Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363235303a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363235303a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: 0oX/hyz/IRPNEIjhm5oTyY7K2l6pXTkgBucQ1lY77RU=
Subject key identifier: 73:E2:4A:3E:2C:CD:B4:62:FB:8B:0F:C0:C9:85:8A:DA:8B:E2:CB:89
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 7909499B63A298802343E39FCAD075D140074FA4
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363235303a3a2f34382d3438203d3e203136393039.roa
Signing time: Sat 21 Dec 2024 20:46:26 +0000
ROA not before: Sat 21 Dec 2024 20:41:26 +0000
ROA not after: Sat 20 Dec 2025 20:46:26 +0000
asID: 16909
IP address blocks: 2a14:7584:6250::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 24 Dec 2024 21:04:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:09:49:9b:63:a2:98:80:23:43:e3:9f:ca:d0:75:d1:40:07:4f:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Dec 21 20:41:26 2024 GMT
Not After : Dec 20 20:46:26 2025 GMT
Subject: CN=73E24A3E2CCDB462FB8B0FC0C9858ADA8BE2CB89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c8:e3:a4:5a:5c:c5:d5:3e:a5:5a:93:fa:a7:
19:f9:7a:8c:cc:3d:88:bf:05:aa:3d:d5:c0:41:37:
9b:97:04:df:f6:7d:af:fc:1c:49:18:d8:15:58:69:
55:de:32:b6:68:a7:88:9d:26:1c:76:cd:2c:ae:e1:
a2:ef:e6:11:1c:ae:9f:be:53:dc:fc:13:29:8c:e4:
ba:8e:93:1e:7c:c1:b6:41:e0:69:ac:12:fb:6c:16:
f6:d7:87:da:99:29:1c:2b:a4:a7:90:c9:d7:85:2b:
28:79:b7:50:e4:b6:00:f8:2f:da:48:57:7c:56:a0:
e9:ec:c8:71:79:12:74:70:59:9f:9a:e4:25:2a:a7:
3c:69:d8:59:ca:91:65:14:f7:24:a2:df:ec:f4:5e:
ad:f5:c1:cd:f3:eb:b9:84:9d:03:73:62:44:7b:48:
38:cb:7f:33:56:3f:97:25:65:1d:6a:44:ee:c3:dd:
b9:b3:ac:d9:26:16:10:55:f4:df:6d:be:f1:da:54:
b9:5e:43:40:17:18:2a:8b:79:fb:cb:a0:a5:8f:d0:
a6:f8:87:d5:26:d5:c0:24:bc:ab:44:9e:5f:f7:55:
ee:db:99:12:8b:df:03:1a:f6:a7:8d:63:48:1b:1b:
cd:4e:1e:f1:62:d0:67:8e:60:1b:7e:2f:78:db:66:
75:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:E2:4A:3E:2C:CD:B4:62:FB:8B:0F:C0:C9:85:8A:DA:8B:E2:CB:89
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363235303a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6250::/48
Signature Algorithm: sha256WithRSAEncryption
b1:04:12:31:a7:5b:8e:31:c9:65:37:4e:60:ec:5a:56:17:50:
b7:ec:2c:34:a1:d5:01:0f:18:90:0c:59:77:e4:28:ea:a2:ec:
a6:cc:06:c3:25:a1:04:21:cf:b0:6f:45:26:81:de:a3:83:77:
c6:d7:9b:d4:2c:ef:68:67:6f:18:29:85:08:17:96:6c:d8:ff:
2f:4f:ef:94:52:8f:d1:1f:4c:96:7f:97:45:41:27:f1:83:11:
55:c4:21:25:25:af:df:0b:3f:82:2b:d1:ea:93:95:9e:9f:1d:
e7:29:c0:5a:4c:55:0a:46:3a:0e:b2:cc:c9:91:57:60:17:fb:
78:4d:a4:49:0b:21:26:a6:7b:17:f8:db:76:00:65:55:76:66:
1f:0a:95:f1:12:51:2d:11:d6:e5:4f:6c:5b:18:4c:c2:94:85:
5d:75:51:a0:77:3c:89:45:a0:c2:99:bc:8d:1a:d7:5d:28:67:
26:88:2a:a9:0f:b5:37:3e:15:46:7e:c0:a6:e1:05:68:8c:6c:
06:50:1b:ae:f1:35:33:90:3a:45:8d:f4:52:74:d5:e6:ec:ae:
d2:bc:ab:e5:36:db:52:75:18:c1:9d:c3:47:4a:6e:cb:e5:05:
c3:7a:85:1f:b2:8e:8d:0d:6d:8c:82:60:e9:13:83:b3:7a:e6:
52:40:ca:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:50:23 2025 by rpki-client