Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363636303a3a2f34342d3438203d3e203136393039.roa
File: 326131343a373538343a363636303a3a2f34342d3438203d3e203136393039.roa (raw, json)
Hash identifier: ugYsnjCbFG+676I/uKkac5JsbNWgq6q55Fx6rvE87Ew=
Subject key identifier: 90:D5:E2:90:5E:97:D2:61:AD:2F:24:8D:0E:8D:57:5E:B2:38:69:D2
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 70812C007366CE4E661B13C93789066BC189A615
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363636303a3a2f34342d3438203d3e203136393039.roa
Signing time: Thu 19 Dec 2024 20:50:44 +0000
ROA not before: Thu 19 Dec 2024 20:45:44 +0000
ROA not after: Thu 18 Dec 2025 20:50:44 +0000
asID: 16909
IP address blocks: 2a14:7584:6660::/44 maxlen: 48
Validation: Failed, certificate revoked on Thu 19 Dec 2024 23:09:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:81:2c:00:73:66:ce:4e:66:1b:13:c9:37:89:06:6b:c1:89:a6:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Dec 19 20:45:44 2024 GMT
Not After : Dec 18 20:50:44 2025 GMT
Subject: CN=90D5E2905E97D261AD2F248D0E8D575EB23869D2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:4d:12:4d:5e:34:db:18:a0:9e:6e:a9:71:64:
8c:d1:1a:c5:b2:d9:82:85:96:cb:2d:65:fd:c8:69:
bd:48:9f:a5:44:be:22:ee:93:47:bf:67:a7:b4:56:
c5:79:21:15:8c:2e:24:d1:aa:fc:26:47:b8:9a:bd:
eb:81:65:07:83:84:d4:1e:cb:7b:71:5f:c9:44:02:
ce:b7:97:fc:e3:85:b6:24:ab:c0:9d:d9:b5:53:09:
33:54:7d:f6:a2:8d:07:17:52:7e:1f:d8:26:53:d7:
19:56:a0:5d:64:9c:86:b2:e7:76:51:ca:fe:32:d5:
ce:e6:bb:25:3e:dc:38:4b:bc:b2:85:91:1d:ad:38:
fc:fb:98:94:33:f0:f6:2c:e0:24:0c:b1:c0:a0:96:
38:ae:c8:f0:27:42:16:f6:af:a6:74:e1:05:43:af:
cd:ce:79:b7:e5:ac:d2:3a:b4:9b:2f:f4:5a:16:5c:
9a:07:52:a6:e6:d5:bb:b4:3c:0a:7c:1b:8b:80:38:
c0:e0:27:a6:58:ba:77:6e:75:74:60:c1:3e:82:a3:
b9:76:6b:ed:d1:ca:bf:1f:95:01:f7:13:27:41:00:
ee:57:b2:be:3e:31:24:38:23:f2:2d:22:8f:e2:39:
c5:43:f5:ae:2b:eb:8a:0f:43:a3:30:2d:7c:82:12:
d0:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:D5:E2:90:5E:97:D2:61:AD:2F:24:8D:0E:8D:57:5E:B2:38:69:D2
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363636303a3a2f34342d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6660::/44
Signature Algorithm: sha256WithRSAEncryption
0e:5d:7e:c6:f3:d2:36:db:18:8d:a9:db:76:67:bb:90:d4:22:
43:50:af:91:aa:75:f7:fe:8c:be:71:02:40:5a:3c:2f:04:67:
2f:2c:66:87:80:37:47:17:22:73:ad:66:61:5f:cc:6f:43:17:
40:e3:ef:cb:22:04:8f:c2:8d:26:47:00:0f:01:0d:da:c0:28:
51:c0:17:95:e9:1a:bb:a5:ef:46:f3:8d:33:16:00:34:5a:5c:
54:40:f6:05:45:4e:11:03:b2:b7:fc:df:0e:a3:d4:8d:cf:c1:
ce:19:51:42:fd:13:f2:b1:29:72:f7:3f:4b:3e:b6:4d:32:18:
2e:15:65:f8:81:f9:b2:e1:2b:ef:d2:8e:76:c8:7d:6a:d0:b5:
c8:54:4e:b7:f7:82:dd:ba:6d:86:49:f9:a3:7e:8b:e1:41:a2:
13:f1:6f:bb:c6:f0:5c:c2:0d:8d:e5:2e:85:09:90:29:67:97:
aa:41:6c:d8:b0:fa:b1:f2:6e:e1:dc:ec:28:0c:95:b2:f2:bf:
79:2e:74:9e:44:20:be:87:62:88:46:32:fe:1f:9d:f9:df:d7:
a5:e9:ce:f7:70:6c:9c:32:c0:6d:8e:69:5b:ee:f7:a3:a4:8f:
0b:ce:26:af:ec:10:67:31:6a:26:03:23:a8:2d:5a:ef:56:b3:
48:58:de:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:51:40 2025 by rpki-client