Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363132303a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363132303a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: ALWfYtbU2m4eINg6HVpZoKpOYLn/7oi+Ur+zgVg9KlE=
Subject key identifier: 3D:78:28:FC:E2:65:35:63:E6:A0:4A:BF:26:D7:78:A7:CB:71:F1:CD
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 046A60CD3000B1DF33A9CBE7C5FB2B77E7E3866A
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363132303a3a2f34382d3438203d3e203136393039.roa
Signing time: Mon 30 Dec 2024 20:21:41 +0000
ROA not before: Mon 30 Dec 2024 20:16:41 +0000
ROA not after: Mon 29 Dec 2025 20:21:41 +0000
asID: 16909
IP address blocks: 2a14:7584:6120::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 06 Jan 2025 20:19:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:6a:60:cd:30:00:b1:df:33:a9:cb:e7:c5:fb:2b:77:e7:e3:86:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Dec 30 20:16:41 2024 GMT
Not After : Dec 29 20:21:41 2025 GMT
Subject: CN=3D7828FCE2653563E6A04ABF26D778A7CB71F1CD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:64:1b:05:fe:2a:e0:aa:b0:60:96:de:0a:92:
6a:21:ff:41:04:0a:01:66:5f:d7:3c:0f:73:4b:1a:
a7:69:38:40:08:89:ef:11:f2:a8:d3:63:a4:32:d9:
de:6b:0e:0f:6d:3a:69:48:3f:9d:90:6c:57:53:96:
cb:4a:56:c9:72:70:62:23:41:a5:a4:7d:f1:a3:d2:
a2:32:80:ec:43:90:33:23:9b:70:90:18:d5:d8:15:
58:e3:11:2e:e8:c7:8a:93:e0:df:c1:01:ed:91:ba:
32:e3:6d:62:a9:ca:fb:b3:3a:b9:8e:5c:ef:78:12:
b9:32:8b:83:0b:27:c3:7a:63:d4:df:6a:11:7a:74:
15:fb:d2:a7:ea:15:79:e6:e8:f5:2a:57:62:fe:20:
23:fb:c2:bc:75:41:95:23:a3:58:3c:70:1f:eb:5a:
b9:ba:7f:d2:5f:d0:e8:9a:c1:f8:50:37:3e:95:57:
bf:d3:63:c0:41:dd:7c:b6:82:df:3b:81:d2:56:72:
c4:23:7a:be:ab:37:b9:d0:9e:52:ff:1c:6e:96:85:
ab:b1:a7:0b:cd:43:5b:02:63:2b:ad:c7:43:58:d5:
2a:67:c7:ec:0f:fd:08:3e:b8:21:3c:ac:0d:25:2f:
9c:53:47:24:96:e4:40:56:8f:b1:f6:e8:46:13:c4:
25:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:78:28:FC:E2:65:35:63:E6:A0:4A:BF:26:D7:78:A7:CB:71:F1:CD
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363132303a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6120::/48
Signature Algorithm: sha256WithRSAEncryption
24:9c:4a:87:ed:ad:78:8b:00:8a:1a:e6:d3:d6:4f:8b:c5:94:
6f:19:a4:6b:5e:9c:b9:df:a1:6f:de:b5:58:8c:a2:b9:e5:bc:
2f:3c:de:15:97:02:ba:55:9d:46:17:55:6b:33:39:c6:dd:fc:
82:1f:53:b2:29:13:4c:4c:c0:40:bc:dd:30:3f:13:cb:62:04:
12:b0:5b:ca:19:d9:58:b2:c2:39:f9:3b:a2:6e:b3:6c:6f:f4:
57:16:a5:3d:97:68:21:5b:4f:43:89:2e:51:43:70:89:ce:26:
2d:a9:ee:38:25:6a:2c:2e:61:88:ed:0a:57:0e:b1:d7:be:b5:
96:47:2d:25:b1:41:4e:06:32:60:9a:56:cf:08:b2:52:14:50:
f2:30:06:bd:7c:df:09:a3:7a:82:a8:3a:b0:e4:5d:9c:4e:de:
d3:18:12:32:79:c4:2e:05:db:3c:14:39:36:ab:5c:c0:e2:49:
ac:4d:a3:0b:89:9a:31:01:65:cb:ab:c4:81:1b:54:a4:53:41:
10:e1:36:6a:e4:4b:ef:d8:00:c8:25:5d:53:14:a6:9c:45:88:
dd:5a:ae:77:4e:e6:e6:af:a0:71:1c:4c:87:f2:80:4d:23:d1:
2d:42:de:55:be:3b:30:ff:ab:63:89:21:9c:8e:34:67:42:99:
27:15:48:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:44:47 2025 by rpki-client