Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366163303a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a366163303a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: 1MEeJ8fZJYosQWZ8IVfh0L2W3QrMQVVdmAtUxVK9P30=
Subject key identifier: 0F:01:5D:89:CA:BE:A4:4E:09:78:F3:F0:C4:FC:0D:C4:51:FC:7A:80
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 5E25AA1A2BD41752C836B7E44F6D827808C20BB0
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366163303a3a2f34382d3438203d3e203136393039.roa
Signing time: Wed 29 Jan 2025 17:52:59 +0000
ROA not before: Wed 29 Jan 2025 17:47:59 +0000
ROA not after: Wed 28 Jan 2026 17:52:59 +0000
asID: 16909
IP address blocks: 2a14:7584:6ac0::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 10 Feb 2025 15:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:25:aa:1a:2b:d4:17:52:c8:36:b7:e4:4f:6d:82:78:08:c2:0b:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Jan 29 17:47:59 2025 GMT
Not After : Jan 28 17:52:59 2026 GMT
Subject: CN=0F015D89CABEA44E0978F3F0C4FC0DC451FC7A80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:66:be:17:99:ea:de:0c:7a:bb:22:cb:71:1a:
99:0f:0c:cf:f3:e7:49:fa:ad:47:d4:d9:5d:10:bb:
59:51:79:54:20:c7:d6:af:ef:67:cd:ba:85:f4:10:
40:ad:0c:e7:3b:32:0b:64:7b:45:b2:dd:9b:72:76:
8c:2d:d9:1a:f5:85:46:ac:8c:72:02:28:72:07:e6:
7b:54:36:7c:e5:4b:1a:7d:47:47:36:55:fa:49:c9:
38:99:8f:87:c7:ba:5f:e0:72:40:10:47:75:9b:97:
45:02:61:30:54:cc:ef:48:b6:0d:ee:dd:0f:b3:7e:
eb:04:09:8f:77:41:12:f9:17:f8:21:3d:c0:a4:98:
82:39:8f:d4:9c:ad:0a:c1:d0:5e:16:d6:94:df:b9:
6e:ba:fa:26:cd:8d:73:44:26:fb:af:e4:4c:fa:51:
12:2d:31:a4:44:06:42:4d:3b:bc:9f:82:e9:fa:dd:
01:01:c4:d2:f0:5b:f4:9e:08:5e:e5:a5:0c:54:ff:
0f:9e:78:21:ba:17:46:23:a9:7c:2a:b9:f3:66:42:
e3:1d:13:f8:3f:46:7a:cd:3e:b4:42:3a:58:3c:51:
17:81:9f:69:12:3b:b1:d9:10:c8:15:3a:27:3c:64:
72:bf:5c:fa:f6:2c:42:f2:c4:46:c7:4e:32:65:1b:
c4:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:01:5D:89:CA:BE:A4:4E:09:78:F3:F0:C4:FC:0D:C4:51:FC:7A:80
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366163303a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6ac0::/48
Signature Algorithm: sha256WithRSAEncryption
1b:7d:de:0e:5f:1f:d3:ec:14:f2:1b:2c:8a:82:44:17:0e:5a:
bd:55:6e:90:e7:ef:27:cf:a6:eb:de:38:47:1a:21:cc:a5:b4:
40:8b:f0:76:d4:16:3d:31:19:29:9a:2d:cd:92:7a:17:b7:a8:
79:c9:47:1a:f6:51:a1:f3:c1:ab:42:7e:61:ab:a0:ca:a5:78:
e2:8c:fa:bf:b7:47:73:ec:db:79:5d:33:d8:1b:95:55:08:d4:
ce:9e:5f:0c:63:f0:4b:65:b8:38:47:6f:bb:0e:d8:8b:87:ee:
2e:21:e7:e2:7e:e0:4c:3a:e8:a3:d6:ef:2c:21:d2:75:95:62:
da:3f:0c:01:fd:8f:ff:b9:09:dd:b5:a7:26:55:58:e9:7a:8e:
36:87:40:a3:d0:0b:8a:12:08:93:46:6a:89:a1:36:82:40:be:
91:7e:fb:16:20:a6:9a:d2:dd:52:52:f8:70:90:f0:f5:d9:05:
a3:5e:9b:1d:07:7f:f5:a1:59:4f:41:b6:1c:7e:cf:18:b4:60:
ac:49:80:cf:28:cd:d0:3c:6c:52:c1:7c:e3:ba:65:07:eb:fa:
25:4f:34:be:91:fb:23:10:41:c5:dd:76:87:89:eb:95:7d:b0:
a4:6a:5b:a8:b3:2e:74:84:84:1d:17:21:aa:6f:a4:e4:4c:29:
a3:6d:55:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:47:02 2025 by rpki-client