Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366561303a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a366561303a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: EnI8ckyIlKcftfWzhgs+9Xicq5xo2/FwtL/wFtVupAs=
Subject key identifier: 5B:38:03:7D:50:14:BD:DE:14:39:5E:FA:CC:9E:86:69:68:25:63:0E
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 0EAB3B7C9D068EA38FBA5937F44B86171B5DABB0
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366561303a3a2f34382d3438203d3e203136393039.roa
Signing time: Sat 08 Feb 2025 20:11:01 +0000
ROA not before: Sat 08 Feb 2025 20:06:01 +0000
ROA not after: Sat 07 Feb 2026 20:11:01 +0000
asID: 16909
IP address blocks: 2a14:7584:6ea0::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 15 Feb 2025 20:42:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:ab:3b:7c:9d:06:8e:a3:8f:ba:59:37:f4:4b:86:17:1b:5d:ab:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Feb 8 20:06:01 2025 GMT
Not After : Feb 7 20:11:01 2026 GMT
Subject: CN=5B38037D5014BDDE14395EFACC9E86696825630E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:a3:ba:e3:a6:ae:d4:f5:c3:3b:06:8f:8b:b6:
b3:5e:2c:90:9e:d6:ee:7a:3a:54:27:60:fe:c6:17:
1d:cf:ee:95:c0:c2:2e:29:3d:8d:18:f8:62:46:a5:
c7:b3:17:8b:89:8f:22:17:90:67:33:70:86:6f:fd:
cd:b3:0d:cd:02:66:d5:24:41:f3:f0:25:80:3d:27:
c4:fe:c6:07:90:61:26:bc:a6:27:eb:ec:fc:74:a5:
73:46:1b:4a:e9:3a:3f:27:52:dc:de:dc:18:eb:2f:
da:a6:f3:c9:f9:c9:00:f4:86:0a:9e:e7:60:fa:c9:
49:75:f7:2a:93:e5:73:bf:b2:6c:76:a9:bc:9d:c3:
8b:76:f7:5a:ce:56:07:fb:01:3d:c4:11:b9:54:c6:
25:97:fd:a8:4f:63:e6:30:86:86:05:79:fd:01:aa:
ea:d6:b0:68:12:27:5f:bc:6e:4e:a5:54:89:a7:cc:
87:64:e9:71:50:50:00:c9:29:25:3c:08:1f:b8:0f:
f1:dd:36:02:f6:9d:44:36:aa:9d:ea:37:55:3a:95:
c9:77:16:44:9a:d5:de:16:b6:a4:8e:e7:cc:2c:39:
fc:a1:9c:5c:96:60:7a:f6:aa:f8:f4:6e:ca:ed:3a:
67:a4:43:53:98:e9:ad:28:77:86:44:6d:63:2f:9e:
67:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:38:03:7D:50:14:BD:DE:14:39:5E:FA:CC:9E:86:69:68:25:63:0E
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366561303a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6ea0::/48
Signature Algorithm: sha256WithRSAEncryption
b5:7b:11:c6:93:24:e5:1e:d3:0b:aa:90:e6:64:71:1e:0b:57:
4d:7f:f5:b2:70:fd:76:ca:3a:97:ba:9f:f9:39:49:ee:e9:c7:
dd:06:23:f1:a2:b8:a6:37:85:a5:e0:f9:b7:d5:8c:97:9d:99:
5b:20:99:04:c7:bd:43:4a:4c:e8:c8:09:f4:4a:f6:70:10:ea:
75:0f:b0:d1:be:8e:13:66:8e:4c:a3:9b:13:8c:3a:d6:52:50:
6e:ce:1b:85:f1:8c:d2:4c:fd:4d:8e:ba:96:47:ad:23:34:f7:
a2:7b:0d:95:43:5f:12:39:6d:68:75:9d:1f:83:54:90:b5:8c:
8e:a6:44:18:81:b6:d3:5d:2d:02:5c:e3:22:51:de:41:68:11:
df:6a:91:6d:26:91:8b:00:3b:44:46:27:c7:3b:28:73:4e:7d:
fd:c1:05:d8:1c:14:7e:40:00:83:c8:00:1c:5c:8f:a6:08:c3:
a6:93:49:94:7e:63:b6:be:97:4b:b4:10:cd:ec:0d:9f:e1:59:
22:9f:dc:e3:92:7b:fc:ea:28:67:a1:67:09:5b:ca:ad:b3:4d:
1a:33:71:16:93:80:cf:56:82:9e:d6:e2:9a:fc:4c:c8:90:5b:
72:0b:4a:61:f5:57:8b:a3:4b:e7:4a:cc:06:5e:38:61:5e:de:
ba:c9:8e:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:49:50 2025 by rpki-client