Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363736303a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363736303a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: thKnt7pz6nbVDL+HiTlUSBKfmDXolE7fa0pmwx21OhE=
Subject key identifier: 09:F2:0A:C2:B4:47:9B:F6:51:EC:1A:3A:3E:0D:ED:0D:66:DC:A2:1A
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 449A847DE6C4A7E10ACF08D5E817F91963CA82AE
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363736303a3a2f34382d3438203d3e203136393039.roa
Signing time: Thu 16 Jan 2025 19:32:18 +0000
ROA not before: Thu 16 Jan 2025 19:27:18 +0000
ROA not after: Thu 15 Jan 2026 19:32:18 +0000
asID: 16909
IP address blocks: 2a14:7584:6760::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 01 Feb 2025 21:48:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:9a:84:7d:e6:c4:a7:e1:0a:cf:08:d5:e8:17:f9:19:63:ca:82:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Jan 16 19:27:18 2025 GMT
Not After : Jan 15 19:32:18 2026 GMT
Subject: CN=09F20AC2B4479BF651EC1A3A3E0DED0D66DCA21A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:13:36:9a:19:20:bf:c0:be:49:5a:b8:b0:44:
19:88:44:10:5a:d8:4d:e1:fb:46:a0:c8:4c:e5:2f:
69:a4:61:dd:6b:f4:cf:e5:dc:a8:af:47:24:2e:3c:
7c:11:dc:d5:18:26:9d:9f:ef:09:ab:2f:86:19:d1:
cb:05:d4:dd:87:d2:06:4c:fc:43:6c:59:36:f7:f4:
37:f7:de:3a:53:3a:4c:54:dc:f5:72:10:be:91:bd:
bf:3f:32:05:0a:7a:37:d9:44:2c:2c:c6:74:80:ab:
43:f3:2c:94:fb:66:6d:cc:4a:4b:f8:c4:fb:d4:16:
c4:aa:40:b9:06:5a:8e:f9:91:f9:b8:81:0f:db:a7:
c4:f0:f8:30:e0:06:d8:5d:64:18:81:6b:b9:4c:c2:
8c:2c:25:f9:cb:bf:b3:f3:a0:91:7c:fc:51:e3:59:
e7:e0:87:67:78:bc:1d:44:74:8b:13:4c:e4:ad:65:
28:93:05:78:b4:ab:1f:40:e5:08:a6:78:00:0b:2b:
66:9d:e5:bf:0e:2e:4b:09:ec:d0:51:1e:6e:80:16:
04:88:c7:de:05:80:08:41:a0:02:32:2b:0e:9c:1d:
79:ef:38:95:53:ab:79:30:65:1b:3f:e2:e4:7d:20:
d8:14:c7:fa:9a:ca:37:99:dd:22:b4:bc:73:42:7c:
75:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:F2:0A:C2:B4:47:9B:F6:51:EC:1A:3A:3E:0D:ED:0D:66:DC:A2:1A
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363736303a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6760::/48
Signature Algorithm: sha256WithRSAEncryption
8a:c5:0c:48:17:50:0c:0f:38:ab:04:fb:7f:de:33:6c:aa:cd:
80:54:8c:04:95:7f:70:e0:e2:b9:5d:5d:0f:3d:43:af:24:bd:
96:c3:c9:a3:f2:70:69:4f:f5:50:3b:f5:57:66:dc:c2:ce:e2:
11:0b:e1:0b:8d:c4:6c:7f:c5:72:19:6c:87:a0:6c:42:c4:fa:
50:24:a4:b8:52:a4:bf:4e:dd:d5:fd:cd:95:87:ba:1f:4d:a5:
fd:75:a0:f9:51:34:8a:7a:65:e4:48:39:75:c0:47:0f:a7:88:
fd:2a:ee:b8:cc:97:ce:ad:ef:fa:77:7b:76:a6:38:be:15:0d:
f5:b6:a5:61:fa:34:fb:ca:82:55:c4:83:45:94:b2:82:57:9e:
31:2c:90:5a:78:2f:e9:60:e4:35:70:ed:39:dd:87:98:da:2f:
7a:4d:cb:26:c4:fe:04:3b:40:6a:44:da:62:64:a1:c1:ae:3c:
32:8a:22:12:36:16:e4:f0:4c:84:b8:00:1a:2d:26:95:22:60:
c1:32:66:cc:9e:03:df:b7:e0:b1:21:3b:30:42:11:45:25:14:
ea:90:9d:87:28:9c:b8:08:e7:46:c3:83:d4:5a:dc:c9:f7:15:
10:0f:8d:f0:55:67:c6:d1:a9:95:f7:a0:c7:8c:59:d5:a1:75:
57:6f:42:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 06:50:00 2025 by rpki-client