Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363839303a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363839303a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: 29DJYH4UdXK0AJHnqlsiqYGauf4HusQIpofbesf4Sro=
Subject key identifier: D1:4F:B6:99:83:70:15:70:BC:20:F2:2A:F1:2B:B2:F4:F5:CC:AB:CF
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 0A79B4975659A96AB237BCD8BFF103ABC2ABAEA9
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363839303a3a2f34382d3438203d3e203136393039.roa
Signing time: Wed 22 Jan 2025 12:27:11 +0000
ROA not before: Wed 22 Jan 2025 12:22:11 +0000
ROA not after: Wed 21 Jan 2026 12:27:11 +0000
asID: 16909
IP address blocks: 2a14:7584:6890::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 01 Feb 2025 22:22:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:79:b4:97:56:59:a9:6a:b2:37:bc:d8:bf:f1:03:ab:c2:ab:ae:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Jan 22 12:22:11 2025 GMT
Not After : Jan 21 12:27:11 2026 GMT
Subject: CN=D14FB69983701570BC20F22AF12BB2F4F5CCABCF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:06:6e:3e:d4:84:81:76:aa:54:a3:04:f4:cf:
cd:6e:dc:e9:9a:91:68:09:64:36:44:8e:fc:07:a1:
ba:d2:e8:d0:fb:93:64:fd:ba:65:10:3f:93:85:48:
5b:16:bd:04:4c:95:74:15:06:73:47:b4:69:d8:0f:
00:e5:74:67:53:8a:4e:8d:c2:ef:29:ed:af:41:c0:
88:9e:49:20:32:2b:ff:ca:04:c0:ca:10:64:8e:c3:
87:05:b7:86:5c:ed:0b:84:25:5e:16:67:84:7f:7d:
51:13:d3:5d:cd:c2:56:15:4c:ed:b9:8f:a2:bf:ff:
4e:f1:df:06:c0:7d:15:ae:07:f2:74:c5:ac:60:8c:
cb:30:0a:76:e3:b1:01:20:1f:d9:1d:f4:38:28:6a:
85:5d:cc:1a:fa:53:80:2e:49:fd:19:2a:29:dd:cc:
71:15:b5:f4:93:47:38:40:b1:21:52:fd:21:ec:5d:
89:80:c9:82:a9:38:23:2d:4b:09:cf:93:83:42:9b:
ad:db:b5:64:9b:f4:56:31:c5:56:1b:8a:57:b4:af:
f4:b1:84:dc:9f:8d:f6:0d:ca:1e:a4:cf:71:23:24:
d1:5d:16:56:f1:c1:96:4b:c6:f0:1c:8c:0f:cc:e8:
08:b9:a6:2e:7d:46:28:0e:74:4a:4c:d3:3a:0f:81:
8f:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:4F:B6:99:83:70:15:70:BC:20:F2:2A:F1:2B:B2:F4:F5:CC:AB:CF
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363839303a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6890::/48
Signature Algorithm: sha256WithRSAEncryption
2a:2d:af:cc:20:d7:e2:f1:24:bf:81:e1:09:38:f0:c4:3d:2c:
e6:25:1d:71:f5:0c:ee:d4:8f:41:d9:32:20:e1:ad:07:32:de:
02:59:c2:16:04:36:ef:dd:4e:a3:df:cf:66:a3:e4:04:13:31:
75:e5:80:35:d9:4f:dc:e7:bd:ad:c4:03:d3:27:29:e3:9f:22:
66:f5:c1:09:4c:0e:c8:37:65:9f:d3:ad:dd:0a:61:0d:66:2c:
01:93:73:c5:23:d3:f6:ab:1a:8e:56:e7:b7:92:8c:97:e7:cf:
c8:1f:cb:d4:4f:05:6a:86:46:40:9b:6c:3d:9f:32:5d:05:44:
47:3c:9e:50:57:0c:ab:d7:ec:b7:f7:c0:82:e3:98:63:6b:13:
07:99:95:04:4b:19:9e:b3:48:1e:fa:0d:64:19:cc:48:b5:f4:
49:0d:ce:d0:56:43:db:f4:b3:e6:c6:b1:50:cf:63:fc:c5:5c:
03:ca:ee:f8:4b:24:98:28:7e:34:26:c6:31:29:41:5f:4a:b5:
7c:63:01:44:04:26:db:c2:33:26:56:bb:46:0e:99:7d:7a:f6:
83:72:80:3b:f0:1e:af:85:33:02:54:2d:90:6b:ea:4b:98:3d:
62:8a:4e:41:5b:f5:4b:ce:d2:00:34:44:c3:09:c2:07:23:db:
4c:24:19:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:50:28 2025 by rpki-client