Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363763303a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363763303a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: ZNB5emt6CeKgqQ6YcyEv0/a/OmKb7NT9kA25Vfjb0+Y=
Subject key identifier: 14:60:FC:CB:2B:2E:47:66:EF:BF:2B:00:BA:1E:19:1C:99:4D:3C:70
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 275823507320BB873BAFCC35EAFEDD9CE41B1AFC
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363763303a3a2f34382d3438203d3e203136393039.roa
Signing time: Thu 16 Jan 2025 19:33:37 +0000
ROA not before: Thu 16 Jan 2025 19:28:37 +0000
ROA not after: Thu 15 Jan 2026 19:33:37 +0000
asID: 16909
IP address blocks: 2a14:7584:67c0::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 01 Feb 2025 21:48:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:58:23:50:73:20:bb:87:3b:af:cc:35:ea:fe:dd:9c:e4:1b:1a:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Jan 16 19:28:37 2025 GMT
Not After : Jan 15 19:33:37 2026 GMT
Subject: CN=1460FCCB2B2E4766EFBF2B00BA1E191C994D3C70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:08:55:b2:cd:a1:ba:4f:8c:cf:2e:50:dd:ee:
0e:6a:84:53:09:6c:15:0c:ce:f7:15:2a:5a:b6:da:
74:c1:4b:96:9e:6f:3e:a6:49:4f:80:01:e1:34:23:
90:5f:5a:33:a2:72:d5:ac:fc:6a:eb:57:58:ef:40:
03:ef:41:81:65:12:b3:0f:db:50:5d:a4:d8:c6:78:
ce:1b:65:6b:bc:ea:d9:17:fa:ea:ee:66:f1:20:53:
bb:f0:39:76:a9:23:14:a7:4e:58:4c:0f:f0:1a:8b:
e3:21:9c:bd:92:3d:04:0b:93:24:75:9c:70:c3:b0:
59:f2:9c:93:e6:5c:71:78:56:ac:e7:4b:6f:a5:70:
41:ef:06:6e:f1:97:bc:b3:46:f3:70:01:05:f4:09:
40:3d:22:0a:08:bf:14:04:50:6d:77:f4:7b:f7:f7:
05:8d:c9:e3:e0:16:c4:35:4f:56:70:b2:9b:c6:bd:
31:c7:b6:19:c0:db:c3:8b:4b:d7:bb:da:ec:bf:45:
d8:6a:9e:4c:fd:ed:14:11:f4:1b:9b:f2:e8:00:5a:
d5:53:23:2f:62:f7:90:7b:fd:a5:1c:cf:7a:67:04:
b4:1c:0a:a5:a6:cc:f7:18:b6:10:35:f0:a5:a3:7d:
c6:09:1f:e0:54:b8:3a:c0:f7:2b:56:ee:5d:0f:38:
55:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:60:FC:CB:2B:2E:47:66:EF:BF:2B:00:BA:1E:19:1C:99:4D:3C:70
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363763303a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:67c0::/48
Signature Algorithm: sha256WithRSAEncryption
2c:23:80:3c:cb:bb:ec:95:44:6a:28:30:f1:81:63:c2:2c:90:
7a:30:94:ef:60:1d:cd:a7:59:b4:3f:41:cb:1c:08:fa:71:97:
2a:6d:ba:d2:8b:12:91:f2:b9:70:bd:52:af:6c:9c:b1:31:c6:
a9:8b:2d:ce:78:b2:c6:b0:52:b3:4f:ab:fe:bb:42:24:4b:6b:
27:55:76:3a:55:18:69:61:59:30:aa:4a:a5:fa:f8:7d:8d:66:
59:88:79:c0:1e:43:e2:0b:fd:f4:69:cf:9a:71:67:a8:e4:72:
3b:39:60:e1:ce:3d:5e:25:e8:ed:6b:a0:5e:d5:91:a7:24:72:
b7:2b:0d:55:10:7c:c8:0c:40:ce:2e:8d:17:a3:db:6f:b6:3e:
3b:e2:06:e3:ab:60:3d:16:75:9c:42:91:a2:3d:62:30:f0:28:
b1:cd:cf:85:ba:8b:6a:a9:f4:8c:88:29:77:1c:6e:2b:61:27:
57:95:5a:ec:1f:40:60:dd:bd:f2:18:15:51:eb:27:26:2b:f6:
48:cb:9e:31:f5:39:a9:29:5e:a0:40:95:d7:85:b4:48:2f:44:
4f:77:0c:fe:e7:72:6d:00:4f:62:f8:c9:cd:5b:00:69:dc:1e:
2c:d2:b7:45:b2:55:a9:54:ed:89:18:e5:b1:7e:8c:cd:75:20:
6d:d6:a9:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 06:48:23 2025 by rpki-client