Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363464303a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363464303a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: xsr1GUL60bIs/oVKBM2tt7Se9g7Oa1uUx5X0p4m13Ks=
Subject key identifier: 13:A0:90:A1:8F:3B:39:54:C5:66:7A:B0:F0:82:E9:CF:7B:A2:5F:9C
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 4CF2A52886A9BE18420D2E8E6B629218BE4EDFF9
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363464303a3a2f34382d3438203d3e203136393039.roa
Signing time: Mon 06 Jan 2025 20:20:44 +0000
ROA not before: Mon 06 Jan 2025 20:15:44 +0000
ROA not after: Mon 05 Jan 2026 20:20:44 +0000
asID: 16909
IP address blocks: 2a14:7584:64d0::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 22 Jan 2025 12:32:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:f2:a5:28:86:a9:be:18:42:0d:2e:8e:6b:62:92:18:be:4e:df:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Jan 6 20:15:44 2025 GMT
Not After : Jan 5 20:20:44 2026 GMT
Subject: CN=13A090A18F3B3954C5667AB0F082E9CF7BA25F9C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:06:90:80:83:e2:c7:c8:c3:96:d5:64:25:23:
d5:69:00:ef:d2:c2:d2:36:ca:53:d5:47:96:e6:33:
28:42:be:42:5e:1e:d0:f4:e3:8b:ac:7f:66:39:93:
80:11:7b:9a:88:3b:89:aa:b7:6c:a5:6b:89:34:92:
c8:fb:4c:62:2e:30:01:f9:71:c5:bb:25:dd:40:8b:
55:21:44:3b:58:8f:7b:0b:ea:bc:bf:16:32:e2:02:
ce:52:cd:fa:d2:01:a6:86:4a:9d:36:df:c5:e1:03:
26:ac:26:d0:2f:24:3e:cc:ea:bf:16:19:3f:3c:64:
45:9b:e6:d9:f4:04:f0:98:c0:a8:1d:78:4e:df:d4:
2c:7f:77:98:df:4c:84:d7:38:9b:aa:a7:52:e2:74:
f6:00:95:b9:14:25:cf:fd:f1:63:83:03:99:fb:55:
05:db:98:1d:45:1c:73:4d:12:95:d4:d5:73:8f:d6:
39:05:36:67:0e:f6:15:cc:b7:85:7f:b5:2f:29:8a:
b3:84:b7:6a:76:ab:03:2f:b3:d8:ff:c3:bd:56:26:
22:a1:dd:b3:16:59:46:54:5b:b5:f2:dc:1f:26:74:
3b:7f:1e:37:ca:6d:1f:ed:33:99:39:e5:56:c7:f4:
2e:be:2d:d7:6b:3e:52:3c:4a:6e:ff:a6:98:25:9d:
b8:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:A0:90:A1:8F:3B:39:54:C5:66:7A:B0:F0:82:E9:CF:7B:A2:5F:9C
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363464303a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:64d0::/48
Signature Algorithm: sha256WithRSAEncryption
56:6d:4d:b1:8c:e1:ff:cb:f5:03:30:af:f5:02:e9:5d:69:e8:
84:65:b3:fd:bf:bc:f9:38:05:cc:4c:0a:0f:b4:ba:11:98:04:
c3:c4:9a:72:d9:44:d9:a3:74:80:a8:87:8f:3a:2d:67:72:0c:
49:80:4e:c8:37:65:e3:b2:a5:31:3f:06:f8:b2:f7:08:27:50:
9d:cf:8b:5e:a2:c6:9a:b9:ac:08:73:61:41:53:c4:f5:0e:0e:
01:50:30:27:10:ac:9b:3e:6a:be:65:43:b3:67:1d:c3:49:82:
a4:42:63:56:a6:ef:ec:33:01:36:c8:d9:57:3c:de:e4:16:e1:
af:8d:03:7e:cc:92:3f:65:74:70:30:35:f6:e0:28:fe:2d:77:
dd:3d:e8:60:d5:1b:4a:55:c1:2b:0b:a4:3f:92:d1:4f:d0:31:
4a:4e:cb:90:17:3b:ee:65:b3:41:ac:04:f4:4e:ea:48:39:aa:
23:52:9e:ab:7f:7b:63:8d:0c:0d:cb:36:ce:7c:32:e9:44:03:
7b:d9:a8:2c:87:03:58:7b:66:7f:b9:2a:6e:66:97:9e:5a:24:
34:a7:6e:73:d3:e5:77:d7:56:5c:53:58:74:73:1d:48:77:41:
43:1f:3a:6c:45:9d:5a:fa:bf:24:d8:b0:dd:0e:c6:3e:58:4a:
2d:67:fa:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 06:54:36 2025 by rpki-client