Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363461303a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363461303a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: pmVBbjUJymHVQ+SJLKFvl3d+mUBNZHsOJdC88B99gjU=
Subject key identifier: 62:F3:CB:72:F9:82:6A:EA:1C:87:59:54:49:43:8D:E8:65:96:DC:EC
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 420E150A73ABBCF945DC33083CDBB9A91B6D907E
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363461303a3a2f34382d3438203d3e203136393039.roa
Signing time: Mon 06 Jan 2025 20:20:41 +0000
ROA not before: Mon 06 Jan 2025 20:15:41 +0000
ROA not after: Mon 05 Jan 2026 20:20:41 +0000
asID: 16909
IP address blocks: 2a14:7584:64a0::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 16 Jan 2025 19:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:0e:15:0a:73:ab:bc:f9:45:dc:33:08:3c:db:b9:a9:1b:6d:90:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Jan 6 20:15:41 2025 GMT
Not After : Jan 5 20:20:41 2026 GMT
Subject: CN=62F3CB72F9826AEA1C87595449438DE86596DCEC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:56:a4:66:df:72:f1:73:8c:39:74:ad:7c:c0:
60:09:e8:b7:82:75:0a:fe:a2:13:c1:9a:88:b6:b8:
8b:47:0d:fb:1e:b9:1e:5f:d2:bc:88:ef:a6:3c:d5:
0a:33:c1:66:97:e9:77:9f:b8:2e:a4:7d:c0:47:56:
41:de:16:e1:e8:de:e6:31:61:89:9e:6e:c5:3f:74:
d0:d7:09:9c:fa:6a:d9:db:41:2e:a1:b6:73:2e:83:
23:cd:7f:2d:df:c3:43:de:99:08:9d:ea:c8:59:6f:
37:4e:88:62:99:c8:75:00:e3:62:3d:0c:0a:40:cd:
6c:36:dc:99:8a:c0:cd:cd:aa:4f:d3:f5:49:63:1a:
cc:5e:6c:e6:61:93:36:b8:b3:38:43:bc:0b:ab:7d:
73:74:33:2a:b8:93:98:60:39:be:bb:cc:6b:76:d0:
ef:bc:73:62:2c:6b:0a:e0:56:e4:8a:b6:c3:d7:f7:
eb:92:f3:d4:c7:41:2f:4e:57:dd:89:d5:c7:4a:0b:
c8:e9:6b:a7:8b:a8:e9:eb:e9:3e:a6:82:d5:6f:89:
41:3f:62:a8:db:c4:0d:d2:e9:ab:cc:5d:44:b3:ac:
5f:39:9c:74:4c:bc:13:48:16:c5:28:9d:7e:41:b3:
4b:15:c9:5e:06:ae:c9:4e:fa:22:46:2d:dd:5a:e7:
80:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:F3:CB:72:F9:82:6A:EA:1C:87:59:54:49:43:8D:E8:65:96:DC:EC
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363461303a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:64a0::/48
Signature Algorithm: sha256WithRSAEncryption
0b:93:d0:fc:f3:3d:2f:19:d6:73:4a:c8:58:82:ef:7e:56:97:
80:b5:b8:e4:f8:66:58:e7:86:a4:3b:f2:7e:be:54:53:90:db:
49:9a:b4:59:c4:1a:d4:f4:14:43:79:cb:43:11:44:14:df:73:
0b:69:b3:3d:86:cf:29:05:ae:e0:95:bc:6c:49:59:04:c6:b1:
5a:0b:79:91:25:ad:38:44:5e:d0:1c:f1:d6:18:45:8b:4e:1a:
d2:26:3b:5c:41:cc:ab:46:de:b6:2d:cb:c2:ed:76:31:d3:58:
50:3a:a7:b8:77:d5:48:f1:54:0a:ef:58:ff:13:02:a4:ec:34:
0b:d8:aa:d2:c6:a0:ea:f9:c4:8b:5a:de:e3:49:5f:98:92:56:
26:04:7b:64:15:9c:0a:66:a9:6e:5c:dc:0c:dd:9c:9c:d4:56:
9d:7b:a1:c5:d1:ce:77:01:05:fd:8b:dd:74:f0:38:29:99:65:
23:bd:94:26:68:b1:e0:96:df:5c:4c:26:61:dc:4d:e5:72:b2:
8b:05:7e:9e:2e:81:51:ad:9a:dd:69:f7:ee:4f:ae:09:53:8f:
ac:b5:cf:94:15:f9:9a:ac:f7:7d:f1:96:b2:0c:04:10:55:1e:
98:f6:58:f0:ec:f8:c1:4c:f2:bf:c9:e2:38:4d:68:fd:cb:08:
40:fd:6a:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:50:42 2025 by rpki-client