Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363838303a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363838303a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: 30j+zCYuMax2W9XHPP6jZUPzJBw8ystY6QJm0DnSJCE=
Subject key identifier: 27:8E:64:11:73:A4:AB:27:5E:7E:D6:E8:1B:8E:20:84:96:DF:6B:1E
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 0784C1EE1FF9D0FFC37F270E4C6A32C62E138352
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363838303a3a2f34382d3438203d3e203136393039.roa
Signing time: Wed 22 Jan 2025 12:27:10 +0000
ROA not before: Wed 22 Jan 2025 12:22:10 +0000
ROA not after: Wed 21 Jan 2026 12:27:10 +0000
asID: 16909
IP address blocks: 2a14:7584:6880::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 01 Feb 2025 21:48:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:84:c1:ee:1f:f9:d0:ff:c3:7f:27:0e:4c:6a:32:c6:2e:13:83:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Jan 22 12:22:10 2025 GMT
Not After : Jan 21 12:27:10 2026 GMT
Subject: CN=278E641173A4AB275E7ED6E81B8E208496DF6B1E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:19:47:89:81:55:0b:a8:07:04:88:97:b5:6a:
c5:8a:0b:55:f9:12:53:6c:07:4c:34:34:6d:12:77:
cc:2e:b2:ca:1a:93:76:2d:c4:37:19:7b:7a:c2:5b:
04:b5:cc:9f:e7:83:12:21:56:27:57:42:c7:b6:10:
65:f5:0a:d2:4c:22:b4:d7:51:0b:87:a8:bd:d5:64:
02:a0:e7:e6:2b:64:9f:75:ad:85:c6:61:57:f0:d7:
71:a4:26:1d:c0:ad:f6:26:41:85:ae:46:c4:ed:50:
5e:54:2c:a7:4c:44:4f:71:e7:56:6a:cb:05:c0:8c:
03:42:eb:b9:50:8f:1b:57:53:1e:5c:03:71:1e:fc:
14:a0:23:f8:6a:f6:ac:17:f7:aa:84:06:6d:87:15:
19:35:75:58:7d:fb:62:56:b8:24:30:85:cb:48:80:
d0:25:18:28:aa:1b:8c:0e:f5:bd:9f:91:fb:49:28:
23:ca:38:d8:52:57:83:62:08:16:a0:3c:8f:8b:76:
3b:68:f2:bb:fa:dd:f1:b9:98:03:83:b2:68:4e:9d:
3d:d4:47:e2:ab:a7:8e:d9:16:e7:75:45:d2:f8:62:
69:75:31:62:25:df:81:c8:6d:8e:f6:e0:27:d3:95:
6c:77:b6:41:60:be:5e:c8:f7:e9:10:ab:74:91:71:
85:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:8E:64:11:73:A4:AB:27:5E:7E:D6:E8:1B:8E:20:84:96:DF:6B:1E
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363838303a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6880::/48
Signature Algorithm: sha256WithRSAEncryption
26:83:0c:63:a9:c6:17:87:6b:38:3d:0a:a1:b8:64:5b:1b:94:
5d:5b:51:f9:85:e4:39:12:0a:89:36:12:3f:8a:14:c3:e8:a4:
0c:93:17:50:f1:e0:98:d7:04:09:b9:ce:67:f7:4d:df:42:a3:
01:d2:66:aa:05:7e:7a:8c:e7:23:72:1d:d3:c2:d0:86:80:3b:
1b:c5:9c:9e:ad:de:d6:f6:9f:9d:9b:85:23:94:b1:e0:73:9a:
49:28:5f:99:58:a3:ff:91:26:b2:f9:76:09:33:fd:1c:90:4d:
02:63:7b:0b:5d:01:d0:d4:60:94:8d:5e:c7:d5:fc:14:d7:b4:
c2:49:dc:1c:af:9b:2d:08:1a:86:72:a8:d1:80:f5:05:ce:1b:
85:3d:28:43:a8:fd:a1:7b:06:49:3d:0f:cf:df:99:70:b4:f1:
72:9b:4f:bc:c2:92:b8:53:d6:eb:c0:32:68:22:89:37:f6:0d:
e4:4d:d3:f1:cc:ae:df:15:32:36:67:c2:a4:25:51:aa:3a:99:
eb:e5:10:a8:2a:91:dd:b2:ab:31:fe:56:10:2e:60:39:fd:ab:
50:cd:a7:a6:0b:0a:13:9d:e8:98:e1:28:15:bc:6e:15:7d:01:
3c:aa:a0:12:ef:37:59:32:26:b8:e6:dc:af:b2:f9:06:21:e6:
0f:95:b4:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:50:31 2025 by rpki-client