Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363666303a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363666303a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: KjyusDZe8tBTItwZU03JqZXKZYs8OH/d03IgYIlmS4s=
Subject key identifier: AE:47:68:2B:5F:A3:44:84:15:60:E9:B6:23:61:5A:81:2B:E9:0A:21
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 291461B65F31857765290948A40B23706227AF8D
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363666303a3a2f34382d3438203d3e203136393039.roa
Signing time: Thu 16 Jan 2025 19:31:42 +0000
ROA not before: Thu 16 Jan 2025 19:26:42 +0000
ROA not after: Thu 15 Jan 2026 19:31:42 +0000
asID: 16909
IP address blocks: 2a14:7584:66f0::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 01 Feb 2025 21:48:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:14:61:b6:5f:31:85:77:65:29:09:48:a4:0b:23:70:62:27:af:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Jan 16 19:26:42 2025 GMT
Not After : Jan 15 19:31:42 2026 GMT
Subject: CN=AE47682B5FA344841560E9B623615A812BE90A21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:12:50:2e:4b:2b:0c:d9:62:b3:8b:a1:55:a4:
05:fa:b9:87:76:31:6d:19:b7:37:81:01:95:00:1e:
b6:da:9b:16:83:7f:8e:d5:09:21:40:5b:7e:e0:17:
fb:01:52:a2:b1:60:52:b1:b8:28:5f:aa:19:99:76:
71:b6:c1:99:c4:70:9f:67:7c:03:b9:ce:7c:d9:83:
63:96:29:90:59:26:67:a7:43:a5:5c:41:59:a8:fa:
89:a3:e0:67:64:5f:a4:bd:1e:a4:4d:ab:80:c7:9f:
56:bc:98:3d:4a:54:e9:34:44:f8:2b:04:a1:db:42:
bd:bc:a0:90:01:27:db:de:76:d1:dc:a2:b1:41:68:
bf:8c:43:0c:f9:5e:af:23:d6:f7:05:e3:50:4c:a8:
8f:09:44:18:c2:c5:a0:8d:bd:7e:a5:0b:32:b9:8d:
74:3b:df:6e:5c:e7:83:94:18:c2:f6:da:62:69:af:
8b:d9:54:40:b8:5b:12:a4:c9:e1:c1:d8:01:f3:ea:
2b:75:8a:9a:41:95:b9:d4:3a:98:fd:32:72:9f:c3:
5f:2f:a7:24:31:89:17:a7:17:41:8f:d1:77:e3:77:
da:8c:d5:68:37:37:3e:1e:09:8a:b8:18:ed:28:f4:
64:06:6f:fe:88:af:2e:0f:a5:91:19:c9:4c:42:a1:
c2:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:47:68:2B:5F:A3:44:84:15:60:E9:B6:23:61:5A:81:2B:E9:0A:21
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363666303a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:66f0::/48
Signature Algorithm: sha256WithRSAEncryption
11:23:77:f2:ad:cb:6b:49:78:47:c1:eb:f4:e3:c1:2f:be:a2:
34:e9:cb:fc:71:19:bd:29:99:65:96:7b:09:83:c3:c9:32:d2:
9b:ba:ba:f1:91:87:0d:dd:36:65:86:a8:40:c3:35:0a:85:0a:
cc:72:c0:80:20:ff:f1:5c:16:ab:90:22:2c:8b:59:27:f1:fc:
ce:7f:59:2c:60:72:74:45:70:e2:b8:9f:12:41:e2:88:35:fa:
d5:0f:bc:f5:b8:60:fd:81:f4:85:df:e1:c4:e6:43:8c:55:4e:
3b:10:27:ec:3d:72:90:7b:8c:14:5f:5a:2f:8c:36:5c:c4:00:
34:4a:2a:95:35:f6:a9:40:a9:4f:9d:51:7e:b5:46:f7:08:58:
50:5c:02:9b:d3:bf:11:8f:fe:f3:32:36:88:ba:58:6b:71:fe:
ba:1c:1f:02:69:ce:37:05:7a:4c:dc:1e:f1:73:49:ee:df:32:
29:54:6e:b1:cb:6d:96:af:69:37:77:5e:6c:c6:40:33:f5:a5:
68:af:c3:58:90:cb:0f:61:ca:9c:5f:a9:b8:a7:42:d4:b1:1b:
5e:5e:e5:ff:70:09:f4:78:d7:14:16:81:1b:a6:14:21:14:3d:
5d:31:20:73:5f:a3:ee:bd:91:c0:c6:d8:68:22:04:fe:26:cc:
90:cf:05:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 06:59:33 2025 by rpki-client