Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363265303a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363265303a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: E2Z4AtYYnBF0KatVmj4TjJqQXXhAdux4reS3DwkLvVE=
Subject key identifier: F4:73:A6:75:34:CD:72:7F:A0:CA:36:F1:B6:A8:A3:72:FA:D6:F1:E4
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 3C71C2B3D2766FDED2DFB1673D265B92A6F43520
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363265303a3a2f34382d3438203d3e203136393039.roa
Signing time: Mon 30 Dec 2024 20:23:55 +0000
ROA not before: Mon 30 Dec 2024 20:18:55 +0000
ROA not after: Mon 29 Dec 2025 20:23:55 +0000
asID: 16909
IP address blocks: 2a14:7584:62e0::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 06 Jan 2025 20:19:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:71:c2:b3:d2:76:6f:de:d2:df:b1:67:3d:26:5b:92:a6:f4:35:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Dec 30 20:18:55 2024 GMT
Not After : Dec 29 20:23:55 2025 GMT
Subject: CN=F473A67534CD727FA0CA36F1B6A8A372FAD6F1E4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f4:a5:0c:72:26:a4:bc:c9:cb:db:50:49:8a:
51:0c:71:7c:33:f2:cb:8f:39:ff:d4:2a:06:4c:1b:
1c:8d:72:74:a7:b4:82:3d:be:ab:8b:60:15:52:01:
27:c8:94:9f:89:e8:91:3a:8f:db:b7:cd:36:6a:c7:
28:7e:2b:c4:e7:c1:1b:a8:87:e4:1f:9c:47:33:be:
26:ab:30:a4:71:a1:c2:d4:17:69:cb:21:89:dd:4c:
07:93:d8:e5:17:e5:c8:a4:52:de:82:80:20:6a:d8:
8c:74:f9:43:15:50:bb:1b:85:14:31:c5:89:69:3f:
8f:71:fc:da:25:ba:e3:16:c8:a4:19:9f:4d:d0:d3:
40:ef:a1:6d:05:cf:95:68:79:dc:ec:1d:35:5a:cb:
27:29:20:da:a9:0e:3d:ad:7c:0d:9c:80:78:84:b6:
73:a5:3d:c1:e7:ce:f6:a0:2f:09:50:24:3b:1e:53:
29:f1:1d:d4:06:3e:20:37:78:bb:1b:87:70:80:6f:
ef:e8:89:c8:46:32:e0:01:2b:03:d8:35:1d:a0:c5:
d6:da:04:6f:bd:e2:7e:6e:25:7f:c4:f3:91:e7:56:
53:20:38:04:3d:79:19:bd:a6:cd:b3:5d:82:64:a1:
70:9d:20:80:4a:63:d3:7a:83:fa:8a:19:cd:42:f1:
db:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:73:A6:75:34:CD:72:7F:A0:CA:36:F1:B6:A8:A3:72:FA:D6:F1:E4
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363265303a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:62e0::/48
Signature Algorithm: sha256WithRSAEncryption
43:56:50:a1:41:1f:dc:74:28:8e:c2:ec:09:f3:29:21:c1:ed:
c3:bb:7a:d1:94:24:8c:fa:4b:68:49:5e:b2:5a:6d:1c:26:aa:
38:df:f2:02:ca:93:72:fc:13:8c:04:35:eb:8e:bb:3c:7d:af:
be:d6:49:e2:7d:db:24:9e:a0:95:04:d3:5d:0a:d6:f4:32:ee:
b8:10:18:ac:3d:29:2c:65:9c:5b:a9:3f:07:e7:ea:45:6b:e9:
77:18:a7:69:d8:c4:ac:e7:91:dd:1d:68:14:7b:09:9d:fd:6f:
91:77:ac:c3:d5:4e:2e:65:b5:5f:42:8d:4b:9a:52:f0:e0:7d:
75:11:f3:c8:d9:ff:4f:d1:0d:71:82:4b:ad:1f:c7:2a:71:d3:
ab:6d:60:de:98:ee:f4:35:4a:ba:f8:2b:73:2d:92:d0:57:ee:
19:d8:13:13:df:e4:9b:30:01:7d:f7:df:2a:4b:b6:c5:27:67:
c0:7a:e8:53:b7:b7:35:b8:5b:d6:bb:7a:3e:b1:a7:ed:8f:1f:
8b:74:fb:12:3b:45:0b:5b:52:82:7c:a2:98:4d:06:96:01:81:
15:85:c2:9a:33:28:b6:72:0a:e0:f7:2b:92:b4:ee:bc:f7:f6:
98:d5:83:4c:29:8f:1f:71:37:25:c2:3a:3a:bf:8b:00:bb:c5:
24:d5:6c:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:49:38 2025 by rpki-client