Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363133303a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363133303a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: rxWUbgcCNBuHGgh0DSiiMJUeJvmuZ2Nntzm777UbGck=
Subject key identifier: EF:60:02:44:B5:4F:3A:F4:5D:DE:58:F3:53:83:21:A6:EF:37:AF:9D
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 3F2B1B4B49A0D5CFBE4BD6D44DA80D5DA1C8EDEA
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363133303a3a2f34382d3438203d3e203136393039.roa
Signing time: Mon 30 Dec 2024 20:21:42 +0000
ROA not before: Mon 30 Dec 2024 20:16:42 +0000
ROA not after: Mon 29 Dec 2025 20:21:42 +0000
asID: 16909
IP address blocks: 2a14:7584:6130::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 14 Jan 2025 14:23:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:2b:1b:4b:49:a0:d5:cf:be:4b:d6:d4:4d:a8:0d:5d:a1:c8:ed:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Dec 30 20:16:42 2024 GMT
Not After : Dec 29 20:21:42 2025 GMT
Subject: CN=EF600244B54F3AF45DDE58F3538321A6EF37AF9D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:1e:b0:c3:65:b4:a7:ce:b6:58:a4:07:33:94:
24:cf:70:d5:6c:7c:80:90:ae:ec:52:c4:14:ad:ac:
a4:c5:37:5f:b7:66:f2:dc:8a:23:f0:05:8e:99:16:
b1:7d:66:03:e9:f2:13:20:45:b1:40:66:2e:45:2b:
65:f3:81:1a:33:d0:45:4f:8c:76:20:2a:db:7f:c4:
b3:16:82:97:c3:3d:99:eb:64:c5:b4:2a:3c:d4:4c:
cb:bc:2d:9c:4d:32:53:02:e2:dc:d0:25:17:c6:67:
1a:17:94:c2:ee:9f:03:5e:55:7d:8c:d3:af:92:46:
4e:5b:17:7c:bc:66:a2:63:8f:4b:3a:a7:33:ce:75:
2e:dc:5f:bc:b8:95:1a:4b:79:ef:79:3b:29:c9:1e:
63:c6:6a:e9:79:ae:a1:b5:61:d7:6c:48:50:c7:27:
54:58:67:d7:47:f1:c8:9c:95:5c:df:35:d5:d4:fc:
5c:3a:02:0a:a5:e8:f3:6a:7a:78:0b:f3:bf:20:55:
51:6c:69:8a:b8:d8:ad:d9:56:a5:60:da:92:20:27:
66:f8:58:b0:ce:91:eb:4f:60:8e:19:48:ba:ba:23:
6e:3f:cb:8e:c8:85:2f:a9:f6:15:fb:a0:8b:72:f4:
f6:00:5f:04:38:ff:92:79:7c:33:1b:fb:ef:d8:f9:
2a:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:60:02:44:B5:4F:3A:F4:5D:DE:58:F3:53:83:21:A6:EF:37:AF:9D
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363133303a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6130::/48
Signature Algorithm: sha256WithRSAEncryption
5b:f0:2f:0e:48:75:b4:0a:f6:5f:89:e3:eb:e5:9b:6a:9e:cd:
26:5e:a6:39:7c:45:a2:47:56:29:1f:82:c8:87:50:4d:2b:9f:
72:8e:0c:37:45:ae:1b:05:ed:de:7e:27:68:14:fb:48:bf:b4:
b0:6d:09:c2:44:7e:c9:23:d5:c3:f5:79:5c:4a:24:6f:15:6b:
8c:9e:15:51:75:45:f9:73:46:d4:72:0f:e3:a6:c4:77:de:9f:
be:39:20:ac:5d:80:4e:ae:3a:d2:4f:26:38:88:8f:0a:d7:5a:
56:23:6c:c1:23:70:92:82:76:4c:01:45:3a:eb:9b:17:78:fa:
a6:84:36:d9:0f:ec:03:55:27:cd:04:9a:17:80:98:fa:fd:9b:
6c:6c:ca:1f:5d:98:cb:f4:25:71:3c:28:5a:d5:d9:90:99:f4:
f6:ae:f6:f3:6e:e1:c7:6b:94:74:79:67:aa:44:80:00:31:f4:
69:9d:9e:87:8a:c9:6a:c9:96:9f:4e:21:20:5b:fa:ed:ec:3f:
08:6e:6e:e6:58:6d:d1:ed:32:78:c5:c4:f7:10:b8:69:3d:76:
67:86:30:32:21:62:54:9a:46:fa:3a:59:29:19:f5:95:e8:1f:
8d:6b:64:7a:5f:aa:42:e5:36:9c:0e:a5:01:ff:30:32:25:cb:
61:d2:4f:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:49:44 2025 by rpki-client