:
72:70:0b:fe:3f:a3:77:1a:d0:fa:e9:58:ac:57:c1:c3:e2:6b:
11:b7:e1:32:06:ee:fb:57:75:90:ae:3e:84:a9:16:33:b2:ee:
ad:6c:a1:0f:61:8f:94:21:a6:21:a3:68:1f:5c:cf:b0:50:2b:
58:84:07:f2:90:20:e5:19:b7:e6:83:18:17:46:7e:41:a1:79:
bf:d1:76:3d:a5:46:5f:57:03:44:63:3f:13:50:96:19:94:a9:
a9:07:2b:9d:20:bb:13:cd:cb:0e:82:f4:47:3e:2f:0a:0b:43:
c2:30:9b:ae:8a:7c:5c:1a:d9:3f:4a:df:7c:4b:be:ac:eb:2d:
57:05:88:b2:b2:8e:b4:b1:10:56:62:da:93:d2:1b:ff:47:ee:
70:20:a5:fc:15:d1:2a:24:41:a0:a9:f5:f0:10:4c:40:39:ae:
13:1b:e9:da:d8:78:16:86:c1:e4:d7:90:0f:28:ec:73:66:86:
49:eb:b9:eb
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUG+kLcxY6NJ+cuDAHLEHn+g+ugq0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NCMjZGNzY0MkZENkI0Q0JGMzVGQkVFNDU1RjFFRkIw
QzlGMEE0NTAeFw0yNDEyMjQyMTAyMDRaFw0yNTEyMjMyMTA3MDRaMDMxMTAvBgNV
BAMTKDY2ODk2N0NCNDUzNTJGNDk5QTc4MERFMEZFNDU4MkQzNDNFOUQ3NzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ8AuImrFhZwiJht5pmH4NoXfY
sTH5E+UNREKajfB0f3ko76+8XDkizhqBbFL6qAlWYiP6d0r5pmvxc5rnApWKZe79
MLTemb57g8zODr51QAko06cWquYbzZZgCGKaCWXLWhzVtTUglilhTigwYNT2wlKu
zzWNDN207hMjJ7OxR3M35dNBV7XCK8wpdThJ2wYO0B2ps/MueZp6Ml6K+YcjisYt
fJz7TsbQXdktScZES6w9znMztjppxVbgYRDyXgLgE02pdGCjb8lvmCA33vTo+nPc
2vFkyEB5Lt8wOjDdDIwMZYfig6ZGEvzGEhja3ieTmMGkCeVUxl1ZatFBr6YPAgMB
AAGjggJoMIICZDAdBgNVHQ4EFgQUZolny0U1L0maeA3g/kWC00Pp13MwHwYDVR0j
BBgwFoAUfLJvdkL9a0y/NfvuRV8e+wyfCkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMS83Q0IyNkY3NjQy
RkQ2QjRDQkYzNUZCRUU0NTVGMUVGQjBDOUYwQTQ1LmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdm
MzgyNC8wLzdDQjI2Rjc2NDJGRDZCNENCRjM1RkJFRTQ1NUYxRUZCMEM5RjBBNDUu
Y2VyMIGqBggrBgEFBQcBCwSBnTCBmjCBlwYIKwYBBQUHMAuGgYpyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMS8zMjYxMzEzNDNhMzczNTM4MzQzYTM2MzAzMTMwM2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzEzNjM5MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoUdYRgEDAN
BgkqhkiG9w0BAQsFAAOCAQEAiKkXeVPdUX3V+ZFnvc0ZYBW2I1Jg39BKjcdPzBsL
0QKiJIGDrAP7qn8hKbSR5aOiC3vIImH58WHk23sFSjZFF9IUVXBpcZLJcnAL/j+j
dxrQ+ulYrFfBw+JrEbfhMgbu+1d1kK4+hKkWM7LurWyhD2GPlCGmIaNoH1zPsFAr
WIQH8pAg5Rm35oMYF0Z+QaF5v9F2PaVGX1cDRGM/E1CWGZSpqQcrnSC7E83LDoL0
Rz4vCgtDwjCbrop8XBrZP0rffEu+rOstVwWIsrKOtLEQVmLak9Ib/0fucCCl/BXR
KiRBoKn18BBMQDmuExvp2th4FobB5NeQDyjsc2aGSeu56w==
-----END CERTIFICATE-----
Generated at Sat Apr 19 00:47:03 2025 by rpki-client