Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363731303a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363731303a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: n6hY10C1Eyb7c6antMNamh+9o6gt0AYXVUu3ui+Cl8o=
Subject key identifier: 73:2B:CF:02:6C:B9:1B:0D:D7:D3:D9:9E:5E:05:FD:95:1B:E9:E6:7A
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 54DC910EF8D2A1851D9452CCB58D850A9E7610FE
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363731303a3a2f34382d3438203d3e203136393039.roa
Signing time: Thu 16 Jan 2025 19:32:15 +0000
ROA not before: Thu 16 Jan 2025 19:27:15 +0000
ROA not after: Thu 15 Jan 2026 19:32:15 +0000
asID: 16909
IP address blocks: 2a14:7584:6710::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 22 Jan 2025 12:32:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:dc:91:0e:f8:d2:a1:85:1d:94:52:cc:b5:8d:85:0a:9e:76:10:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Jan 16 19:27:15 2025 GMT
Not After : Jan 15 19:32:15 2026 GMT
Subject: CN=732BCF026CB91B0DD7D3D99E5E05FD951BE9E67A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a0:36:2e:a1:06:7d:41:57:d8:2d:cc:ec:e2:
b3:20:63:cb:9d:52:2b:42:ee:10:c2:9f:71:c1:fb:
4f:fd:96:24:a6:df:db:5d:df:e5:34:35:70:28:d9:
71:eb:d1:0b:a5:f9:9e:35:34:fd:0b:84:09:5c:cc:
b9:ce:9c:73:13:a1:77:65:76:1f:9a:57:0b:df:46:
df:fd:1d:c7:4c:73:9a:a8:ed:2a:e7:21:64:92:47:
4d:d8:0a:5f:ac:f1:6f:f3:69:68:f1:e3:93:37:1b:
c5:3e:66:26:b4:07:47:09:ab:6c:2c:32:86:02:fd:
82:86:28:0c:24:e5:ee:8f:b6:f0:30:b3:45:e5:b7:
b0:c0:4d:a8:f5:31:25:48:12:98:41:c5:7a:3e:8a:
c9:75:60:e1:fb:ea:7d:68:d5:60:ea:40:9b:4d:6f:
0c:3e:2a:00:75:7d:4b:bd:30:28:b2:2b:dc:73:5a:
89:e8:7c:f4:a1:f9:6e:bf:1e:31:00:52:5f:4e:86:
b7:e7:68:9b:93:4d:76:4b:7e:13:5f:a9:11:03:a2:
4a:1f:d2:fa:bc:8a:bc:34:8f:90:d2:cb:4b:3c:0a:
5a:e6:23:70:bf:04:5d:65:07:40:82:d6:d6:f7:80:
9c:25:cc:63:9a:f8:1e:fe:39:9b:0e:6c:04:9f:d1:
0b:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:2B:CF:02:6C:B9:1B:0D:D7:D3:D9:9E:5E:05:FD:95:1B:E9:E6:7A
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363731303a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6710::/48
Signature Algorithm: sha256WithRSAEncryption
21:a6:06:76:73:b6:cb:d0:38:aa:1a:8a:04:f7:ea:4d:c1:1d:
ea:e0:47:72:bd:80:6a:d0:79:f1:0f:50:57:9b:d2:84:7c:92:
79:25:c1:17:8f:0a:bc:65:76:73:f0:de:9f:9b:b9:35:f8:cf:
ec:52:6a:a2:b1:8a:c7:2c:97:ce:60:a9:3d:ff:60:cb:51:7d:
86:6d:df:7b:6b:92:ff:dc:96:21:69:64:42:be:a5:1f:2e:29:
de:09:7a:9d:88:1d:ef:7e:89:64:3b:3c:7b:13:19:57:69:49:
00:46:fd:71:06:5c:8b:76:28:f6:d3:ac:a5:a9:9f:b4:b4:7f:
ca:15:a5:5e:23:a4:b2:53:4a:01:20:67:e8:63:48:ae:ee:b3:
92:6f:85:19:86:c8:30:17:ee:ee:21:bb:4c:19:ef:e1:5f:2b:
94:8a:54:42:74:b5:d8:c4:48:0c:c9:b8:32:bb:d9:a2:6d:18:
c2:c9:84:a9:dd:2b:5a:7e:92:4f:1f:ea:db:26:84:9f:cf:d6:
dd:c0:88:1b:3f:b9:8a:a8:9e:f9:c4:3a:e1:2a:21:eb:22:ad:
54:58:d0:87:a3:51:e1:65:3d:8a:56:66:1c:fc:47:bc:1c:9e:
22:56:6c:3e:a8:d3:d1:2a:84:af:3f:6f:ae:39:22:30:a8:81:
dd:0d:79:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 06:56:55 2025 by rpki-client