Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363463303a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363463303a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: 5xL1H0h7sNxxQw//fMrkwRuOktGm5VSKRn0XFE/mOaY=
Subject key identifier: A6:4E:C5:D5:7B:28:00:4C:86:0E:B1:D9:24:45:55:DA:53:B6:A1:87
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 57548D8E79D130021A970BA6F8C0CA3A7D26FD8E
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363463303a3a2f34382d3438203d3e203136393039.roa
Signing time: Mon 06 Jan 2025 20:20:43 +0000
ROA not before: Mon 06 Jan 2025 20:15:43 +0000
ROA not after: Mon 05 Jan 2026 20:20:43 +0000
asID: 16909
IP address blocks: 2a14:7584:64c0::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 22 Jan 2025 12:32:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:54:8d:8e:79:d1:30:02:1a:97:0b:a6:f8:c0:ca:3a:7d:26:fd:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Jan 6 20:15:43 2025 GMT
Not After : Jan 5 20:20:43 2026 GMT
Subject: CN=A64EC5D57B28004C860EB1D9244555DA53B6A187
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:21:81:30:46:fb:66:2c:c9:1a:7b:df:fd:9e:
df:a2:4a:5f:ea:21:ff:00:f4:66:4f:9c:4a:de:1c:
00:1d:d0:b5:ba:c5:5e:ed:38:34:58:cf:18:74:35:
94:f2:ac:0c:f0:35:14:a0:fb:4a:83:7a:88:41:29:
83:17:8b:8b:93:c9:4f:04:20:31:53:7d:c3:67:35:
e8:76:50:9a:10:c2:1f:6d:62:36:a6:e0:ee:08:25:
14:66:55:65:4d:48:5a:9a:02:06:e4:4d:8f:02:f3:
e6:5a:11:1b:db:d1:8e:31:65:a8:58:93:48:53:94:
50:41:16:19:6d:8a:e7:aa:8b:5b:65:16:de:84:df:
6b:e3:3f:f0:04:7a:a0:ff:18:54:30:39:73:47:f7:
aa:dd:25:6a:be:10:df:b1:4d:d7:ba:a4:2f:6c:87:
cc:39:94:2f:ff:ed:7e:34:12:75:d2:cb:1b:1f:ca:
44:97:93:37:33:a6:2b:97:98:4a:e7:22:ed:7f:93:
ce:a4:ae:b4:6b:6b:47:08:e6:f0:61:09:8c:f7:c5:
49:bc:5f:a8:cb:2a:38:f3:00:5a:0d:e0:6e:26:62:
77:3c:32:b6:6c:d3:87:9d:16:11:06:d5:3d:6a:2f:
07:76:c6:13:3f:46:ce:0b:2b:63:f6:56:57:01:5c:
fc:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:4E:C5:D5:7B:28:00:4C:86:0E:B1:D9:24:45:55:DA:53:B6:A1:87
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363463303a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:64c0::/48
Signature Algorithm: sha256WithRSAEncryption
40:d9:d5:c2:8e:6a:a9:4b:56:b1:3e:12:77:92:a2:91:c7:bd:
b5:f0:86:fd:95:2e:c4:5d:4d:aa:75:1a:42:ea:56:39:3c:72:
dd:36:00:ae:1c:38:d0:31:cb:64:d2:ca:24:98:69:0e:66:95:
40:11:84:84:02:0e:89:5d:8c:ee:26:37:1e:40:0e:ad:cd:64:
b8:ea:72:4e:f6:39:f7:76:cd:72:1e:44:7e:a6:90:f3:b0:29:
49:ac:fa:69:54:7a:15:9a:90:d2:7c:4c:56:8f:f6:ff:08:cc:
0e:c3:ae:c2:2a:90:c1:76:1f:50:a7:9d:41:45:84:45:08:74:
fd:ae:e4:7a:4f:6a:34:02:2f:10:b4:eb:39:69:f0:f5:20:be:
54:f1:88:fb:f9:90:66:90:32:c9:01:49:11:6a:f9:53:a2:18:
8d:43:cc:42:df:e9:60:f4:d3:77:33:a2:dc:28:4a:de:7c:55:
d8:ec:a9:13:a2:b3:31:e9:c4:e3:6c:ef:1c:36:36:63:66:68:
46:5b:71:e3:1a:f3:16:72:8b:e6:65:eb:c7:96:59:2b:b7:72:
89:2c:8d:0f:fb:64:74:f6:4c:86:c9:b2:c8:41:6a:b8:f1:45:
5e:97:b8:d1:a3:36:e1:75:8c:5d:1e:85:4b:7f:ac:29:09:8c:
b2:15:0f:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 06:45:06 2025 by rpki-client