Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363330303a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363330303a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: pwGYrHD3ERJHKJXaN1hS6ml0B9drKqwNjhgiTbftEVw=
Subject key identifier: 4D:E2:1A:D3:10:1F:EB:E0:9E:3E:D6:3F:D6:B5:99:03:06:5B:3D:7E
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 441431976B846F4D78D0BCF3E8559DC82E931C49
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363330303a3a2f34382d3438203d3e203136393039.roa
Signing time: Mon 30 Dec 2024 20:23:57 +0000
ROA not before: Mon 30 Dec 2024 20:18:57 +0000
ROA not after: Mon 29 Dec 2025 20:23:57 +0000
asID: 16909
IP address blocks: 2a14:7584:6300::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 14 Jan 2025 14:23:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:14:31:97:6b:84:6f:4d:78:d0:bc:f3:e8:55:9d:c8:2e:93:1c:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Dec 30 20:18:57 2024 GMT
Not After : Dec 29 20:23:57 2025 GMT
Subject: CN=4DE21AD3101FEBE09E3ED63FD6B59903065B3D7E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:4e:c9:57:0e:89:88:18:79:eb:b6:56:f1:be:
b4:b1:32:c9:41:5e:84:fd:50:45:e6:f0:00:dd:59:
b8:fe:4a:89:87:89:06:c9:30:58:c8:dd:01:31:8b:
8e:4f:cc:92:62:c6:c7:51:58:00:00:25:60:66:40:
d6:86:ef:3c:c3:2f:cd:bb:f8:b5:10:83:d2:24:a4:
4b:6a:3b:61:92:7d:60:99:17:b3:72:b7:50:75:ad:
53:d0:a9:a2:1c:d3:24:ba:e9:6c:4a:c7:e6:15:db:
2b:44:20:1b:d9:fa:1d:45:c2:cf:b2:7a:78:20:27:
e9:a3:b5:8a:5e:ea:c6:1d:cb:03:1d:87:94:1a:be:
1b:89:9f:75:9e:ad:47:f1:a1:47:c1:27:30:30:fb:
9e:d6:b6:44:3b:4f:e8:5f:c7:fa:9d:c5:37:d7:ec:
59:b7:0b:7b:b1:0a:a3:d0:2c:38:8d:1d:a4:6e:8f:
ae:44:74:22:27:dd:47:a1:77:ee:a0:cc:b1:1a:8c:
d6:07:8a:45:b1:f1:42:2a:d1:9d:71:3d:16:9c:1d:
40:2e:3f:1f:c5:15:15:7e:e3:0e:5b:4c:90:26:73:
36:e8:a8:a8:46:de:a3:51:89:a8:e5:c5:38:29:9a:
a0:cf:71:7e:a7:8d:1c:1a:ae:e7:84:63:d1:81:13:
08:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:E2:1A:D3:10:1F:EB:E0:9E:3E:D6:3F:D6:B5:99:03:06:5B:3D:7E
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363330303a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6300::/48
Signature Algorithm: sha256WithRSAEncryption
ae:38:64:02:41:8b:8d:72:d7:d0:df:43:09:98:dd:ea:65:ca:
a1:3f:ed:e0:0c:01:51:8f:87:d6:78:8a:07:74:5f:9c:ca:ab:
bd:fa:17:e7:37:28:57:73:d2:66:82:b8:2f:8b:0d:a3:ca:a8:
93:80:ce:01:f1:ae:09:4b:70:89:93:c4:11:eb:95:5e:a8:2b:
b6:67:87:0f:47:47:06:1d:a6:37:0a:59:83:20:92:ff:b8:4a:
dd:2a:c3:1c:97:00:20:4f:d9:fb:f6:88:41:73:6a:8a:14:30:
77:60:b0:53:cf:f3:69:be:7a:b8:5e:92:d1:aa:bf:f3:45:f0:
8a:5a:b9:68:c0:f7:71:b1:0c:b3:6e:91:95:d5:a6:48:97:06:
13:da:8e:fa:80:9b:f2:38:2b:4c:df:ce:c6:98:0f:8c:7f:a1:
1e:e8:8c:c7:52:62:84:3f:5d:4f:2a:71:b7:9f:05:4f:02:e6:
59:e5:f1:c2:01:9c:22:1d:95:45:34:73:9d:da:cf:0f:1a:fc:
b0:48:58:af:18:f0:26:3d:d0:79:54:b4:50:7d:06:a3:d3:d0:
89:5a:f5:aa:32:55:34:13:54:c9:9f:8a:eb:66:d1:1a:5e:96:
40:e6:07:58:17:24:03:53:2f:44:12:ff:31:2a:c7:4a:b1:49:
69:27:db:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:50:28 2025 by rpki-client