Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363432303a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363432303a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: bCxJZ0cokDiptq/CRQO1h+9jTsI701UIy4Bo6Kc6zIw=
Subject key identifier: A7:FB:AA:84:30:DB:4B:C7:4A:E7:04:DF:4A:8F:5A:95:AE:44:A0:3D
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 6579011D0408465B26D11471B3B4138BB7D59EC5
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363432303a3a2f34382d3438203d3e203136393039.roa
Signing time: Mon 06 Jan 2025 20:19:48 +0000
ROA not before: Mon 06 Jan 2025 20:14:48 +0000
ROA not after: Mon 05 Jan 2026 20:19:48 +0000
asID: 16909
IP address blocks: 2a14:7584:6420::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 22 Jan 2025 12:32:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:79:01:1d:04:08:46:5b:26:d1:14:71:b3:b4:13:8b:b7:d5:9e:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Jan 6 20:14:48 2025 GMT
Not After : Jan 5 20:19:48 2026 GMT
Subject: CN=A7FBAA8430DB4BC74AE704DF4A8F5A95AE44A03D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:3c:25:be:b2:a1:bb:2c:6e:18:63:c7:f6:f7:
cc:f0:e2:95:90:98:4e:40:68:ac:d4:de:f7:7b:59:
e0:01:80:e9:e3:4d:81:3c:0b:7a:da:6b:40:99:d0:
2f:c2:47:03:d3:54:0b:b7:eb:81:5c:a3:a7:70:99:
c8:62:2e:6e:81:10:a3:00:68:c8:79:af:c7:91:b6:
7c:b0:8f:68:dc:c8:98:3a:8e:d7:81:5e:79:cc:8f:
91:a8:a3:29:ab:5c:c8:b6:f1:45:62:ec:bd:b7:69:
90:f6:0d:ee:a7:11:63:29:10:e3:6b:e5:06:2e:b7:
d1:ef:bd:fe:17:60:2f:66:15:2c:96:94:91:d2:60:
85:6d:16:a0:80:e2:3b:4d:96:21:a8:95:d8:f5:07:
78:f2:5e:26:9a:e7:b7:d9:52:92:21:0c:f2:b5:ec:
9f:5e:f7:47:e9:a8:e3:0b:b6:e3:3d:c2:5b:80:05:
ac:a3:63:ac:c3:9c:d4:66:cb:75:07:97:50:b4:0b:
e2:6f:05:23:ba:ce:d8:f7:bf:a2:21:87:a7:cd:bf:
9a:27:da:ca:bf:9c:7f:f3:33:96:f6:45:18:c2:a4:
ff:e7:4b:ac:7b:c8:42:c2:b4:25:95:34:ca:a1:6b:
ec:f3:c8:c7:0f:f4:01:79:18:e1:93:8c:83:01:fb:
f4:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:FB:AA:84:30:DB:4B:C7:4A:E7:04:DF:4A:8F:5A:95:AE:44:A0:3D
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363432303a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6420::/48
Signature Algorithm: sha256WithRSAEncryption
56:99:97:4f:ed:60:1b:17:5d:5a:2f:d2:3f:66:5b:0f:06:4a:
75:63:c5:9c:b5:a7:bc:77:ef:2a:4d:83:61:e8:ef:cb:62:25:
50:d1:cb:55:2d:cb:75:74:da:98:f2:ca:8f:af:f0:7b:2e:f7:
13:5f:45:53:99:ab:ac:df:27:45:78:4d:7e:e7:86:45:22:5b:
f2:9e:ac:b8:8d:b8:3a:59:7c:82:14:a8:20:95:d8:52:16:a3:
fb:cb:1c:f5:96:58:ec:c5:02:1d:68:41:ce:c3:73:00:3b:cf:
35:0f:06:25:47:e9:9d:13:98:8c:f8:d4:82:aa:ad:b8:32:9e:
c7:6d:b8:0e:fa:f1:66:c8:12:14:57:a4:f6:63:18:f7:be:f0:
57:32:56:bd:30:fd:64:91:66:86:99:9c:5a:37:fc:f7:a1:45:
e9:eb:37:a7:23:5d:74:41:09:70:ac:46:d2:9f:39:ca:3a:be:
43:9c:4d:f7:85:31:9d:6a:c0:ac:96:fb:b1:fb:83:3c:2a:36:
c8:c2:b5:8c:29:88:61:15:cf:ef:89:bb:35:7f:c2:59:1c:f5:
a9:ec:05:f4:d7:13:01:26:79:ac:6b:b4:67:26:8f:0e:9e:63:
bf:de:62:2e:03:2b:d3:7f:d3:61:40:ec:a7:07:ed:46:00:d0:
92:7e:86:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 06:50:12 2025 by rpki-client