Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363639303a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363639303a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: XQ/kM9oYJWKM6iaval3QjaAbkReZdEjU3UzAKbWjjx8=
Subject key identifier: 4F:79:59:31:CA:1E:34:2D:33:E4:E9:3B:3E:01:B1:69:A4:6C:0F:35
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 1B34255BFA6DA740BC04D3473E9C2229FBAE3FCD
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363639303a3a2f34382d3438203d3e203136393039.roa
Signing time: Thu 16 Jan 2025 19:30:59 +0000
ROA not before: Thu 16 Jan 2025 19:25:59 +0000
ROA not after: Thu 15 Jan 2026 19:30:59 +0000
asID: 16909
IP address blocks: 2a14:7584:6690::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 01 Feb 2025 21:48:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:34:25:5b:fa:6d:a7:40:bc:04:d3:47:3e:9c:22:29:fb:ae:3f:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Jan 16 19:25:59 2025 GMT
Not After : Jan 15 19:30:59 2026 GMT
Subject: CN=4F795931CA1E342D33E4E93B3E01B169A46C0F35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:09:83:63:b7:ec:fc:c8:48:d3:21:9c:93:07:
42:5b:0b:d4:c8:47:51:34:19:ad:f6:0d:28:b8:58:
f8:c6:c0:79:94:b4:04:58:90:4b:48:ea:28:e9:bb:
9d:82:31:4b:2f:bd:06:2c:d3:e7:4d:c5:42:76:4f:
fe:12:6e:6b:d0:f7:52:6a:00:c4:42:b2:29:3c:88:
c9:a0:f9:98:42:47:0c:b4:f8:55:90:6b:13:ed:e3:
ff:30:20:cb:cc:2b:29:45:b8:f3:3b:47:fe:81:78:
bc:d4:b3:60:1e:19:0e:c3:33:bc:50:5e:ff:ee:78:
ad:92:5b:23:c9:90:2c:82:90:e9:48:d1:c5:a0:d8:
b5:11:10:39:c9:8a:9d:29:2a:6f:43:eb:93:ad:57:
a3:d2:22:f6:93:0a:31:32:2b:25:e7:f6:3d:67:02:
d4:f1:65:03:f1:5d:b6:99:a2:b1:82:13:80:63:0b:
fa:4d:71:59:1c:af:b1:91:fa:2b:cd:49:be:53:a0:
9c:a9:6a:56:3e:f6:10:50:ad:28:ff:65:b1:b0:6e:
c9:1d:b9:58:d6:fb:13:78:24:03:f9:7e:84:7e:19:
2f:8a:33:fb:9e:62:fb:e6:96:72:31:35:f8:3a:5e:
77:63:2c:3c:6c:5e:97:31:11:e3:e4:92:90:0b:6a:
9d:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:79:59:31:CA:1E:34:2D:33:E4:E9:3B:3E:01:B1:69:A4:6C:0F:35
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363639303a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6690::/48
Signature Algorithm: sha256WithRSAEncryption
17:81:13:f3:53:5a:e2:9a:10:bd:e6:78:ad:5d:61:53:16:1f:
9a:ed:4e:30:4a:10:fd:44:79:cd:8d:36:64:96:c7:00:74:f8:
56:60:61:8b:20:2b:fd:89:c1:da:f4:9b:42:f8:79:bf:bb:d4:
77:74:12:5c:a4:25:05:93:ea:2f:29:db:2b:0e:80:81:08:81:
c9:03:a8:86:11:23:97:1d:a7:8b:ba:60:b0:2a:d1:b1:3a:22:
59:db:04:cc:ba:d1:c0:d9:1e:e5:cc:44:fd:46:23:a7:da:8d:
96:b0:9d:50:fe:e6:a6:bc:89:af:04:f0:65:bc:c6:f9:3c:67:
4d:40:fb:c5:73:30:4c:a2:e3:84:75:65:c5:a3:b3:d1:3c:7b:
97:89:1a:6e:53:b6:22:a8:62:b2:05:ee:16:7e:a8:6d:94:48:
8d:87:bd:69:c0:f0:be:c2:4d:89:af:32:4b:57:e7:b5:f4:01:
89:5b:9e:d1:b0:a2:ce:e5:88:c9:1f:c1:fd:22:0e:63:cc:60:
59:8b:22:bc:c7:f0:b8:65:a8:6c:83:7b:78:36:e9:ef:6e:12:
4c:51:ac:99:50:3e:6c:db:c6:11:c5:0e:cd:c6:10:4a:3e:58:
61:72:69:54:16:96:3e:b0:87:23:9b:60:39:d3:c8:23:47:46:
70:91:79:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 06:56:02 2025 by rpki-client