Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363230303a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363230303a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: rOzY7GYGYqGcyyI4VJD6qE73YH1ZitMHYgKQdciLFXg=
Subject key identifier: F8:3B:54:B5:6B:35:2E:A2:37:72:16:1F:04:36:93:11:49:F5:EC:41
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 7A9072EBDAD62F9784858E62BF64D08FE9EEE407
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363230303a3a2f34382d3438203d3e203136393039.roa
Signing time: Mon 30 Dec 2024 20:23:09 +0000
ROA not before: Mon 30 Dec 2024 20:18:09 +0000
ROA not after: Mon 29 Dec 2025 20:23:09 +0000
asID: 16909
IP address blocks: 2a14:7584:6200::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 06 Jan 2025 20:19:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:90:72:eb:da:d6:2f:97:84:85:8e:62:bf:64:d0:8f:e9:ee:e4:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Dec 30 20:18:09 2024 GMT
Not After : Dec 29 20:23:09 2025 GMT
Subject: CN=F83B54B56B352EA23772161F0436931149F5EC41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:e7:38:30:dd:cc:2f:07:7f:49:94:d3:0f:81:
76:e5:45:48:fa:97:3c:d2:a3:49:d1:6e:f6:2d:bd:
c0:79:a6:c7:b5:16:5b:19:23:8f:fa:d2:ed:3d:c1:
b8:08:33:8d:f0:e3:e7:1b:b2:a5:41:33:01:3b:4d:
50:49:2f:cd:45:df:b6:83:c0:09:c8:52:51:2a:b5:
2c:e8:c9:f0:8a:cb:3c:68:cf:d9:35:45:b4:8d:46:
71:5a:f3:0a:70:cf:b8:f5:cb:3f:1a:e3:b2:6d:85:
9e:89:ba:14:73:6d:4e:d0:10:0b:c1:14:d7:22:b3:
e7:7c:33:98:c9:d3:7b:0d:ab:c2:01:6f:d2:68:b2:
bb:15:76:77:2b:08:be:75:4e:61:de:3d:d9:50:bc:
c0:ce:11:fd:c0:21:1e:da:df:47:96:34:fd:1a:8e:
52:fe:03:63:8e:3c:f2:85:37:aa:2a:c4:81:bc:5e:
f6:cc:40:e6:98:48:c1:f7:55:7c:9a:c3:4e:2d:a3:
7e:07:d6:d3:bf:cc:c4:33:90:34:b0:41:75:68:55:
5f:a8:16:c7:02:81:0e:ba:b4:2c:80:02:6c:0d:97:
54:cd:9c:d5:c9:28:4f:42:bf:f7:01:34:0c:0f:cd:
5d:3d:7f:28:02:63:62:ef:b5:6d:ca:e1:77:6b:33:
52:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:3B:54:B5:6B:35:2E:A2:37:72:16:1F:04:36:93:11:49:F5:EC:41
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363230303a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6200::/48
Signature Algorithm: sha256WithRSAEncryption
45:5b:98:57:79:8b:21:66:ed:6c:97:20:d8:4c:05:ca:9c:ef:
30:4e:f0:5e:4e:5a:31:27:b0:d9:91:50:d5:70:45:54:4c:0e:
30:b9:1d:fb:06:2c:a3:48:16:57:eb:57:b0:58:1c:b3:de:9f:
d4:4f:c3:d4:3c:9f:01:4e:93:d0:2a:8f:79:7f:ac:64:f5:5c:
70:ba:62:b6:2f:84:f3:2f:db:09:03:66:e7:61:0b:76:72:10:
7d:4d:c3:2c:72:fe:9f:f0:2e:0f:7f:ea:d0:46:d9:ec:3a:4c:
2b:43:bf:08:de:f6:9a:94:85:74:48:d5:a7:9b:c2:63:3b:ae:
76:24:91:21:07:37:d0:5c:81:ac:9f:d5:3a:81:07:ae:3e:02:
69:ca:05:98:55:53:47:66:29:96:88:bc:9a:f1:61:47:1b:ba:
c5:37:95:db:34:10:2f:a4:28:6a:33:a3:7a:18:3c:d5:e1:0b:
ff:d9:39:cb:f3:49:f2:6c:15:81:2b:e9:19:0e:8d:10:28:44:
a0:23:2d:b0:4d:ef:55:fa:24:59:d7:0a:05:63:22:d2:e2:60:
68:71:38:3d:ff:ad:ff:22:21:8a:df:24:ba:89:c2:93:a7:ca:
d5:df:f5:3a:98:6c:59:96:56:bc:0a:2c:1e:d0:dd:03:fc:26:
a9:eb:b4:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:51:28 2025 by rpki-client