Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363364303a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363364303a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: CXMkGo3mBuRTolQ1+44gqTLd10f+gD1ELmU/2/47mYw=
Subject key identifier: F0:EF:88:D5:5C:D1:0D:AC:7A:E0:FD:4E:B4:94:EE:0C:4C:D1:49:37
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 0F528473953DAF7B99A1DBD8F8810C6986132C7C
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363364303a3a2f34382d3438203d3e203136393039.roa
Signing time: Mon 06 Jan 2025 20:19:44 +0000
ROA not before: Mon 06 Jan 2025 20:14:44 +0000
ROA not after: Mon 05 Jan 2026 20:19:44 +0000
asID: 16909
IP address blocks: 2a14:7584:63d0::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 14 Jan 2025 14:23:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:52:84:73:95:3d:af:7b:99:a1:db:d8:f8:81:0c:69:86:13:2c:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Jan 6 20:14:44 2025 GMT
Not After : Jan 5 20:19:44 2026 GMT
Subject: CN=F0EF88D55CD10DAC7AE0FD4EB494EE0C4CD14937
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ff:fb:1e:ac:3f:50:ce:0e:bb:25:c3:e5:a9:
87:f1:76:a9:88:01:ee:ba:bc:86:05:32:01:91:0b:
69:64:a3:6e:f3:20:e1:7d:1c:05:67:f3:d1:9a:de:
bc:b8:96:5f:8c:86:97:7b:0d:af:08:e7:70:43:8a:
89:e9:a7:69:b4:df:aa:60:e2:18:7e:c4:a3:40:2d:
ec:fd:c1:c1:aa:61:1b:8e:36:6d:cb:46:c7:7c:7d:
b9:42:06:d4:37:74:8d:11:0a:7b:4a:a3:0a:f6:f7:
ae:8d:66:aa:58:4a:ef:53:74:de:64:c3:67:e9:d8:
67:c1:7c:e8:40:1a:3d:6d:3b:06:68:a3:d7:78:3e:
77:15:79:77:0b:c6:9d:cd:69:ee:93:a6:50:eb:c3:
17:91:a1:60:1b:05:b9:92:cd:a6:3c:7c:45:de:2f:
61:3d:23:70:6f:47:d2:1f:cb:2c:1a:15:28:29:df:
48:32:ce:10:2b:3c:f0:f6:d6:65:a9:a3:6b:55:ba:
7d:a1:47:fd:05:b7:ae:b0:4a:6f:3e:e8:60:ee:53:
f5:da:e9:55:bd:2c:4d:d2:b9:21:7a:dd:f9:e8:53:
25:e2:7d:8c:07:49:33:11:5f:1b:17:75:88:06:6a:
97:40:a0:99:a7:70:9e:25:26:76:03:d2:d1:e9:bd:
73:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:EF:88:D5:5C:D1:0D:AC:7A:E0:FD:4E:B4:94:EE:0C:4C:D1:49:37
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363364303a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:63d0::/48
Signature Algorithm: sha256WithRSAEncryption
a2:59:eb:79:0b:93:9a:54:ad:e0:cc:42:c7:0b:65:69:e1:df:
20:a6:b8:98:95:c1:90:e1:af:b1:1e:cb:98:fe:a6:bc:51:1b:
6f:b1:b5:c0:28:d9:f0:db:d4:2a:1d:c1:f1:47:10:d6:2b:a7:
dc:b5:fd:6a:dc:64:59:31:79:a6:74:ff:20:51:4a:4f:43:01:
d7:16:03:fd:3e:e6:37:5b:c7:ca:d5:dd:5d:19:ae:b9:90:be:
ad:d3:88:dd:b5:a1:bb:1d:3c:1c:b2:0e:b4:89:a6:a4:82:9f:
5d:33:47:46:87:09:0c:71:50:20:63:06:a3:cb:a3:42:b2:ac:
3e:6f:e2:fb:f6:7c:dd:07:4c:63:30:1e:bf:42:e6:b1:96:fd:
9c:47:14:db:3e:64:4c:6a:05:c1:e8:b9:aa:23:00:99:46:24:
3a:b2:42:89:ef:a7:82:6b:49:08:28:f6:67:d6:8e:f1:7d:33:
b5:b9:1b:59:54:14:bc:f9:1a:a1:92:7e:84:2b:10:d7:95:01:
fd:f8:df:ba:be:fa:83:b6:67:33:2f:77:8f:17:41:f0:c4:1c:
e3:04:a0:93:5c:37:92:5b:95:e3:af:8d:c3:51:03:28:97:fa:
52:7e:15:a0:9b:2c:e5:d6:2e:76:3e:33:42:6b:43:e9:25:9b:
3e:68:ee:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:50:25 2025 by rpki-client