Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363935303a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363935303a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: ouHsq9PPZtc0+FrjkmiFHNFr5G/jghzD4M4VePjiUNU=
Subject key identifier: E0:23:67:60:35:9D:F7:C7:3E:53:D5:F0:50:04:41:40:C6:41:EA:2C
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 32D984281792EC7729EA9A6F6732AF19DFD1D6C6
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363935303a3a2f34382d3438203d3e203136393039.roa
Signing time: Fri 24 Jan 2025 11:27:55 +0000
ROA not before: Fri 24 Jan 2025 11:22:55 +0000
ROA not after: Fri 23 Jan 2026 11:27:55 +0000
asID: 16909
IP address blocks: 2a14:7584:6950::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 01 Feb 2025 21:48:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:d9:84:28:17:92:ec:77:29:ea:9a:6f:67:32:af:19:df:d1:d6:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Jan 24 11:22:55 2025 GMT
Not After : Jan 23 11:27:55 2026 GMT
Subject: CN=E0236760359DF7C73E53D5F050044140C641EA2C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:9f:2f:86:7b:1b:31:95:85:9b:72:33:d6:a4:
07:c5:34:1e:26:79:ff:3f:42:8c:75:ae:c2:04:3c:
70:5b:33:9a:ad:be:25:a6:0f:df:43:17:bb:96:15:
a1:fa:a6:68:55:33:f8:43:ad:7b:16:85:12:5a:04:
79:df:33:da:83:58:88:7e:c8:01:ed:ab:03:94:47:
0b:c3:e8:ab:6b:e6:2d:d2:09:a2:66:6c:8c:df:83:
47:3c:3f:55:42:47:cf:d9:4d:80:6e:ef:cf:8b:fd:
bd:73:e2:25:47:78:8e:be:62:c3:59:f1:ec:ec:ec:
f9:80:fc:3d:df:7f:8a:b8:e2:a1:3e:43:80:8a:6a:
02:a6:36:91:08:9e:25:ed:38:9f:be:3d:94:08:78:
50:6a:51:9e:74:47:9a:a3:95:ef:8a:5a:c7:c2:d4:
6c:35:69:bb:69:f6:62:94:39:cc:d0:7c:ea:e4:8a:
a4:aa:d1:05:a7:4f:e2:49:a5:39:3f:ea:6e:53:51:
ab:e1:9e:e6:06:70:44:06:54:54:90:0b:50:8a:2f:
e6:d1:18:5b:c1:0f:42:8b:a1:5b:30:a2:05:ea:ba:
9b:58:cc:de:fc:1f:d2:34:97:15:3a:c1:b7:52:7e:
75:cc:6c:20:63:e3:85:a5:63:a0:de:f5:e0:a7:71:
33:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:23:67:60:35:9D:F7:C7:3E:53:D5:F0:50:04:41:40:C6:41:EA:2C
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363935303a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6950::/48
Signature Algorithm: sha256WithRSAEncryption
35:75:ad:e6:a8:16:a9:02:3a:5d:02:e5:09:ca:3d:43:51:67:
b2:50:e2:61:63:f5:c2:e3:9f:6d:e7:5b:1d:df:93:5d:22:17:
48:e5:4a:4d:ad:75:2a:6a:56:8d:52:34:53:99:dc:59:0b:06:
90:22:eb:78:b6:91:a0:a4:2e:1a:94:e2:3c:96:f3:fe:8c:d1:
f8:07:f9:8b:3d:7a:ea:13:0e:a5:9e:3b:9f:9a:dc:dc:fb:11:
61:31:53:a9:5e:fc:b8:2c:9b:a4:1f:fc:9b:d9:49:c8:6d:5a:
5d:ae:dd:a3:29:eb:d1:21:fb:fb:d5:d4:37:29:69:3d:6a:a8:
6e:4a:ad:9e:d0:7d:7b:0d:70:fe:fe:a9:c2:60:a9:3c:d0:2a:
54:b6:c0:1c:d1:1a:23:53:48:81:8d:84:c5:84:a7:b1:3d:0e:
77:a4:4c:ea:50:d2:27:f2:60:d3:91:41:6c:db:24:27:fa:2e:
8f:20:ac:80:23:7a:45:eb:0a:39:4e:ca:b3:50:06:2b:a8:93:
e6:45:0a:23:3a:18:a0:40:e9:a5:e1:29:db:d2:c0:4b:fe:59:
81:f5:e6:6f:e2:eb:5a:f9:be:ad:f3:94:5e:05:c8:ab:77:fa:
29:45:75:8f:05:b7:16:50:f5:7b:da:7a:d7:fa:74:d2:0c:69:
0f:a3:f4:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:49:52 2025 by rpki-client