Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363665303a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363665303a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: UdVxj3WleUjfCZSGfohK9vMdE8AfQLH/GOTGIJlLIYI=
Subject key identifier: 07:38:8D:A0:B2:31:ED:F3:20:11:F1:48:70:7F:8F:97:72:94:47:49
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 6E46CCE1D0D5E676071566A21B88F4D9B63F6B1F
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363665303a3a2f34382d3438203d3e203136393039.roa
Signing time: Thu 16 Jan 2025 19:31:41 +0000
ROA not before: Thu 16 Jan 2025 19:26:41 +0000
ROA not after: Thu 15 Jan 2026 19:31:41 +0000
asID: 16909
IP address blocks: 2a14:7584:66e0::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 01 Feb 2025 21:48:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:46:cc:e1:d0:d5:e6:76:07:15:66:a2:1b:88:f4:d9:b6:3f:6b:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Jan 16 19:26:41 2025 GMT
Not After : Jan 15 19:31:41 2026 GMT
Subject: CN=07388DA0B231EDF32011F148707F8F9772944749
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:b3:84:40:83:e0:2e:51:5b:e7:9a:3c:2c:94:
5b:7f:14:27:4a:d1:20:d1:6b:bd:15:dc:7a:40:36:
d7:4b:aa:0b:e6:e8:17:28:94:25:1f:c4:68:89:f0:
32:d8:c1:52:13:47:49:d1:b2:65:62:9d:f7:32:6a:
be:5a:98:1a:a3:ac:f3:42:dd:d9:03:69:6e:39:70:
18:5d:b3:44:f1:12:53:07:fe:c6:77:67:5d:49:29:
a2:4e:c8:7e:7b:c9:d5:a6:25:df:41:fd:e1:e5:2f:
5d:43:93:d0:a9:36:9f:48:e3:4f:e1:9c:30:23:95:
22:40:f1:43:d9:f5:ae:e3:c5:4b:fc:57:05:75:64:
61:05:eb:62:0f:2b:79:17:ec:78:5c:fe:0d:3c:72:
94:42:e8:fa:f5:df:b8:30:65:8a:22:75:e6:0f:6a:
e5:86:af:29:bb:52:7a:ed:7c:ac:13:1f:9c:68:e1:
e1:ae:8c:77:dc:b9:3f:9d:91:19:f9:49:ad:e6:ca:
6f:2d:b2:a5:ca:4f:f2:1c:10:f5:46:de:9d:36:80:
96:d2:27:3f:9b:97:16:f5:2c:22:44:c8:45:39:73:
c2:a7:b5:cb:14:e4:d8:21:54:c7:56:65:64:f6:85:
2e:89:b5:02:14:b9:02:2e:26:7b:11:8a:96:47:60:
77:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:38:8D:A0:B2:31:ED:F3:20:11:F1:48:70:7F:8F:97:72:94:47:49
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363665303a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:66e0::/48
Signature Algorithm: sha256WithRSAEncryption
98:8b:07:da:a7:57:03:14:24:22:1c:61:45:71:63:38:07:fa:
0c:a4:32:3a:f8:e3:f8:a9:21:ca:fb:56:58:2a:fb:77:8a:35:
0d:b1:30:57:02:5d:bc:ca:9c:e4:d5:6a:5e:31:4d:22:a0:bf:
f1:43:63:dd:16:4f:b0:4a:53:6f:05:47:6a:f9:36:b1:ff:ae:
cc:d6:bc:95:0f:b8:df:2c:d2:79:28:80:8f:7f:e5:24:18:a8:
fb:e9:e9:e2:41:a8:6a:58:8d:dc:6e:66:14:be:05:8b:8a:f8:
1b:9c:09:1d:be:5c:8f:d1:95:d1:e4:fb:9f:0e:44:a1:8e:7e:
84:2e:78:3d:2f:f2:87:44:65:71:e4:ef:d6:b5:96:fa:f5:3d:
be:f2:0f:10:56:5b:b0:d9:11:5d:95:c8:5e:9f:80:9b:81:4b:
42:92:91:1c:0a:44:49:ce:3f:39:17:57:de:03:58:d4:3f:99:
ae:be:bc:d8:69:46:47:9d:2a:bc:75:58:90:e7:aa:de:5f:22:
3e:9c:f5:c5:2b:a2:e1:ab:73:4c:03:b0:b9:e4:25:dc:5c:84:
09:19:54:b9:f1:1f:af:b4:55:57:1b:01:8e:04:29:22:e5:4f:
68:1f:ad:cb:9e:85:cd:91:42:f5:51:f0:97:c3:81:3c:c2:b6:
e7:5d:d1:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 06:56:17 2025 by rpki-client