Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363831303a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363831303a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: BdsP+zd9+6IFom/8oC2GbaUSLQfKC96t0wtePPJXRHg=
Subject key identifier: E1:FA:56:C2:E6:01:A6:FC:11:ED:8E:65:13:CC:2D:1D:F7:A0:FE:0A
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 4177313611F5E75BD0A06936C5BAB409EE665E90
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363831303a3a2f34382d3438203d3e203136393039.roa
Signing time: Wed 22 Jan 2025 12:27:06 +0000
ROA not before: Wed 22 Jan 2025 12:22:06 +0000
ROA not after: Wed 21 Jan 2026 12:27:06 +0000
asID: 16909
IP address blocks: 2a14:7584:6810::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 01 Feb 2025 21:48:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:77:31:36:11:f5:e7:5b:d0:a0:69:36:c5:ba:b4:09:ee:66:5e:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Jan 22 12:22:06 2025 GMT
Not After : Jan 21 12:27:06 2026 GMT
Subject: CN=E1FA56C2E601A6FC11ED8E6513CC2D1DF7A0FE0A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:9e:10:b5:7a:51:87:33:48:4d:d1:32:da:20:
a9:bb:3b:9d:5f:46:b8:d7:8b:2d:f7:e8:f8:bb:5f:
a4:a9:fa:c5:3c:90:17:c7:2f:db:b7:55:57:f2:1d:
70:5f:12:94:4c:be:28:96:41:d4:96:64:8d:a9:b3:
cd:f3:09:e0:f1:e5:2e:d9:bf:87:9d:54:73:ab:d6:
69:c1:5c:bc:c2:7f:22:4b:42:7b:da:82:6d:cd:e1:
05:96:25:61:ca:ee:df:ee:1d:62:08:3d:27:7e:9c:
83:31:20:8c:a4:b4:6b:57:dd:49:3f:d4:c0:f7:94:
63:5e:9e:59:c8:7e:f1:2d:e6:db:43:20:9d:4c:05:
26:82:53:a0:3e:6b:74:bf:76:84:4c:73:b0:3c:85:
74:eb:e6:c4:6c:47:7f:68:82:fb:ca:2a:ec:88:de:
ad:70:86:ff:dd:a2:79:49:b3:dc:bf:77:51:c1:5c:
b4:09:0f:f3:d3:16:e4:fd:9e:ce:1e:bb:54:05:1c:
a6:d7:26:77:0d:0d:7d:7b:c2:ee:cb:31:cf:aa:c0:
06:41:2c:2d:ee:02:56:3f:d9:11:b8:b0:3d:f5:33:
c8:53:75:c3:31:80:a0:cc:98:b3:3d:88:2b:d7:92:
7d:e3:f1:32:31:2e:4c:d3:97:34:2e:e4:db:ce:c2:
2d:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:FA:56:C2:E6:01:A6:FC:11:ED:8E:65:13:CC:2D:1D:F7:A0:FE:0A
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363831303a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6810::/48
Signature Algorithm: sha256WithRSAEncryption
4f:7f:5b:fe:93:ac:12:42:b9:20:4d:e7:04:d5:a6:f1:97:ec:
11:55:b6:01:19:04:63:b0:28:9f:16:6a:79:74:07:d7:80:6d:
1b:75:06:1d:88:f2:4d:c7:33:12:a4:21:af:26:a3:b7:b1:6f:
e8:76:6f:0d:7e:31:85:8b:cf:d0:34:05:0d:5c:6e:28:cd:c9:
1c:06:92:a4:fd:3e:69:1b:bf:e6:c6:01:2a:51:7e:d3:01:6f:
8e:23:35:04:03:cd:bf:e2:15:87:dc:85:a2:dd:2c:f8:48:dc:
70:2a:1c:d7:fb:e7:41:6d:7b:e1:cc:0d:8c:4b:34:04:37:a1:
1d:b7:9d:75:dd:2f:e4:61:90:5a:7e:b7:9b:0e:65:2e:83:c8:
2c:3d:22:57:f4:1e:2f:f9:bd:2b:72:7e:73:9f:4a:8a:e3:a6:
82:7a:d6:e5:32:52:f7:56:30:40:f3:13:c7:43:03:62:19:fe:
c0:4b:9a:9f:01:3a:af:4d:e0:34:61:6e:8c:c6:80:2e:61:57:
8f:4a:1f:f6:65:9a:b2:17:aa:86:b0:e1:a4:77:74:bf:e7:f4:
fb:ff:62:95:ad:64:59:2c:bf:c1:11:02:af:6e:53:26:f6:4b:
24:a8:e0:9c:bd:be:b1:b7:9c:03:bd:4c:63:a2:9d:cb:d8:d0:
51:40:1e:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:50:21 2025 by rpki-client