Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363161303a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363161303a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: eSR1dgu6npyhC/KjWJarxUpIGqfKO/86eTM36EUFSSk=
Subject key identifier: 7E:6F:74:44:03:13:F7:28:F3:E8:88:2F:22:1C:F5:EA:D6:EB:12:AC
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 77F03621B35134F9C14E565CF62C369C2D0D1D0A
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363161303a3a2f34382d3438203d3e203136393039.roa
Signing time: Sat 21 Dec 2024 20:45:56 +0000
ROA not before: Sat 21 Dec 2024 20:40:56 +0000
ROA not after: Sat 20 Dec 2025 20:45:56 +0000
asID: 16909
IP address blocks: 2a14:7584:61a0::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 29 Dec 2024 15:39:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:f0:36:21:b3:51:34:f9:c1:4e:56:5c:f6:2c:36:9c:2d:0d:1d:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Dec 21 20:40:56 2024 GMT
Not After : Dec 20 20:45:56 2025 GMT
Subject: CN=7E6F74440313F728F3E8882F221CF5EAD6EB12AC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:2b:14:45:32:12:30:a0:ab:83:ee:83:e1:df:
f1:1d:9d:99:3f:7a:a8:be:a5:6d:bd:b6:43:0b:d1:
79:6a:94:13:30:83:41:2c:55:3f:9d:c6:15:ac:ad:
18:80:8f:58:26:ed:2f:8a:5d:28:b1:47:4b:a6:d4:
ba:e8:9c:03:61:89:72:ff:e2:22:31:e8:d1:14:2b:
5d:8e:49:67:e0:6b:b5:83:75:a2:2c:f2:28:63:5e:
39:69:ac:e2:4a:70:b1:4e:54:c7:b3:42:59:47:1a:
19:52:4c:ea:09:c5:a6:98:1a:5a:b5:0d:ad:f0:1b:
b3:11:6e:4d:48:dc:24:15:e0:e2:47:52:e7:27:07:
fe:ad:94:44:fa:a5:53:cf:cf:7a:79:c6:3d:f6:94:
99:b6:ed:86:e9:50:38:86:8a:e6:e6:af:ca:da:0d:
02:26:69:48:1e:46:ef:6e:11:55:0e:fc:1f:c7:69:
25:7f:f7:e4:f7:1f:d1:8c:95:6c:b0:dc:52:c6:7f:
71:0f:8f:c7:7d:6e:cd:b7:b3:78:66:2a:f6:20:74:
f7:1a:0e:1e:2a:1b:d7:17:24:50:7a:17:c8:ab:29:
aa:1a:f4:2b:22:5d:c3:03:64:6e:2c:ed:b6:ae:76:
a5:c9:48:f5:6d:cb:44:74:84:69:6f:20:43:1b:9b:
f2:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:6F:74:44:03:13:F7:28:F3:E8:88:2F:22:1C:F5:EA:D6:EB:12:AC
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363161303a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:61a0::/48
Signature Algorithm: sha256WithRSAEncryption
aa:bb:f8:cf:04:0a:bb:92:69:95:f0:01:5e:bf:6c:ba:d8:eb:
c6:f7:03:ab:03:65:01:1d:e1:4e:b7:db:1f:99:2a:97:3a:b8:
d4:fb:60:d4:c3:85:4e:3f:22:53:67:90:30:fa:4e:b9:eb:18:
24:57:a3:bf:36:cb:b5:bd:d4:a8:a8:64:a6:bf:0b:35:ef:6b:
24:3c:a6:f0:3a:37:79:3c:6f:24:1e:81:96:93:71:c8:60:07:
d7:f6:e4:a4:be:3f:41:d6:f8:6e:c9:c8:61:3b:c4:e6:88:56:
55:57:a8:19:2b:52:9c:79:c0:07:aa:0d:29:f5:69:18:9e:93:
c1:72:b5:c5:03:f8:8a:ac:7f:3e:7c:96:85:9a:d6:08:9d:99:
d4:b8:10:08:60:16:46:51:19:df:96:0a:47:e2:15:3e:9b:41:
f2:60:e4:03:cf:f5:14:ba:7d:cd:39:3b:8d:4f:2d:69:dc:fa:
ff:38:90:1f:12:45:38:22:0e:53:27:24:e8:14:7c:5a:3f:1b:
d5:a8:c5:cc:56:0f:4e:8d:1a:12:a1:5d:8f:55:fc:1a:da:59:
f7:42:f7:1c:0f:c4:d1:80:2b:da:6c:65:48:60:bd:95:6f:95:
6d:b4:99:5e:4d:e8:08:27:61:41:91:a9:aa:54:53:d9:ce:77:
64:47:0b:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:46:57 2025 by rpki-client