Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363430303a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363430303a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: py5+bCb0Y5WWaGvZJJEq4pdd93PzLBkR4rxKzKO6rtw=
Subject key identifier: DF:18:19:6A:62:1B:AD:9F:70:0A:48:99:CD:72:EC:C8:BD:C0:5A:21
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 42E2D00A400F221BF590636D4C1D5F4874A40BB7
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363430303a3a2f34382d3438203d3e203136393039.roa
Signing time: Thu 19 Dec 2024 21:04:20 +0000
ROA not before: Thu 19 Dec 2024 20:59:20 +0000
ROA not after: Thu 18 Dec 2025 21:04:20 +0000
asID: 16909
IP address blocks: 2a14:7584:6400::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 24 Dec 2024 21:04:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:e2:d0:0a:40:0f:22:1b:f5:90:63:6d:4c:1d:5f:48:74:a4:0b:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Dec 19 20:59:20 2024 GMT
Not After : Dec 18 21:04:20 2025 GMT
Subject: CN=DF18196A621BAD9F700A4899CD72ECC8BDC05A21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:24:1d:3c:b2:41:c4:1c:c1:9d:6d:97:cc:d1:
fe:45:d8:34:c4:ca:19:35:91:31:dd:3f:57:89:f0:
59:69:d7:57:27:14:f3:84:bf:8d:e3:ea:32:b4:12:
ae:0d:df:1f:94:4c:28:34:73:c2:d5:5e:1a:16:21:
84:79:1d:6b:51:1c:31:5d:82:c8:b5:0d:12:f8:20:
61:29:ce:23:8b:0f:56:8a:cb:63:26:db:fd:bc:e2:
32:b4:b7:44:17:ac:39:28:00:42:b4:40:b0:a9:f5:
b7:e7:55:46:2a:01:ce:e0:8d:7c:bd:d9:06:8b:38:
10:81:42:28:03:e9:0f:0c:73:30:9c:d9:fb:a7:ff:
2c:a8:8e:dd:a0:74:a5:0a:78:de:88:b9:b8:f8:f9:
cd:79:dc:1d:ac:a1:dc:16:b4:7c:09:bc:c3:7a:b8:
b7:a9:88:c2:c9:4d:e7:ee:e9:db:05:4c:2a:ea:75:
31:c5:a8:86:24:2f:17:6b:6c:9f:45:56:29:0b:73:
38:db:b2:c8:b4:cd:2c:6f:e1:fd:5f:13:78:4d:1d:
9a:3d:0b:45:92:9c:b0:7c:df:68:c7:44:03:14:58:
f4:77:11:ca:53:c0:b4:db:a5:d9:d6:58:2e:98:8e:
d6:c1:75:c4:39:fb:c8:f5:58:ad:ac:14:bc:76:be:
47:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:18:19:6A:62:1B:AD:9F:70:0A:48:99:CD:72:EC:C8:BD:C0:5A:21
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363430303a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6400::/48
Signature Algorithm: sha256WithRSAEncryption
68:4d:74:9f:0b:5a:b3:88:a6:15:bb:8d:bf:25:99:ae:80:50:
59:c7:91:a1:30:65:46:1b:a8:37:ed:76:9b:01:6f:9e:3d:52:
a8:57:e0:6e:65:e3:f9:27:fe:a4:73:62:e1:da:63:72:72:5c:
3b:37:f3:28:09:a7:f4:a5:84:13:60:06:67:c7:4b:b4:b2:03:
