Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366432303a3a2f34382d3438203d3e20343031353037.roa
File: 326131343a373538343a366432303a3a2f34382d3438203d3e20343031353037.roa (raw, json)
Hash identifier: geegGfajyKX9pYR20km5ZaF6WGYAubmcfM7pG8bujF8=
Subject key identifier: 7F:07:5E:FA:E4:3E:D8:27:BC:51:5D:E8:9D:23:E0:A6:E2:AC:0C:DF
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 04F85D60C86197F0A6F806086B2BDD52487888DC
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366432303a3a2f34382d3438203d3e20343031353037.roa
Signing time: Thu 06 Feb 2025 19:27:39 +0000
ROA not before: Thu 06 Feb 2025 19:22:39 +0000
ROA not after: Thu 05 Feb 2026 19:27:39 +0000
asID: 401507
IP address blocks: 2a14:7584:6d20::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 02 Mar 2025 15:21:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:f8:5d:60:c8:61:97:f0:a6:f8:06:08:6b:2b:dd:52:48:78:88:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Feb 6 19:22:39 2025 GMT
Not After : Feb 5 19:27:39 2026 GMT
Subject: CN=7F075EFAE43ED827BC515DE89D23E0A6E2AC0CDF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:fd:db:b1:ed:c8:86:b9:94:57:a2:32:38:0a:
eb:47:f5:0a:4d:1e:98:29:21:8d:b3:bc:6d:5d:15:
a8:cf:d8:6f:d3:58:65:2e:75:e7:7b:85:b2:a4:2f:
4f:0c:da:13:35:7d:bf:86:31:d9:b0:24:71:b4:04:
ef:3e:64:df:fe:6f:4c:73:c9:e0:21:dc:ab:90:5a:
1a:a6:4a:ac:db:35:9e:01:e7:fa:8d:1d:93:fe:d6:
6d:a6:c6:02:1a:c9:e9:79:38:79:c0:d5:41:7f:43:
d7:33:74:17:f0:a6:34:e0:ad:73:a2:dd:ae:49:f2:
d8:28:ca:4a:f8:a6:bf:9f:c4:30:f9:e7:b7:a7:c5:
fe:9a:1e:a0:9c:d6:93:3a:f9:68:78:8f:bd:9f:c4:
9a:fa:35:82:fb:27:95:ee:57:38:f7:a8:56:bf:3f:
38:bb:cd:10:c4:a2:6f:72:da:74:8c:65:ab:8e:c4:
dc:b1:ea:c7:91:dc:ac:b3:55:88:e2:6d:dd:37:57:
5c:b2:5a:f1:df:1c:06:6c:c4:0a:c4:13:9e:a3:70:
95:7c:42:18:b8:28:e3:82:03:83:d1:74:d9:14:d7:
5b:df:7a:5e:1c:df:bf:be:e9:e4:ec:15:77:6f:09:
b2:5d:29:3c:fb:59:e8:0d:02:a1:a5:cf:c3:b9:9a:
bd:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:07:5E:FA:E4:3E:D8:27:BC:51:5D:E8:9D:23:E0:A6:E2:AC:0C:DF
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366432303a3a2f34382d3438203d3e20343031353037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6d20::/48
Signature Algorithm: sha256WithRSAEncryption
a5:11:85:a4:c2:72:c0:15:98:18:50:c5:22:5a:0b:93:96:d1:
5d:c3:e4:a2:41:c5:0a:89:ed:1d:ec:c8:18:52:65:1f:90:8d:
81:49:10:c7:2d:1f:58:a4:0d:fe:be:70:04:72:d3:36:29:03:
6c:17:9a:fb:43:33:bc:9c:70:c6:03:6d:5d:b4:d2:28:43:3f:
25:d9:11:e1:3a:8a:c4:88:57:ef:76:fe:a5:e1:41:b9:81:84:
e1:6e:08:7f:d1:a2:6d:e9:3d:3a:11:a5:7b:5c:36:27:2c:79:
6e:49:c5:d2:6a:7c:5c:26:d6:00:0c:25:94:2f:aa:77:b7:95:
2a:56:49:70:4a:a0:1a:45:34:fe:ef:44:d1:a4:4b:74:49:c3:
56:46:51:c3:de:17:2e:8a:d6:49:f0:89:91:33:c9:bb:6a:71:
24:a0:28:98:50:62:58:9d:bd:68:d8:10:e0:ee:9e:ab:8c:8f:
9a:5f:10:56:30:8a:70:2b:fa:e2:49:a2:23:37:e6:6e:d5:fe:
48:17:ae:ca:76:51:c4:ff:56:47:a8:64:c5:f5:e9:1e:d9:c3:
de:df:b2:e0:1d:14:81:14:82:fe:4b:5a:8a:db:e5:46:b5:88:
77:5f:d7:2b:5f:44:2b:c3:f7:53:67:74:2d:01:cf:33:dc:ab:
0c:95:df:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:50:42 2025 by rpki-client