Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363263303a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363263303a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: Yh8u8RP0XV8fQyjmUtEikZwAaUiYZZumphn9ow8M1Qo=
Subject key identifier: C4:7A:67:B4:43:3A:06:DC:E2:69:AF:4D:F3:BA:C5:FE:03:5B:A5:C6
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 3FC5D2E8120C418CB1AFDF324D7E7D29731007E7
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363263303a3a2f34382d3438203d3e203136393039.roa
Signing time: Thu 19 Dec 2024 20:17:17 +0000
ROA not before: Thu 19 Dec 2024 20:12:17 +0000
ROA not after: Thu 18 Dec 2025 20:17:17 +0000
asID: 16909
IP address blocks: 2a14:7584:62c0::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 24 Dec 2024 20:43:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:c5:d2:e8:12:0c:41:8c:b1:af:df:32:4d:7e:7d:29:73:10:07:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Dec 19 20:12:17 2024 GMT
Not After : Dec 18 20:17:17 2025 GMT
Subject: CN=C47A67B4433A06DCE269AF4DF3BAC5FE035BA5C6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:e2:24:7f:e1:04:fb:71:b0:d0:13:d6:35:25:
3e:6b:54:82:0a:d0:af:ee:da:e6:8e:fa:f9:f1:8d:
19:20:88:91:14:bf:2e:32:ad:96:a3:8f:f0:3d:f6:
1d:fe:d3:b5:0c:e0:0d:4b:71:5e:56:b3:26:eb:8a:
df:9f:cd:c3:6f:3b:43:31:b2:cd:23:c0:46:3b:e8:
78:9c:ee:12:9d:b8:ee:c2:1c:a1:2a:b7:49:b5:64:
87:9f:7d:75:38:d9:0b:c7:7a:90:40:dd:04:ac:3d:
f3:f4:c1:02:53:80:61:ab:28:68:40:7a:f3:25:8b:
12:22:60:aa:6e:48:ea:8d:f6:9b:6a:5f:f9:b4:18:
16:7b:88:62:25:d9:10:21:be:6d:81:70:1a:1d:e5:
ab:ff:08:71:55:b9:c3:f0:26:f4:c9:40:13:37:92:
8c:6f:02:60:9d:b5:e1:ba:fb:5e:bd:2a:b7:25:75:
2c:c0:56:7d:d8:ce:89:45:08:e8:f2:22:b5:a6:fb:
9c:1a:50:46:72:55:33:12:ca:9b:db:7d:94:8d:38:
b0:b8:bd:37:d5:a1:0a:1d:8a:2e:51:34:83:46:6b:
86:2e:ee:c8:24:6c:ad:fc:9b:38:cb:19:3f:67:6b:
b4:05:65:dd:5e:97:d6:43:23:59:fc:b4:6f:41:b2:
0c:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:7A:67:B4:43:3A:06:DC:E2:69:AF:4D:F3:BA:C5:FE:03:5B:A5:C6
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363263303a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:62c0::/48
Signature Algorithm: sha256WithRSAEncryption
86:42:58:fb:4d:32:4f:95:94:3a:9d:70:fe:bb:17:89:18:1d:
3b:98:2e:09:aa:84:34:03:d9:f6:60:7e:ca:0a:c3:75:2a:30:
56:3d:93:99:c8:d5:d7:59:a4:88:f9:75:6c:d2:f4:7d:53:50:
80:c9:38:58:96:26:62:e6:e0:7c:5f:35:17:42:56:5c:51:b5:
be:ff:dd:89:1e:99:af:e1:8d:b1:d0:14:b2:dc:c3:72:6a:80:
26:0c:98:28:f0:6a:1b:19:b5:3b:ff:6f:a2:84:bb:bd:cb:3a:
62:0c:e5:ba:79:7f:ec:78:bc:d2:9d:3a:34:ec:53:16:88:d0:
45:2f:33:21:a9:bd:d4:c6:20:35:2f:aa:04:ce:55:67:da:e9:
a6:22:72:4f:c5:10:8c:dc:51:bf:dc:f1:69:1d:cb:0c:74:85:
27:4b:dd:e8:bf:a7:2f:9d:6b:5c:ce:ca:88:62:13:7a:25:8e:
91:8b:87:d3:ea:12:3e:19:d7:78:c2:95:88:5d:4d:9e:6a:c1:
42:53:fa:ed:3c:33:22:27:30:50:be:92:c0:fc:00:1f:10:de:
16:e6:14:b7:63:6f:a4:a9:0b:e9:68:86:bc:b3:00:41:53:31:
c7:3c:6a:ea:1e:9b:c9:5b:c6:e3:24:c4:31:c0:c2:ad:7f:5c:
9b:77:9e:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:47:03 2025 by rpki-client