Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363438303a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363438303a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: 3TNynKz7uz5GxRabMX2+cByFtQdlwPiANoKp7qHpsYM=
Subject key identifier: A8:C4:00:15:BB:F6:3F:10:9C:F7:49:38:73:E5:87:7C:BF:1D:B1:16
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 49D6CE8CBD90E71047002DACC99D94C520AFA4E4
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363438303a3a2f34382d3438203d3e203136393039.roa
Signing time: Mon 06 Jan 2025 20:20:40 +0000
ROA not before: Mon 06 Jan 2025 20:15:40 +0000
ROA not after: Mon 05 Jan 2026 20:20:40 +0000
asID: 16909
IP address blocks: 2a14:7584:6480::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 16 Jan 2025 19:26:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:d6:ce:8c:bd:90:e7:10:47:00:2d:ac:c9:9d:94:c5:20:af:a4:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Jan 6 20:15:40 2025 GMT
Not After : Jan 5 20:20:40 2026 GMT
Subject: CN=A8C40015BBF63F109CF7493873E5877CBF1DB116
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:a1:6d:08:a6:fb:57:db:2e:63:56:b5:a7:73:
ff:9f:90:68:8d:29:fe:bd:40:5d:e7:4a:92:ab:f4:
44:3f:97:20:d0:79:8f:30:dd:cd:1f:3b:36:1f:27:
5f:77:77:48:11:bc:1e:63:8c:ee:eb:7a:d8:2f:c6:
8f:8d:1d:56:a6:93:5f:88:dc:91:ed:f3:bc:9f:21:
25:7d:98:9c:99:e3:46:81:15:89:a5:55:29:7d:bd:
27:1c:4c:1c:19:38:73:87:30:e2:57:82:66:e7:20:
38:40:b5:15:04:06:e0:2e:31:b2:e9:3d:6b:be:57:
e0:c2:e5:87:81:e1:17:50:35:0e:fc:9e:b6:62:00:
f5:14:a8:ef:9b:25:19:77:d5:6a:70:c7:51:fa:9a:
dd:b6:da:b1:a5:4d:89:aa:51:d1:e8:f3:44:88:ee:
df:d4:a5:d7:ff:73:c7:63:7e:64:3c:9c:d4:ac:f1:
2e:c2:ef:ec:1a:8c:59:e7:f9:75:e3:a4:44:bd:5c:
47:27:b6:68:71:90:47:c8:71:c3:dc:16:4e:6b:60:
44:36:4b:f5:ff:1a:84:6b:1c:07:f7:dc:41:04:80:
7f:b7:9e:1c:a1:c1:78:0a:1b:4c:09:d8:4a:48:a3:
1f:63:53:3b:b3:04:e9:d3:09:ca:1b:c7:87:59:6c:
ae:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:C4:00:15:BB:F6:3F:10:9C:F7:49:38:73:E5:87:7C:BF:1D:B1:16
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363438303a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6480::/48
Signature Algorithm: sha256WithRSAEncryption
53:6f:49:8c:df:94:d3:95:b7:62:80:67:b8:bb:85:13:c7:65:
a0:17:f5:eb:2f:05:da:77:a4:c8:07:24:bd:64:f2:86:7a:d9:
f6:c9:79:db:46:a3:d8:55:c5:1c:fd:fa:32:95:fc:22:29:35:
65:f7:16:86:86:0f:24:fe:50:60:5d:f4:ed:f6:6f:ac:35:4e:
cb:ad:25:6f:95:68:7d:02:e1:ab:9c:96:da:65:bd:0f:34:2a:
4c:da:e3:48:9a:a6:95:90:fd:3e:9c:8e:d4:45:4a:01:64:97:
e9:a6:9c:06:37:73:a1:c1:1f:0a:c9:f6:f4:5c:54:f6:d7:da:
c3:09:2f:d5:90:fb:a6:6f:70:8a:ef:18:22:40:4a:d6:0a:be:
e6:a9:3a:68:25:cf:44:77:42:d2:e3:54:4f:a9:1d:fb:a3:80:
f2:0e:12:d8:4c:8a:9f:e0:b5:00:c4:b4:cc:b4:30:74:2b:07:
89:3d:a4:36:0e:d8:41:45:81:c2:5f:7a:a8:6a:98:c3:7d:3c:
f0:2e:18:1f:44:20:c8:ec:fb:6c:78:96:a4:18:18:2f:f4:54:
3e:04:77:55:27:2e:62:e3:53:f5:63:77:f1:25:4c:ed:7e:87:
45:88:c4:91:bc:f3:1b:43:cf:29:4f:7e:9d:a7:22:75:2d:ef:
61:74:81:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:46:09 2025 by rpki-client