16:68:30:f1:ad:4e:b5:9f:52:e9:d9:f9:ee:a3:3f:aa:e2:c3:
fe:20:44:a3:c3:c5:75:84:7e:84:38:77:0e:a5:0e:b7:c2:3e:
5a:f1:71:12:61:e3:44:5c:9e:01:50:c1:8c:f0:14:af:0e:e0:
a4:67:4c:37:71:0c:e9:72:01:c9:fe:fd:b9:e1:e5:df:20:8d:
c5:7a:5e:09:a1:c6:b9:6d:fa:de:97:fd:de:38:27:ad:13:5c:
32:c6:22:f4:68:21:e5:24:52:29:4f:e8:41:b8:ed:f6:4a:de:
13:9c:92:d5:22:ee:7d:f5:2c:e8:c9:7e:4e:01:6c:d9:0e:0c:
aa:77:1d:e9:58:45:75:55:31:97:c8:6d:58:ca:27:49:89:0c:
03:12:15:3a:aa:6a:ee:4a:4e:22:69:dd:10:09:74:69:a1:fe:
de:68:e0:d3:38:d8:d4:2d:f8:b8:74:04:82:08:b1:cb:37:5c:
e0:0b:29:3b
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUQuLQCkAPIhv1kGNtTB1fSHSkC7cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NCMjZGNzY0MkZENkI0Q0JGMzVGQkVFNDU1RjFFRkIw
QzlGMEE0NTAeFw0yNDEyMTkyMDU5MjBaFw0yNTEyMTgyMTA0MjBaMDMxMTAvBgNV
BAMTKERGMTgxOTZBNjIxQkFEOUY3MDBBNDg5OUNENzJFQ0M4QkRDMDVBMjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgJB08skHEHMGdbZfM0f5F2DTE
yhk1kTHdP1eJ8Flp11cnFPOEv43j6jK0Eq4N3x+UTCg0c8LVXhoWIYR5HWtRHDFd
gsi1DRL4IGEpziOLD1aKy2Mm2/284jK0t0QXrDkoAEK0QLCp9bfnVUYqAc7gjXy9
2QaLOBCBQigD6Q8MczCc2fun/yyojt2gdKUKeN6Iubj4+c153B2sodwWtHwJvMN6
uLepiMLJTefu6dsFTCrqdTHFqIYkLxdrbJ9FVikLczjbssi0zSxv4f1fE3hNHZo9
C0WSnLB832jHRAMUWPR3EcpTwLTbpdnWWC6YjtbBdcQ5+8j1WK2sFLx2vkcBAgMB
AAGjggJoMIICZDAdBgNVHQ4EFgQU3xgZamIbrZ9wCkiZzXLsyL3AWiEwHwYDVR0j
BBgwFoAUfLJvdkL9a0y/NfvuRV8e+wyfCkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMS83Q0IyNkY3NjQy
RkQ2QjRDQkYzNUZCRUU0NTVGMUVGQjBDOUYwQTQ1LmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdm
MzgyNC8wLzdDQjI2Rjc2NDJGRDZCNENCRjM1RkJFRTQ1NUYxRUZCMEM5RjBBNDUu
Y2VyMIGqBggrBgEFBQcBCwSBnTCBmjCBlwYIKwYBBQUHMAuGgYpyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMS8zMjYxMzEzNDNhMzczNTM4MzQzYTM2MzQzMDMwM2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzEzNjM5MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoUdYRkADAN
BgkqhkiG9w0BAQsFAAOCAQEAaE10nwtas4imFbuNvyWZroBQWceRoTBlRhuoN+12
mwFvnj1SqFfgbmXj+Sf+pHNi4dpjcnJcOzfzKAmn9KWEE2AGZ8dLtLIDFmgw8a1O
tZ9S6dn57qM/quLD/iBEo8PFdYR+hDh3DqUOt8I+WvFxEmHjRFyeAVDBjPAUrw7g
pGdMN3EM6XIByf79ueHl3yCNxXpeCaHGuW363pf93jgnrRNcMsYi9Ggh5SRSKU/o
Qbjt9kreE5yS1SLuffUs6Ml+TgFs2Q4Mqncd6VhFdVUxl8htWMonSYkMAxIVOqpq
7kpOImndEAl0aaH+3mjg0zjY1C34uHQEggixyzdc4AspOw==
-----END CERTIFICATE-----
Generated at Sat Apr 19 00:46:10 2025 by rpki-client