Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363239303a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363239303a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: iGhJJERpAqX7dBlxovdyNE1a0wnLWXtWS//A/zR+aMI=
Subject key identifier: D0:A1:02:4A:7A:98:9E:66:5F:35:FF:B1:D8:5A:60:2C:06:F1:02:7D
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 3518CD6F9720E34B4ACCD4903569797B19B5D7B0
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363239303a3a2f34382d3438203d3e203136393039.roa
Signing time: Mon 30 Dec 2024 20:23:13 +0000
ROA not before: Mon 30 Dec 2024 20:18:13 +0000
ROA not after: Mon 29 Dec 2025 20:23:13 +0000
asID: 16909
IP address blocks: 2a14:7584:6290::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 14 Jan 2025 14:23:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:18:cd:6f:97:20:e3:4b:4a:cc:d4:90:35:69:79:7b:19:b5:d7:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Dec 30 20:18:13 2024 GMT
Not After : Dec 29 20:23:13 2025 GMT
Subject: CN=D0A1024A7A989E665F35FFB1D85A602C06F1027D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:d0:d4:6f:84:df:24:04:7e:68:1d:e8:4a:b7:
7b:7b:2d:aa:55:68:af:47:09:e2:46:fa:61:1a:c5:
c0:d0:8b:4f:b3:4e:6a:5c:bc:a2:9e:1d:82:a6:ef:
2d:fd:51:a8:78:9e:d5:85:1f:d4:46:08:89:32:c3:
98:8e:ed:87:12:ba:2e:24:7f:b8:f1:a0:cf:f7:e9:
17:18:24:8a:ba:10:b4:31:3b:17:9d:de:c7:63:fb:
0c:55:a1:01:31:b4:39:bd:cb:0f:30:fa:aa:5b:07:
5f:21:95:65:87:2a:eb:ec:33:51:52:1f:3d:f3:79:
5f:7b:4a:f9:39:df:d1:7d:95:39:80:e4:18:dc:ce:
f4:f8:14:5e:d8:0a:de:8a:72:51:ad:3c:fc:ed:33:
48:67:47:cf:d5:09:92:7f:cc:d3:32:83:1d:1e:9e:
49:08:cb:3d:de:94:5c:49:dd:55:2f:42:6d:fb:df:
c3:bc:2b:7f:03:9b:45:74:45:6d:81:e9:53:e9:5d:
f6:0e:eb:2c:a3:7e:0d:60:b4:50:7e:cb:de:fa:82:
8f:94:25:e4:02:a2:2d:a3:3c:df:9d:95:1d:ff:96:
51:9e:ef:b4:8a:f3:5b:4e:3f:95:1c:44:59:65:38:
b1:32:49:a9:75:31:cf:1f:19:72:1e:45:38:f3:d3:
36:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:A1:02:4A:7A:98:9E:66:5F:35:FF:B1:D8:5A:60:2C:06:F1:02:7D
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363239303a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6290::/48
Signature Algorithm: sha256WithRSAEncryption
3e:89:bf:7f:5f:c6:77:eb:f9:9f:aa:3f:5e:bd:c9:ec:40:5d:
6f:ab:9c:bd:5d:19:5e:29:9b:2b:f7:d0:8d:18:d8:ab:d2:a2:
66:e5:11:3b:57:69:f7:09:c2:8b:c5:da:d8:a5:93:77:25:d2:
52:da:70:54:6c:2a:1d:f3:90:b0:ec:08:38:b2:d6:f6:d3:56:
cf:73:8b:2f:83:38:92:d2:09:f6:2c:10:b7:b7:82:f8:32:bb:
d0:36:7f:66:dd:bc:27:cd:d8:fe:50:d3:38:fc:2e:23:14:52:
93:40:a0:02:3c:db:6e:1d:a3:7f:d8:5f:91:7f:2e:d2:ee:7f:
48:05:d8:d4:dd:93:02:6f:46:b2:8a:65:03:ab:84:3d:fd:50:
a6:7e:2d:c4:59:2d:c1:c8:39:5f:f9:6f:86:b2:ee:c1:b0:2b:
16:44:e6:f2:9b:0e:28:af:83:fc:da:52:6d:ec:84:42:10:2c:
a3:be:31:81:72:59:07:50:b4:2d:58:93:e4:81:0a:5b:45:cf:
0d:3d:78:7a:b6:16:50:f2:33:42:06:85:72:d7:7a:4c:18:19:
ca:a5:de:83:f5:be:13:0b:a3:01:aa:90:4b:11:9e:45:e5:75:
d4:c7:2f:21:7c:93:44:25:66:c2:d8:17:51:51:9c:2d:4f:39:
c8:72:28:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:49:36 2025 by rpki-client