Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363530303a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363530303a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: F3Y/b8dOo/Fwyhg2dYqNWqXYmJ2anBJpA8cdyUCUK8g=
Subject key identifier: D1:F0:A2:87:B9:46:2A:39:40:60:17:49:84:B0:7C:A6:B9:65:6B:C6
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 122A87FC8227B6CFF904FDCA880892A366FD5FEE
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363530303a3a2f34382d3438203d3e203136393039.roa
Signing time: Mon 06 Jan 2025 20:21:25 +0000
ROA not before: Mon 06 Jan 2025 20:16:25 +0000
ROA not after: Mon 05 Jan 2026 20:21:25 +0000
asID: 16909
IP address blocks: 2a14:7584:6500::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 16 Jan 2025 19:25:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:2a:87:fc:82:27:b6:cf:f9:04:fd:ca:88:08:92:a3:66:fd:5f:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Jan 6 20:16:25 2025 GMT
Not After : Jan 5 20:21:25 2026 GMT
Subject: CN=D1F0A287B9462A394060174984B07CA6B9656BC6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:8c:22:75:4b:7e:14:bb:86:32:9d:d7:74:25:
d3:a5:6e:0f:22:ba:4a:85:e7:4e:c2:03:ee:82:59:
ba:90:e0:c3:be:c8:3b:0b:8d:f6:e6:84:ad:64:bc:
7b:3b:59:b3:bc:25:3b:40:97:d4:3a:c1:85:57:e7:
8a:44:ef:51:69:af:98:41:e4:4b:a0:b5:6b:29:be:
70:02:2a:fe:34:34:4f:18:de:e9:13:e4:17:02:d5:
db:90:6d:19:11:74:f2:90:dc:8a:7e:71:1e:b1:4b:
c3:f7:20:48:25:6e:86:76:23:26:e2:a7:c9:f6:35:
eb:a8:5f:2c:08:25:0b:02:4f:3e:a5:b5:20:6e:6a:
6d:44:25:97:1b:fe:45:55:d2:6c:ac:db:d6:c2:86:
ba:2e:6c:75:25:71:d6:3f:4a:ad:24:02:20:20:b1:
55:23:ab:8e:7d:4e:39:08:04:3e:2a:d1:43:90:59:
19:2e:00:7b:32:06:c9:d5:c2:ae:8c:a2:db:d2:1d:
01:23:cb:d9:1c:7c:3d:9a:bc:5e:5e:0d:94:5b:e6:
2c:8f:6e:f8:5f:1e:8f:a7:ee:23:33:b3:2e:36:91:
fa:dc:11:3f:26:7a:ba:e9:c1:e5:69:2d:81:db:44:
e8:8a:8a:e4:44:1b:68:06:e8:91:df:62:d8:1c:87:
94:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:F0:A2:87:B9:46:2A:39:40:60:17:49:84:B0:7C:A6:B9:65:6B:C6
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363530303a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6500::/48
Signature Algorithm: sha256WithRSAEncryption
79:be:5b:3a:68:35:39:81:5a:dc:9d:83:1f:60:29:50:44:a4:
58:64:40:3e:c7:f0:e6:f6:38:9a:74:0b:cb:bd:91:08:a8:07:
07:e0:9d:f9:df:ba:f9:5a:62:c5:b7:bc:ce:65:d0:fd:f2:0b:
2c:3f:7a:66:05:ee:03:dd:8d:9b:b8:a7:78:fb:90:50:53:93:
52:7c:1e:d8:16:56:a1:f8:2e:e6:de:d1:55:d2:01:f3:1e:5f:
22:56:d9:67:88:01:2e:77:ff:d6:59:ff:31:d7:73:2d:50:51:
aa:ea:4f:07:8c:5b:2c:ef:ed:b8:99:71:c9:aa:e1:1b:81:a3:
3b:74:6f:1b:fe:5a:f0:29:04:3c:c7:3b:86:45:8e:4d:69:9e:
3d:e7:13:d6:f9:d6:e6:27:87:8d:05:4f:9e:ab:a9:8d:45:86:
e2:9c:59:de:0e:06:fb:27:19:ae:cb:19:fe:c6:c4:d1:51:6d:
9f:54:6d:31:d6:cf:5c:44:0b:71:42:01:52:f9:47:f7:63:91:
6c:32:92:8a:d4:6d:15:e8:cd:23:3c:36:68:18:d9:8a:31:62:
8a:fd:a7:69:84:16:0b:a3:45:9b:4f:2c:5c:04:51:c5:64:df:
5a:01:ba:13:b8:42:1e:89:88:d9:e4:68:68:8b:4e:0d:49:e2:
43:d2:8f:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:44:51 2025 by rpki-client