Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363631303a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363631303a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: KgdtWpDSnpCarAGdJALmTOUEB9Z4+b6SeecKxIKjero=
Subject key identifier: 23:1A:DB:03:BB:B0:C4:75:71:F7:AD:2C:77:D4:18:60:B2:9B:D5:23
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 5DB54F318BD7C959F54C7D917737B06B83B6FDA9
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363631303a3a2f34382d3438203d3e203136393039.roa
Signing time: Tue 14 Jan 2025 14:22:14 +0000
ROA not before: Tue 14 Jan 2025 14:17:14 +0000
ROA not after: Tue 13 Jan 2026 14:22:14 +0000
asID: 16909
IP address blocks: 2a14:7584:6610::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 01 Feb 2025 21:48:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:b5:4f:31:8b:d7:c9:59:f5:4c:7d:91:77:37:b0:6b:83:b6:fd:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Jan 14 14:17:14 2025 GMT
Not After : Jan 13 14:22:14 2026 GMT
Subject: CN=231ADB03BBB0C47571F7AD2C77D41860B29BD523
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:e4:75:01:f6:9e:ef:1f:0a:96:17:75:fb:b5:
53:4c:c3:b9:69:78:6f:16:96:7b:e7:b4:04:ba:97:
16:c1:fd:b3:7b:a8:cf:c1:86:b0:6c:7b:55:33:1b:
fc:5e:7b:66:ae:8a:01:a2:29:5e:2d:ab:04:1d:eb:
74:40:00:c6:59:3b:55:95:e7:cd:11:32:42:50:a9:
8c:a2:ec:3f:e2:47:5c:bb:44:f3:cb:89:37:c3:8a:
9e:5e:2f:12:01:ab:b7:5f:46:01:3e:73:4f:95:1b:
16:68:ed:38:bc:9d:73:06:f1:12:ae:85:20:4b:47:
16:00:01:87:2d:35:39:78:d5:ee:9c:19:e6:2c:75:
08:8d:3a:57:e1:77:4c:c9:03:e6:5c:71:e5:72:bf:
6f:d4:66:e3:e8:18:11:9a:e1:1e:44:c7:c1:de:b8:
48:a9:33:40:aa:cd:6c:88:1d:20:47:1b:a4:82:ad:
d4:6f:21:e1:c6:56:cf:af:be:83:15:19:d3:31:48:
b2:58:ad:fb:e3:9a:0f:85:e5:e5:fc:ff:75:95:44:
18:8f:c9:ac:b2:9f:03:a9:d0:0a:de:bb:38:76:31:
ee:bd:0b:41:af:d2:ed:0f:c1:67:70:4f:6b:76:3f:
a1:8a:57:14:67:0c:f4:e3:8c:d5:26:e4:aa:a3:4f:
d3:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:1A:DB:03:BB:B0:C4:75:71:F7:AD:2C:77:D4:18:60:B2:9B:D5:23
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363631303a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6610::/48
Signature Algorithm: sha256WithRSAEncryption
59:d4:2e:c9:9a:19:29:aa:d9:ba:5a:33:00:f2:7b:4c:00:a1:
14:08:d9:cf:bc:5a:2a:91:44:f7:eb:da:d2:70:9e:84:30:11:
ae:1b:9c:35:ae:a2:08:fe:97:ba:f5:bd:10:8e:53:48:c7:aa:
8a:31:2c:7a:86:e0:3e:57:c8:98:56:5c:c2:5f:a8:40:68:5d:
5a:ad:68:e9:43:93:6e:64:b5:01:eb:0d:8b:c6:f3:88:53:3e:
13:ce:11:84:91:d2:6f:a2:96:1a:52:b4:11:3a:f3:ce:6c:4d:
d1:40:7b:61:f0:94:a3:04:7f:3a:b5:24:00:44:de:24:7b:20:
92:46:3e:67:f7:8e:35:4f:16:52:49:bc:23:5b:a6:c6:7e:f1:
07:15:85:50:a1:9b:34:50:07:fb:e1:de:53:bb:f3:70:e3:fc:
16:8e:19:4e:19:28:f5:62:5b:9c:5d:c2:b0:49:25:4b:85:5b:
25:dd:8a:17:e7:f6:ab:f8:de:3d:30:2c:ba:34:3d:c7:fb:55:
2a:f1:35:06:64:b9:06:de:21:5d:ac:80:0c:f4:3b:60:2f:df:
eb:56:36:c5:05:5e:87:25:cd:c4:a6:a1:70:40:58:62:fd:7f:
43:65:9c:e4:d2:77:77:a8:2c:e6:b0:70:f6:cf:a3:98:ef:a8:
95:c8:e6:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 06:54:13 2025 by rpki-client