Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363939303a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363939303a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: 3CPbwFAS2wD3soGf7WNuvvzmcAIOc05qcp8xVwsUdEk=
Subject key identifier: 80:9C:D7:03:1C:73:97:C2:FC:1E:9F:C1:D2:24:9F:32:3F:D3:43:48
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 09BB7E0852A8853FA1C7788081600BE2D31734AB
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363939303a3a2f34382d3438203d3e203136393039.roa
Signing time: Fri 24 Jan 2025 11:27:57 +0000
ROA not before: Fri 24 Jan 2025 11:22:57 +0000
ROA not after: Fri 23 Jan 2026 11:27:57 +0000
asID: 16909
IP address blocks: 2a14:7584:6990::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 01 Feb 2025 21:49:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:bb:7e:08:52:a8:85:3f:a1:c7:78:80:81:60:0b:e2:d3:17:34:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Jan 24 11:22:57 2025 GMT
Not After : Jan 23 11:27:57 2026 GMT
Subject: CN=809CD7031C7397C2FC1E9FC1D2249F323FD34348
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:b3:e6:06:71:d4:fe:15:4f:5a:0d:32:bd:a9:
b3:6e:43:c6:dd:28:4f:fd:d1:f5:7d:2c:87:c4:0f:
6e:8b:92:f5:a6:56:85:0e:a1:53:87:27:4f:e1:ad:
34:44:0c:e6:37:90:77:8c:91:65:75:60:2c:13:ba:
b0:e9:85:a7:20:e7:8a:90:b9:6b:d1:b5:a4:89:18:
e4:3b:7e:6a:74:17:f9:e4:d2:fa:8b:cb:67:be:51:
73:e6:02:06:c2:2a:30:7c:a5:17:ae:6d:6a:86:f0:
c9:7c:9c:20:9a:01:17:60:f0:82:a8:e2:b8:36:ff:
88:1f:94:18:d3:4e:3a:66:5e:b0:6b:a7:0c:54:be:
d9:6f:6d:31:e5:6a:86:18:a1:53:e3:0c:6e:91:8e:
34:40:0a:12:66:ae:01:dc:8c:25:a6:66:23:5b:03:
a3:a1:1c:cb:6e:7d:83:1f:07:2b:e6:ba:de:92:87:
37:e2:0c:e7:43:84:ef:44:f6:af:85:39:93:3d:83:
9a:6d:d3:98:48:d1:30:81:05:a9:7d:3e:86:fc:6e:
5b:e6:c2:ee:3d:eb:2e:cf:d3:57:be:b2:93:d4:da:
4d:7c:35:79:87:e1:86:2e:0e:bf:dd:84:76:40:52:
1b:27:69:f6:c7:bb:c4:30:2f:4c:14:4d:98:b9:5c:
20:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:9C:D7:03:1C:73:97:C2:FC:1E:9F:C1:D2:24:9F:32:3F:D3:43:48
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363939303a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6990::/48
Signature Algorithm: sha256WithRSAEncryption
82:3d:f1:4f:d7:fa:38:85:c7:87:25:b0:ac:60:fc:a7:32:b0:
a0:8d:a3:65:33:2d:ae:8a:af:e0:da:6d:c0:1b:34:04:b8:75:
56:b9:1b:88:fc:93:e2:80:64:f2:68:36:6f:f4:23:34:ed:77:
ca:6f:0a:b1:7d:8f:38:3d:d0:2e:d8:6e:5b:b5:64:e0:5c:36:
af:d3:47:81:01:7a:3b:19:40:5a:b8:27:fc:ea:03:f8:d7:ce:
17:c9:f6:8e:c3:68:98:9d:a3:7a:b5:b8:a9:60:b3:8e:f3:fd:
6a:07:5d:4f:d2:6c:fe:3e:01:84:1b:27:19:0b:ea:28:b8:1f:
22:e5:26:53:20:46:84:a0:53:2c:0c:30:45:cb:9e:63:74:1e:
55:4b:af:8a:4d:c4:8e:56:24:8e:2a:76:5d:78:3b:aa:05:19:
1e:71:f0:1c:a4:dc:3c:fd:9b:4a:78:19:94:e5:3a:c5:3b:b5:
ac:21:8f:91:54:4d:ae:6b:ce:11:5e:23:2e:7a:2e:9f:24:44:
01:f1:15:df:21:06:64:27:44:a8:25:b8:88:b6:78:4a:98:07:
9d:8c:6a:23:7b:70:df:8e:e4:52:4a:5b:50:43:cf:c0:9d:e9:
1c:2e:8b:8f:1a:7b:a7:9f:46:b5:33:2c:6e:07:8e:c3:b9:34:
9d:3c:6c:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:47:08 2025 by rpki-client