Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363766303a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363766303a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: HEQWdlJNK8I9HLqE2rWo9JpgQNGpFAXf4f4NN6vj1No=
Subject key identifier: 71:BD:6E:92:22:0E:F2:A8:6C:34:38:FE:2F:7C:21:13:42:B4:76:21
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 2F0D86F29753E0DB7E66D735740F1FF579A7FF3C
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363766303a3a2f34382d3438203d3e203136393039.roa
Signing time: Thu 16 Jan 2025 19:33:38 +0000
ROA not before: Thu 16 Jan 2025 19:28:38 +0000
ROA not after: Thu 15 Jan 2026 19:33:38 +0000
asID: 16909
IP address blocks: 2a14:7584:67f0::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 01 Feb 2025 21:48:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:0d:86:f2:97:53:e0:db:7e:66:d7:35:74:0f:1f:f5:79:a7:ff:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Jan 16 19:28:38 2025 GMT
Not After : Jan 15 19:33:38 2026 GMT
Subject: CN=71BD6E92220EF2A86C3438FE2F7C211342B47621
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:61:de:da:c6:0f:80:4d:90:5a:39:71:10:04:
ba:00:f9:ee:75:d7:07:da:8e:50:83:67:89:9d:70:
dd:c8:c1:ab:23:e7:c5:0d:af:45:3b:d7:98:27:a3:
e0:8a:b8:b2:d4:93:71:e8:a5:23:26:f3:19:ee:c1:
d8:29:9e:b5:b5:5e:78:67:fe:4e:79:33:6f:52:53:
9d:ca:de:57:50:ce:88:41:36:08:7d:83:6d:02:6b:
26:4b:56:cf:15:18:ee:8b:78:4a:be:21:d0:fe:9f:
2f:58:fa:a7:64:a2:c7:e8:6b:d0:90:03:d1:12:d8:
59:48:6f:5f:eb:bb:d0:0a:27:da:c4:5e:53:88:c7:
7b:c0:1a:ba:06:7c:af:61:ef:64:60:4c:ef:f0:66:
9b:39:c6:e0:05:22:e3:3f:18:87:39:56:57:db:1a:
57:ba:01:50:48:10:02:09:5d:9b:a5:d5:d8:5d:fa:
4c:f3:0e:1d:3c:e7:7f:e6:3f:4d:c5:30:c5:6b:6c:
f3:c8:b0:d7:5f:65:6d:71:b1:b8:dd:c7:1a:c7:6e:
33:ec:b6:19:4b:6c:a8:e9:3a:96:3f:e5:00:a7:f3:
e2:c5:c8:1b:42:ed:5e:9e:2d:94:92:71:85:1a:bc:
3a:a5:41:a5:55:6a:d0:bc:a9:5e:95:b4:de:bb:cf:
ea:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:BD:6E:92:22:0E:F2:A8:6C:34:38:FE:2F:7C:21:13:42:B4:76:21
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363766303a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:67f0::/48
Signature Algorithm: sha256WithRSAEncryption
78:a4:79:5e:78:70:a3:c6:f4:90:f4:e1:25:ab:66:b2:ec:a5:
38:33:37:4f:fd:60:9f:27:69:e2:7f:a2:d3:e7:ca:4b:49:99:
50:46:f3:26:4b:53:96:bf:12:fd:50:84:fb:1c:c7:a8:2f:83:
02:5a:de:46:7e:57:1a:40:b0:1c:27:64:6f:e8:c4:66:bf:00:
d6:40:d7:20:37:b3:53:03:97:a5:ec:08:80:77:46:63:1e:0e:
09:7f:f2:86:5d:a5:f1:02:91:7a:b9:20:43:ca:d8:1a:af:e6:
4c:d7:e3:da:f8:f5:5f:fb:27:15:65:d8:dd:5a:a5:5a:cc:81:
bc:df:40:13:16:00:04:00:b5:d6:0b:0f:c7:15:ed:27:2b:b4:
b7:31:a9:80:49:ab:d2:57:1b:97:f6:27:96:97:1c:c3:83:3d:
5e:06:c9:0f:54:f9:88:b0:4a:fb:7c:d9:7c:75:55:58:28:71:
e9:0d:da:f4:45:6a:92:dd:77:b6:6c:9d:e9:27:2f:ee:74:a1:
64:83:66:ca:6e:9f:4f:f0:b2:c7:cb:f9:15:c8:96:d8:79:84:
85:7d:3a:fc:88:23:9d:66:58:c3:41:37:6c:10:50:7f:da:2c:
0c:54:a9:1f:db:40:2f:39:3c:f4:9a:72:9a:89:f0:59:b3:5d:
db:4f:9d:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 06:58:48 2025 by rpki-client