Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363733303a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363733303a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: FfAf0E77gnwVdnUbFnGujYwszAR0H2UvrRWn8lU30FA=
Subject key identifier: 37:59:1F:B6:CB:1B:3E:DD:18:95:35:A9:8A:5F:D9:9A:EB:A5:84:92
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 04C33760BA0CB33A6B7AC86E0F1DAC19271A9744
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363733303a3a2f34382d3438203d3e203136393039.roa
Signing time: Thu 16 Jan 2025 19:32:16 +0000
ROA not before: Thu 16 Jan 2025 19:27:16 +0000
ROA not after: Thu 15 Jan 2026 19:32:16 +0000
asID: 16909
IP address blocks: 2a14:7584:6730::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 01 Feb 2025 21:48:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:c3:37:60:ba:0c:b3:3a:6b:7a:c8:6e:0f:1d:ac:19:27:1a:97:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Jan 16 19:27:16 2025 GMT
Not After : Jan 15 19:32:16 2026 GMT
Subject: CN=37591FB6CB1B3EDD189535A98A5FD99AEBA58492
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a6:d1:58:bc:2b:17:e0:7a:6a:a8:07:91:b2:
1c:2b:86:9a:33:a4:61:48:a3:57:a9:9f:59:bf:35:
90:a5:3d:62:a9:9c:29:38:a9:9d:7d:b9:46:ea:37:
b5:b3:a4:e7:8f:bb:e6:bd:67:e5:16:ea:84:19:d3:
82:68:17:f6:65:1b:78:65:04:75:7f:f8:6a:b9:e3:
84:5b:30:2c:af:ed:96:1f:3f:40:5e:c8:a1:de:5b:
fa:26:1f:ca:74:12:37:9a:91:8d:d3:8f:67:13:56:
ef:c9:49:e5:76:f0:01:f9:54:b4:d6:24:9f:9f:23:
4b:51:61:31:c4:d5:e3:99:d0:0d:9b:2f:68:bf:5e:
94:ab:bc:f0:fe:b5:0e:5f:c1:2e:32:cf:fe:37:98:
33:e0:92:ec:a1:19:4c:70:b9:e6:64:a8:96:cb:c8:
64:3f:01:ef:23:66:bb:95:3a:4d:bf:24:53:da:e1:
90:36:b4:ff:ec:a9:1a:62:c7:9b:b1:dc:21:b0:5a:
fb:68:af:22:3a:20:6d:06:a9:98:03:38:72:15:c0:
9b:97:3b:91:30:97:8c:f5:a3:5a:8f:2d:a5:07:e0:
c4:c6:c9:43:c2:e6:08:f3:87:45:0a:45:84:10:d6:
d3:8a:ed:e3:00:bf:38:2e:fd:96:38:ce:07:0b:02:
5f:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:59:1F:B6:CB:1B:3E:DD:18:95:35:A9:8A:5F:D9:9A:EB:A5:84:92
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363733303a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6730::/48
Signature Algorithm: sha256WithRSAEncryption
83:02:d1:58:1e:57:41:f4:91:6e:9d:9a:b9:59:d1:f0:1d:68:
2d:93:81:2b:bc:9e:88:ea:ff:bf:e7:6a:e8:d9:80:79:c7:31:
e5:e7:47:13:31:89:c7:81:3e:f2:37:58:e1:76:22:0b:d8:0a:
85:74:18:03:60:d0:7a:38:68:7e:6a:36:a7:f3:01:28:52:1f:
a8:d7:68:77:5f:b9:0a:01:71:11:f9:97:5e:2d:9d:80:ce:fb:
2c:10:ef:6f:31:41:e7:8d:02:84:7f:f8:72:22:1c:f1:0f:43:
03:e1:ba:ee:59:a9:d0:2c:99:83:d1:15:6e:06:d2:91:71:bb:
a8:9e:09:5a:c8:bd:6e:e2:44:53:17:f8:df:75:6d:c6:db:cc:
49:9e:9e:9a:d3:b2:fc:17:57:b8:b8:5b:12:b2:38:d2:0f:75:
f7:98:a4:7e:aa:b1:45:71:e8:6f:de:7b:be:1b:c2:84:ed:d2:
f2:92:59:d8:b3:0b:30:2f:57:7b:57:d8:d6:fe:d8:b1:e6:7e:
d2:4d:ac:1c:5a:f6:ea:4c:9b:7c:c0:a7:f8:47:2c:05:17:56:
34:4f:d6:75:cb:3c:d2:64:d3:1a:45:6e:49:b8:c5:5f:07:1c:
61:28:e4:d6:ef:9f:9a:a6:4e:74:e3:ed:b3:4d:f2:c9:43:ee:
72:83:99:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 06:51:08 2025 by rpki-client