Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363533303a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363533303a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: I4w3Hq33rdBdk9e+XRstgT8tjZFbz1PGvPBXNGRlNX0=
Subject key identifier: D5:30:31:01:A8:76:C8:A6:67:61:FC:74:01:96:B0:28:CE:37:25:4F
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 5B326D0031A0F5DAC0D199914B784548E0E9E8F7
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363533303a3a2f34382d3438203d3e203136393039.roa
Signing time: Mon 06 Jan 2025 20:21:27 +0000
ROA not before: Mon 06 Jan 2025 20:16:27 +0000
ROA not after: Mon 05 Jan 2026 20:21:27 +0000
asID: 16909
IP address blocks: 2a14:7584:6530::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 16 Jan 2025 19:29:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:32:6d:00:31:a0:f5:da:c0:d1:99:91:4b:78:45:48:e0:e9:e8:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Jan 6 20:16:27 2025 GMT
Not After : Jan 5 20:21:27 2026 GMT
Subject: CN=D5303101A876C8A66761FC740196B028CE37254F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:22:a3:ca:d2:58:b6:05:9f:d0:10:05:08:19:
19:1b:58:03:f0:8d:33:38:a4:36:15:72:13:de:3f:
2d:38:13:5d:fd:91:bc:4b:f4:12:6e:1d:58:69:52:
ff:46:e5:b2:50:fc:dd:99:95:14:26:e8:3a:38:1a:
4c:f1:ec:67:d3:bb:3e:d5:58:ea:d2:80:8a:87:3a:
c7:10:47:bc:3e:8b:96:35:c2:64:6b:fc:7a:80:7f:
f9:94:61:5f:06:5b:62:23:df:94:b3:f0:94:04:f1:
a4:74:14:3c:85:d8:97:55:9f:5a:86:6c:0d:9a:ff:
1e:61:69:a3:8e:9f:16:71:c6:00:63:9f:14:d3:0f:
29:2b:fd:19:f9:82:fa:58:3a:2e:ba:ca:55:9d:0b:
23:8a:b0:22:7a:de:9b:5b:92:9c:65:3a:8c:5e:91:
2e:06:85:38:3d:2d:1f:07:c3:31:76:cf:fc:ff:d4:
c9:58:df:e1:56:76:4a:87:58:8a:86:66:d8:da:e8:
c3:b3:e7:75:a8:b6:ee:1c:46:f4:cf:12:7c:81:01:
b6:da:bd:10:11:01:c5:fc:aa:7e:21:c0:72:77:70:
74:d4:be:e6:e4:de:77:dc:2c:c9:f9:87:b0:20:89:
21:12:40:b1:90:41:6d:78:9f:a7:45:31:4f:e5:6a:
bd:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:30:31:01:A8:76:C8:A6:67:61:FC:74:01:96:B0:28:CE:37:25:4F
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363533303a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6530::/48
Signature Algorithm: sha256WithRSAEncryption
b6:6d:90:6e:82:22:a6:46:fd:88:44:f7:27:1b:43:9f:c7:23:
2f:45:b6:44:13:36:52:99:38:1d:39:31:ac:c1:39:cb:46:d5:
d8:48:a2:78:2f:c2:1d:bf:65:ba:0d:13:ff:57:9a:9e:8e:9a:
4a:d9:6a:bf:58:c5:e1:7b:16:57:28:d1:4a:82:e9:71:5c:f8:
e0:34:57:e0:32:7a:a1:5f:85:b2:4e:62:83:8c:9b:33:8d:86:
5d:ab:1e:4f:ca:ea:4f:53:9c:9d:51:4e:0a:1c:41:c9:8d:fe:
3a:e5:eb:6d:83:d0:d2:84:43:7c:b6:9b:e7:62:3e:de:d0:72:
2e:9b:d2:e5:9c:64:6a:89:66:e0:62:28:de:5c:94:ed:00:ad:
c2:e0:d4:6a:5d:f7:00:76:e9:55:11:87:2c:f5:fb:9d:ea:5b:
da:58:03:d0:2f:ce:7f:0b:f3:00:0c:39:2f:4a:19:70:80:57:
2b:86:51:ff:04:56:86:95:26:37:85:21:82:1d:d2:1b:36:d9:
9e:9e:3a:81:e0:0a:8d:25:9a:00:bb:e9:2d:c9:28:a0:57:3e:
ca:11:dd:cf:20:83:24:8d:65:9e:a4:ec:47:4e:02:4d:59:ab:
c8:98:ae:3d:65:f1:55:93:b6:c5:29:2f:55:3f:ff:7e:7c:49:
48:4e:32:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:47:07 2025 by rpki-client