Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366535303a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a366535303a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: VPz5ORcIwkJ1m/Wu9NcsjMKlR79fmA/uTwPPvLoCdVA=
Subject key identifier: EB:7A:A1:5C:05:C1:A3:A0:04:09:4B:99:4F:57:67:B7:34:31:A5:23
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 0268F3D6310AC9F7801C61790D419B9CEC9E0287
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366535303a3a2f34382d3438203d3e203136393039.roa
Signing time: Sat 08 Feb 2025 20:10:35 +0000
ROA not before: Sat 08 Feb 2025 20:05:35 +0000
ROA not after: Sat 07 Feb 2026 20:10:35 +0000
asID: 16909
IP address blocks: 2a14:7584:6e50::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 15 Feb 2025 20:42:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:68:f3:d6:31:0a:c9:f7:80:1c:61:79:0d:41:9b:9c:ec:9e:02:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Feb 8 20:05:35 2025 GMT
Not After : Feb 7 20:10:35 2026 GMT
Subject: CN=EB7AA15C05C1A3A004094B994F5767B73431A523
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:99:c5:25:57:b6:97:a4:aa:5d:9f:bd:54:0c:
53:42:3b:65:46:06:c0:0c:17:e3:08:20:29:e2:ac:
56:65:09:18:be:8b:19:29:0c:4c:b0:8b:d2:da:84:
3e:f9:0c:08:ff:d4:26:6a:2f:5f:32:b1:ac:24:c6:
6f:a8:75:95:1b:26:c7:12:f0:36:af:67:fe:d2:11:
60:1c:cc:f0:e5:8e:54:a4:4b:49:00:40:4e:a2:b0:
33:0f:0d:4a:1c:f5:f0:ad:ef:58:cf:7c:46:52:d3:
6b:8c:8d:88:8b:d7:cc:f3:a7:a8:b6:db:03:0c:52:
24:61:98:5d:27:f2:ee:b4:71:2a:ac:2e:60:96:1c:
fe:da:06:81:7e:a7:6d:41:13:89:c3:e4:fe:73:db:
7e:b1:64:ac:e2:39:84:1e:46:4b:17:b9:a9:4d:fb:
e0:b2:f6:e3:9b:15:a8:7f:d5:7d:a1:e9:e6:78:a3:
c3:11:2e:fb:04:39:c6:be:62:31:83:3a:b4:ac:3e:
62:00:7a:ef:ac:93:a2:57:08:fd:64:ff:c2:ba:94:
00:f6:76:33:78:d3:7f:f8:da:34:66:e3:14:29:03:
d8:5a:fa:57:62:e5:f0:f6:a9:67:5e:7b:11:81:01:
5d:b1:47:bb:f4:dc:01:7a:c4:ac:a0:7b:bf:b2:d6:
5c:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:7A:A1:5C:05:C1:A3:A0:04:09:4B:99:4F:57:67:B7:34:31:A5:23
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366535303a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6e50::/48
Signature Algorithm: sha256WithRSAEncryption
a4:40:9c:4e:6e:13:12:cb:e5:82:16:09:dd:14:fe:66:ae:ac:
af:43:d1:86:69:83:e6:f6:8f:b9:40:38:42:2f:4c:dc:bc:99:
3d:bf:46:bb:35:35:64:39:19:42:eb:4e:9a:2b:eb:81:bd:f3:
7a:4d:c4:a6:b9:c5:1c:a1:a5:dd:60:84:2a:7b:6f:eb:e4:dc:
e8:8a:a1:23:bc:bf:4b:3b:ea:e6:b5:f7:97:1a:d6:e4:9a:0d:
6b:1b:0d:0b:12:d5:33:d5:fe:2b:cc:5a:ba:8e:51:db:c0:14:
84:45:0e:27:54:e3:95:cc:f2:84:62:05:53:7c:d5:18:ba:24:
53:e9:df:49:56:4c:7c:4a:eb:50:98:a1:45:0b:7b:eb:97:2e:
8a:5a:13:ac:48:ee:67:fb:99:13:75:eb:4c:ae:ce:20:21:72:
21:48:6f:c0:6b:b5:d4:07:3a:c6:51:d5:e1:cb:b1:bf:c9:62:
79:e5:3b:5a:99:52:f6:64:f8:f2:7b:18:34:38:c3:ce:e6:43:
66:dc:78:0d:46:d5:80:e0:ca:8f:7b:2a:d0:18:4e:ca:5e:74:
76:ac:7a:c9:d4:5c:93:e8:83:39:4e:ec:9a:8c:f5:be:fd:1d:
91:a9:fc:18:21:1d:c8:d5:d5:c4:dc:91:41:06:76:73:50:b4:
91:8b:5a:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:46:05 2025 by rpki-client